Warning: Permanently added '[localhost]:38102' (ECDSA) to the list of known hosts. 2025/01/29 04:12:18 fuzzer started 2025/01/29 04:12:18 dialing manager at localhost:40187 syzkaller login: [ 70.480647] cgroup: Unknown subsys name 'net' [ 70.579834] cgroup: Unknown subsys name 'cpuset' [ 70.607767] cgroup: Unknown subsys name 'rlimit' [ 76.203455] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.256367] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 04:12:36 syscalls: 2217 2025/01/29 04:12:36 code coverage: enabled 2025/01/29 04:12:36 comparison tracing: enabled 2025/01/29 04:12:36 extra coverage: enabled 2025/01/29 04:12:36 setuid sandbox: enabled 2025/01/29 04:12:36 namespace sandbox: enabled 2025/01/29 04:12:36 Android sandbox: enabled 2025/01/29 04:12:36 fault injection: enabled 2025/01/29 04:12:36 leak checking: enabled 2025/01/29 04:12:36 net packet injection: enabled 2025/01/29 04:12:36 net device setup: enabled 2025/01/29 04:12:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 04:12:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 04:12:36 USB emulation: enabled 2025/01/29 04:12:36 hci packet injection: enabled 2025/01/29 04:12:36 wifi device emulation: enabled 2025/01/29 04:12:36 802.15.4 emulation: enabled 2025/01/29 04:12:36 fetching corpus: 50, signal 18823/20350 (executing program) 2025/01/29 04:12:36 fetching corpus: 100, signal 24083/26861 (executing program) 2025/01/29 04:12:36 fetching corpus: 150, signal 28343/32136 (executing program) 2025/01/29 04:12:36 fetching corpus: 200, signal 31467/36227 (executing program) 2025/01/29 04:12:37 fetching corpus: 250, signal 34938/40475 (executing program) 2025/01/29 04:12:37 fetching corpus: 300, signal 37201/43502 (executing program) 2025/01/29 04:12:37 fetching corpus: 350, signal 39131/46098 (executing program) 2025/01/29 04:12:37 fetching corpus: 400, signal 40238/47954 (executing program) 2025/01/29 04:12:37 fetching corpus: 450, signal 41028/49499 (executing program) 2025/01/29 04:12:37 fetching corpus: 500, signal 43884/52528 (executing program) 2025/01/29 04:12:37 fetching corpus: 550, signal 44827/54060 (executing program) 2025/01/29 04:12:38 fetching corpus: 600, signal 47061/56455 (executing program) 2025/01/29 04:12:38 fetching corpus: 650, signal 47981/57861 (executing program) 2025/01/29 04:12:38 fetching corpus: 700, signal 49139/59370 (executing program) 2025/01/29 04:12:38 fetching corpus: 750, signal 49638/60416 (executing program) 2025/01/29 04:12:38 fetching corpus: 800, signal 50631/61727 (executing program) 2025/01/29 04:12:38 fetching corpus: 850, signal 51811/63048 (executing program) 2025/01/29 04:12:38 fetching corpus: 900, signal 52719/64170 (executing program) 2025/01/29 04:12:38 fetching corpus: 950, signal 53298/65087 (executing program) 2025/01/29 04:12:38 fetching corpus: 1000, signal 54043/66087 (executing program) 2025/01/29 04:12:39 fetching corpus: 1050, signal 55964/67565 (executing program) 2025/01/29 04:12:39 fetching corpus: 1100, signal 56331/68267 (executing program) 2025/01/29 04:12:39 fetching corpus: 1150, signal 56688/68952 (executing program) 2025/01/29 04:12:39 fetching corpus: 1200, signal 57133/69686 (executing program) 2025/01/29 04:12:39 fetching corpus: 1250, signal 57451/70349 (executing program) 2025/01/29 04:12:39 fetching corpus: 1300, signal 58523/71242 (executing program) 2025/01/29 04:12:39 fetching corpus: 1350, signal 58836/71859 (executing program) 2025/01/29 04:12:39 fetching corpus: 1355, signal 58877/72350 (executing program) 2025/01/29 04:12:39 fetching corpus: 1355, signal 58877/72838 (executing program) 2025/01/29 04:12:39 fetching corpus: 1355, signal 58877/73301 (executing program) 2025/01/29 04:12:39 fetching corpus: 1355, signal 58877/73802 (executing program) 2025/01/29 04:12:39 fetching corpus: 1355, signal 58877/74292 (executing program) 2025/01/29 04:12:39 fetching corpus: 1355, signal 58877/74752 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/75211 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/75681 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/76144 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/76622 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/77083 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/77414 (executing program) 2025/01/29 04:12:40 fetching corpus: 1355, signal 58877/77414 (executing program) 2025/01/29 04:12:43 starting 8 fuzzer processes 04:12:43 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800000, 0x4000010, 0xffffffffffffffff, 0x6697a000) read(0xffffffffffffffff, &(0x7f0000000000)=""/235, 0xeb) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x2}, 0x6}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) close(r1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000200)) r2 = accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x80800) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x6, 0x4, 0x3]}, &(0x7f0000000340)=0x44) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x22, 0x0, 0x0, 0x0, 0xf1, &(0x7f0000000380)='wg2\x00', 0xfffffffe, 0x0, 0x33a5}) r3 = signalfd4(r2, &(0x7f0000000440)={[0x6]}, 0x8, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}]}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000500)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000540)) signalfd(r1, &(0x7f0000000580)={[0x8]}, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000005c0)=0x3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600), 0x31dc02, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000740)=0xe8) fchown(r4, r5, 0xee01) 04:12:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x20, 0x8001}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x4, 0x10000, 0xbe7, 0x1, 0x2, 0x3536}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x9, 0x4) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x44002, 0x15, 0x4}, 0x18) ioctl$FIOCLEX(r1, 0x5451) r2 = syz_open_pts(r0, 0x200540) ioctl$KDDISABIO(r2, 0x4b37) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) tee(r1, r3, 0xffffffffffff8001, 0xa) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x2fcf3c62137c23c5, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000340)=0x1, 0x4) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000380)) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000480)) 04:12:43 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x1a7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r3 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4c000, 0xa1, 0x8}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x0) fstat(r4, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) dup3(r5, r3, 0x80000) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) r6 = open(&(0x7f00000003c0)='./file0\x00', 0x101040, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = openat$incfs(r6, &(0x7f0000000400)='.pending_reads\x00', 0x0, 0x60) statx(r7, &(0x7f0000000440)='./file0\x00', 0x100, 0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000800)=0xe8) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x3, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000600)="09121c1e908d34f83d8bbc51d18dc9ac37e40d1a0d017a1dcc49c01342d22b10a018280fe4dfda82ffda8f455239104689a3513c9e73d97a3173b2191678bc96960c49f320ff98efa7b10bb4f83e83e112b487977a65599a1d51808189dba16ff13e29d15e56572a4d9b08", 0x6b}, {&(0x7f0000000680)="db51eaa96a7e6ca94a98ead5e273d4ad2c3e5f59e5e7db077d1f4ed7", 0x1c, 0xfffffffffffff6a8}], 0xc4, &(0x7f0000000900)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x3a, 0x38]}}}}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x32, 0x36, 0x30, 0x1c]}}}}, {@huge_within_size}, {@gid={'gid', 0x3d, r8}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x48, 0x33, 0x6d, 0x6b, 0x38, 0x65]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x9e}}, {@mpol={'mpol', 0x3d, {'bind', '', @void}}}, {@huge_never}], [{@euid_eq={'euid', 0x3d, r9}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '/dev/rtc0\x00'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, '^'}}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x100}}, './file0\x00'}) ioctl$RTC_PIE_ON(r11, 0x7005) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001a80)={0x0, 0x6}) 04:12:43 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/74) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x1, 0x1, 0x3, 0x6, 0x3, 0x8ba}, {0x8, 0x3, 0xec, 0x6, 0x800, 0xffffffffffffff00}], ['\x00', '\x00', '\x00', '\x00']}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000280)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/139) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x5, 0x8, 0x4, 0x6, 0x3, [{0x7fff, 0xfc, 0x5, '\x00', 0x900}, {0x7, 0x1, 0x6, '\x00', 0x1484}, {0x0, 0x0, 0x8, '\x00', 0x40c}]}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) r2 = openat$cgroup_type(r0, &(0x7f00000005c0), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000600)={0x0, r2, 0x80000000, 0x4, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000640)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x80800, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000006c0)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0xa0000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000740)={0x3, 0x195, 0x2, 0x0, 0x0, [{{r4}, 0x61}, {{r1}, 0x74}]}) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x10600a0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '([:[+*)'}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@obj_user={'obj_user', 0x3d, '\x9b\xcc.'}}, {@subj_user={'subj_user', 0x3d, '-,@'}}, {@seclabel}]}}) preadv2(r4, &(0x7f0000000e40)=[{&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/251, 0xfb}, {&(0x7f0000000cc0)=""/154, 0x9a}, {&(0x7f0000000d80)=""/156, 0x9c}], 0x7, 0x0, 0xa9, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000ec0)=0x4) r5 = dup2(0xffffffffffffffff, r0) ioctl$CDROM_CLEAR_OPTIONS(r5, 0x5321, 0x0) signalfd4(r0, &(0x7f0000000f00)={[0x1]}, 0x8, 0x800) [ 94.559631] audit: type=1400 audit(1738123963.148:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:12:43 executing program 6: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)=']\\\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='##&[\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/114, 0x72}], 0x3, &(0x7f00000013c0)=""/198, 0xc6}, 0x9}, {{&(0x7f00000014c0)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001540)=""/141, 0x8d}, {&(0x7f0000001600)=""/61, 0x3d}, {&(0x7f0000001640)=""/130, 0x82}, {&(0x7f0000001700)=""/149, 0x95}], 0x4}}, {{&(0x7f0000001800)=@phonet, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/165, 0xa5}, {&(0x7f0000001940)=""/186, 0xba}], 0x2}, 0x3ff}, {{&(0x7f0000001a40)=@tipc=@id, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/69, 0x45}], 0x1}, 0x80000001}], 0x4, 0x2, 0x0) lchown(&(0x7f0000001c80)='./file0\x00', 0xee01, 0xffffffffffffffff) mkdir(&(0x7f0000001cc0)='./file0\x00', 0x150) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001d00)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) recvmsg(r1, &(0x7f0000002340)={&(0x7f0000001d80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e00)=""/16, 0x10}, {&(0x7f0000001e40)=""/249, 0xf9}, {&(0x7f0000001f40)=""/233, 0xe9}, {&(0x7f0000002040)=""/83, 0x53}, {&(0x7f00000020c0)=""/12, 0xc}, {&(0x7f0000002100)=""/247, 0xf7}], 0x6, &(0x7f0000002280)=""/147, 0x93}, 0x2) readv(r1, &(0x7f0000002440)=[{&(0x7f0000002380)=""/157, 0x9d}], 0x1) r2 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000002480)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r4 = dup(r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000024c0)='\x00', &(0x7f0000002500)=']\\\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002540)={'batadv_slave_0\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000002580)={0x0, 'nr0\x00', {0x2}, 0x1000}) 04:12:43 executing program 5: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x9, 0x8}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x101, 0x0, 0x20]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x0, 0x6, 0x0, 0x5, 0x4, 0x5}, {0x5, 0xfffffff9, 0x6, 0x7, 0x2, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) fcntl$addseals(r0, 0x409, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400050}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) ioctl(0xffffffffffffffff, 0xff, &(0x7f00000009c0)="b011f094409d57ab086f6cab262bc0d7406f7e8631d18cae446fcc3be5fd13941ccc624abdf5fba362ff1670029b51685d3eabf8d83809aea26697f70a80cc39b455b5ffc2aa8545dfeb18d33526ec6e90270b4c034bb4af631356720a7a7221fefe41bb1f6a649b328fe335b7ce0e58640ef698b5ac71491973dc0fcf3535c1c57c8395254d8b1c47d3968aa2ca38d1d77a7df6bbfc73878441f4c810b676d2e27e1e") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b80)={0x0, @local, @initdev}, &(0x7f0000000bc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xd6, 0x40, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x700, 0x726, 0x6, 0x8000}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d00)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x4, 0xc30, {{0x23, 0x4, 0x1, 0x29, 0x8c, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x3c, 0x52, 0x1, 0xb, [{@loopback, 0x1f}, {@private=0xa010102, 0x10000}, {@multicast2, 0x4}, {@multicast1, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x6}, {@local, 0x1}]}, @timestamp_addr={0x44, 0x3c, 0x1f, 0x1, 0xc, [{@broadcast, 0x200}, {@multicast2, 0x4}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010100, 0x4}, {@remote, 0xff}, {@remote, 0x140000}, {@loopback, 0x1}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000e00)={@remote, 0x0}, &(0x7f0000000e40)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'gretap0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x7, 0x80, {{0x35, 0x4, 0x2, 0x22, 0xd4, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @remote, {[@noop, @timestamp={0x44, 0x24, 0x10, 0x0, 0x6, [0x80, 0x4, 0x1ff8000, 0x9, 0x2, 0xff, 0x7, 0x5387]}, @timestamp_prespec={0x44, 0x3c, 0xbb, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@loopback, 0x80000001}, {@multicast1, 0x400}, {@broadcast, 0xdd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0xe3, 0x3, 0x4, [{@broadcast, 0x3ff}]}, @lsrr={0x83, 0x13, 0xe9, [@dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffeffff}, {@remote, 0xfff}]}, @rr={0x7, 0x1b, 0xc5, [@dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001080)={'erspan0\x00', &(0x7f0000000fc0)={'syztnl2\x00', 0x0, 0x8, 0x10, 0xff, 0x0, {{0x27, 0x4, 0x1, 0x1, 0x9c, 0x68, 0x0, 0xf6, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x68, 0x3, 0x5, [{@broadcast}, {@local, 0x7}, {@loopback, 0x1}, {@multicast2, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@broadcast, 0x1ff}]}, @ssrr={0x89, 0xf, 0xef, [@local, @empty, @private=0xa010102]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x30, [@empty, @empty]}, @generic={0x82, 0xc, "d70d86059b65c74f673e"}, @lsrr={0x83, 0x1f, 0xcb, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @rand_addr=0x64010102, @remote, @broadcast]}, @end, @lsrr={0x83, 0x7, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'sit0\x00', 0x0, 0x2f, 0x0, 0x80, 0x6, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x21, 0x40, 0xc000000}}) getpeername$packet(r0, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000011c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001340)={0x7cc, 0x0, 0x404, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x2bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3, 0x51, 0x5, 0x3}, {0x8, 0x7, 0x80, 0x52c}, {0x81, 0x9a, 0x3, 0x8}, {0x814c, 0x8, 0x8, 0x4}, {0x9, 0xea, 0xf9, 0x6}, {0x3, 0x7, 0x3}, {0x1000, 0x9, 0x80, 0x2}, {0x3ff, 0x8, 0x7c, 0x13e6}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x76, 0x7, 0x4}, {0xffff, 0xe5, 0x96, 0x101}, {0xfff, 0x3, 0x7, 0x20}, {0x6c, 0xcb, 0x5, 0x77e}, {0x5, 0x5b, 0xad, 0x7}, {0x20, 0x80, 0x20, 0x3}]}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x894}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x43}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x20, 0x7, 0x6}, {0x2, 0x55, 0x7, 0xffff7fff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff7f}}}]}}]}, 0x7cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 04:12:43 executing program 4: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10c, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3e}}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CT={0xb0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x704, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x727, 0x880) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x100, 0x0, 0x40, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = creat(&(0x7f0000000480)='./file0\x00', 0xc5) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}}}, [""]}, 0x38}}, 0x4010) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x414000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000640)={@local, @broadcast, 0x0}, &(0x7f0000000680)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x80) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a40)={0x3d8, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x60, 0x4, 0x10, 0x1, 0x5, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4, 0x7, 0x7ff, 0x8, 0x5, 0x8, 0x736a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x5, 0xf22d, 0x9, 0x1, 0x8001, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xa0f, 0x3, 0x0, 0x7, 0x9, 0xbe76, 0xd3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x5, 0x5, 0x3f, 0x1000, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x6, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x2, 0x2, 0x6c, 0x60, 0x6c, 0x24, 0x48, 0x16]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x5}, {0x3, 0x9}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x400, 0x0, 0x9, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x9}, {}, {0x3, 0x6}, {0x7, 0x9}, {0x7}, {0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x1, 0x7}, {0x5}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x5}, {0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x4}, {0x1}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x4}, {0x6, 0x9}]}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x7}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0x8}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x7}, {}, {0x3, 0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {}, {0x0, 0x1}, {0x5, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x48, 0x48, 0x12, 0xb, 0x30, 0x24, 0x9, 0x6c, 0x48, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x60, 0xb, 0x18, 0x5, 0x5, 0xb, 0x5, 0x0, 0x6c, 0x16, 0x0, 0x4, 0x1b, 0x18, 0x16, 0x4, 0x9, 0x48, 0xb, 0x36, 0x4, 0x6, 0xc, 0x8, 0x12, 0x5, 0x3, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x7, 0xa}, {0x3, 0x3}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x2}, {0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x1b, 0x9, 0x4, 0x60, 0x3, 0x5]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0xb, 0x1b, 0x64, 0x30, 0x5, 0x16]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x6, 0x7}, {0x2}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x3f, 0xe7, 0x1, 0x7fff, 0x9, 0x401]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x1b, 0x24, 0x4, 0x60, 0x30, 0xb, 0x0, 0x9, 0x12, 0xc, 0x6c, 0x6, 0x5, 0x4, 0x18, 0x9, 0x1b, 0x2, 0x6c, 0x0, 0x3, 0x9, 0x1b, 0x24, 0xb]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x7}, {0x2, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x48, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x3f8f, 0x6, 0x8, 0x5, 0x537, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x18, 0x6]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4033}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x13d, 0x9, 0x6, 0x3, 0x6, 0x8, 0x74]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x9}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x5, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x2, 0x8}, {}, {0x1}, {0x6, 0x4}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x1}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x6}, {}, {0x6, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x1, 0x800, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x5, 0x3, 0x6, 0xfffd, 0x2, 0x1ff]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x5, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x15}, {0x4}, {0x1, 0x2}, {0x7, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0x8, 0x872, 0x8000, 0x2, 0x8001, 0x8001]}}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x44011}, 0x8c04) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f40)={'ip6gre0\x00', r4, 0x2f, 0x9d, 0x7, 0x0, 0x34, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0x80000000, 0x6}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4800) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001240)=@ocfs2_parent={0x18, 0x2, {{0x6, 0x7, 0x5}, {0x3, 0x5, 0x912}}}, 0xa0000) 04:12:43 executing program 7: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) r0 = add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="71baf43de5871755d8ab9c5738693a4432129d3734859d37ad2b779f043f3c9d31e8f58d43d5a0cd245a81f90975246154e0837a0c9b2a8d9fdb7a08c64f4cffce58cfde9def8a86134d", 0x4a, 0x0) r1 = add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="41e56a28a5a173428508e6daa24143d6a28c49daef97076444c04eb82737b948f85063993349a9c17430fbe739f3200e2c2070dc3dda89385a93aa4861ea173e764d9553485a5afc76922f78f533bb6c475ccdcea38421de5a4c1358d47ea2a1282118dee29368109e9bbc8b757707411313df2b610d543ca63feb45bdf6f5c4dd97bae9f06b3114a2a945df5c8139", 0x8f, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "32d353b4e25bcfc4419d928fd107560360746b4e86e94ff2ebad3cca8f41038726f8ee49382747eedb43582cc087c912490e6943861bf5fe4309770c0113de6f", 0x17}, 0x48, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r2, 0x35, 0x9f}, &(0x7f0000000440)={'enc=', 'raw', ' hash=', {'ghash-ce-sync\x00'}}, &(0x7f00000004c0)="a4bc685f6f8eee048b1b981d3c69f067552d6e6491bc692fcda0de268eb7377e7aaaff355dfceaf79de60c8a0ee6f3d785fd024697", &(0x7f0000000500)=""/159) r3 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "782bbdb286aa209eaf812802d493535450d282d4e72f4f47b50654a8c951756aa46a305dd4431706f43e4c843173ab9973a161d73ddde8a04e38340c2d0b305e", 0x3f}, 0x48, r1) r4 = add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="891d7e0928c3c0f547515c963d2e0b8411b92be1baa0b643b9522935452f1eb98e88d355ca089c5fec48d21662f8c5bc6907cf31b3ce7e1749bab71150312b8af0ab6c6c79bad510fe23a141a0d9406c56c98aeb964f3d9125346daa7947f588", 0x60, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc1}, &(0x7f0000000980)={0x0, "f7cd5fdba8c2fe8143ea39a06f50dfc9c7d9c3e7fa0e7ba8c25b904f083cbb289b60f43a6bfe01f7606f6126dab88bf6f4dbe86a3f2d0f27cb49cf8ae80010e6", 0x3a}, 0x48, r0) add_key(&(0x7f00000007c0)='pkcs7_test\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)="46c412eb56d833ef99f94de687e4c7af2872d08777ad2379f265a3e92ef3175b453fe265ca5469667038420bfdc90e511fe015ff334748b808780fe1c152407b6f3e9d34e0e164707bd9fd79a7041d76b6b027ab17f126635884a781486dc625c85be52d94ae3e2c09c0fbd15f75e214e38bf6f4ac16d6b0b0ecf3224fc8821767b261f37b2c424c19647d10b9988cea9713eb885bfbd54b21a2576e0800392ba286ec8030e43da8c0ebbc", 0xab, r5) keyctl$negate(0xd, r5, 0xa1, r4) r6 = add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @desc4}, &(0x7f0000000b00)={0x0, "9f245789f1ce0edb845b6f7b4b820acb22308e6927003c7b3284e08315f0affd150e9ff32bf5158520d9da488c67ac90380ed3ed919b7e4653d1bc1563ea783b", 0x21}, 0x48, 0xfffffffffffffffa) keyctl$search(0xa, r1, &(0x7f0000000a00)='.request_key_auth\x00', &(0x7f0000000a40)={'syz', 0x3}, r6) r7 = add_key(&(0x7f0000000b80)='user\x00', &(0x7f0000000bc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$fscrypt_provisioning(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x0}, &(0x7f0000000d00)={0x4, 0x0, @d}, 0x18, 0xffffffffffffffff) keyctl$search(0xa, r8, &(0x7f0000000d40)='.request_key_auth\x00', &(0x7f0000000d80)={'syz', 0x0}, r7) r9 = add_key$keyring(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000e40), &(0x7f0000000e80)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$negate(0xd, r2, 0x0, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000ec0)={r4, 0x9d, 0x1000}, &(0x7f0000000f00)={'enc=', 'raw', ' hash=', {'sha224-generic\x00'}}, &(0x7f0000000f80)="312849a811f2254b8a89a990272bce19da6ed041b86e2f39de6458cf8e0eb35112fbda793ba4be5a997aec4b42a1b4473df81cd187d4e2f63e03223b089fcd4fa71ac9c2a9bb42cf676a7afdf1fc1dfae96c80be634218251f4354ed5d8c961fd93e39faea1470c5617626a2d0e5590c262208fff55ca71f6e5b44da208a4a0329051f1a27c1d0702e5bb8aadf5b653fbef839b975a5445702d380a6e6", &(0x7f0000001040)=""/4096) [ 95.925382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.932513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.938904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.947881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.951968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.953958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.956933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.974947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.987105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.014944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.024635] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.031082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.035924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.038036] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.041491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.047020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.048933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.050923] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.053029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.061101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.062911] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.066851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.068722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.075074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.082745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.089207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.097237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.104295] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.111114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.113046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.119498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.121063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.141497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.145846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.147873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.156850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.159125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.164460] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.171125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.172188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.174994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.182906] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.190865] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.194965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.215070] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.221104] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.223161] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.235499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.992498] Bluetooth: hci0: command tx timeout [ 98.185599] Bluetooth: hci1: command tx timeout [ 98.247663] Bluetooth: hci4: command tx timeout [ 98.248622] Bluetooth: hci6: command tx timeout [ 98.311678] Bluetooth: hci7: command tx timeout [ 98.311998] Bluetooth: hci5: command tx timeout [ 98.312252] Bluetooth: hci2: command tx timeout [ 98.313009] Bluetooth: hci3: command tx timeout [ 100.040697] Bluetooth: hci0: command tx timeout [ 100.231681] Bluetooth: hci1: command tx timeout [ 100.296598] Bluetooth: hci6: command tx timeout [ 100.297129] Bluetooth: hci4: command tx timeout [ 100.359612] Bluetooth: hci3: command tx timeout [ 100.360622] Bluetooth: hci2: command tx timeout [ 100.361100] Bluetooth: hci5: command tx timeout [ 100.361129] Bluetooth: hci7: command tx timeout [ 102.087684] Bluetooth: hci0: command tx timeout [ 102.279668] Bluetooth: hci1: command tx timeout [ 102.343882] Bluetooth: hci6: command tx timeout [ 102.344345] Bluetooth: hci4: command tx timeout [ 102.407775] Bluetooth: hci2: command tx timeout [ 102.407837] Bluetooth: hci5: command tx timeout [ 102.408238] Bluetooth: hci3: command tx timeout [ 102.409234] Bluetooth: hci7: command tx timeout [ 104.135619] Bluetooth: hci0: command tx timeout [ 104.327608] Bluetooth: hci1: command tx timeout [ 104.394670] Bluetooth: hci6: command tx timeout [ 104.395156] Bluetooth: hci4: command tx timeout [ 104.455624] Bluetooth: hci5: command tx timeout [ 104.456081] Bluetooth: hci7: command tx timeout [ 104.456316] Bluetooth: hci2: command tx timeout [ 104.456601] Bluetooth: hci3: command tx timeout [ 158.945944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.950270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.952570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.959961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.975345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.977393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.142993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.147239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.149762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.156816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.159811] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.161401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.194333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.199871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.202256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.215339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.217986] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.221466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.327817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.339928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.360236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.381431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.385474] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.391249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.412974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.418692] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 159.444239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 159.445400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.470693] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 159.475348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 159.478575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.484717] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 159.491350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.504359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.511841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.513919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.517689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.560926] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.561642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.563420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.565071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.567801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.581658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 159.582425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.591341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.596261] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.613701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 159.656005] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.032610] Bluetooth: hci0: command tx timeout [ 161.223730] Bluetooth: hci1: command tx timeout [ 161.288563] Bluetooth: hci2: command tx timeout [ 161.480638] Bluetooth: hci3: command tx timeout [ 161.608353] Bluetooth: hci4: command tx timeout [ 161.608411] Bluetooth: hci7: command tx timeout [ 161.735597] Bluetooth: hci5: command tx timeout [ 161.736682] Bluetooth: hci6: command tx timeout [ 163.081593] Bluetooth: hci0: command tx timeout [ 163.272888] Bluetooth: hci1: command tx timeout [ 163.335726] Bluetooth: hci2: command tx timeout [ 163.530088] Bluetooth: hci3: command tx timeout [ 163.655627] Bluetooth: hci7: command tx timeout [ 163.656166] Bluetooth: hci4: command tx timeout [ 163.783658] Bluetooth: hci6: command tx timeout [ 163.783696] Bluetooth: hci5: command tx timeout [ 165.129586] Bluetooth: hci0: command tx timeout [ 165.319651] Bluetooth: hci1: command tx timeout [ 165.383743] Bluetooth: hci2: command tx timeout [ 165.575703] Bluetooth: hci3: command tx timeout [ 165.703825] Bluetooth: hci4: command tx timeout [ 165.703856] Bluetooth: hci7: command tx timeout [ 165.832889] Bluetooth: hci6: command tx timeout [ 165.832918] Bluetooth: hci5: command tx timeout [ 167.176580] Bluetooth: hci0: command tx timeout [ 167.368720] Bluetooth: hci1: command tx timeout [ 167.432675] Bluetooth: hci2: command tx timeout [ 167.624649] Bluetooth: hci3: command tx timeout [ 167.753682] Bluetooth: hci7: command tx timeout [ 167.753832] Bluetooth: hci4: command tx timeout [ 167.879938] Bluetooth: hci6: command tx timeout [ 167.880461] Bluetooth: hci5: command tx timeout [ 219.028230] [ 219.028467] ====================================================== [ 219.028966] WARNING: possible circular locking dependency detected [ 219.029450] 6.13.0-next-20250128 #1 Not tainted [ 219.029830] ------------------------------------------------------ [ 219.030341] kworker/u8:1/64 is trying to acquire lock: [ 219.030796] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.031693] [ 219.031693] but task is already holding lock: [ 219.032453] ffff888035be0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 219.033237] [ 219.033237] which lock already depends on the new lock. [ 219.033237] [ 219.033969] [ 219.033969] the existing dependency chain (in reverse order) is: [ 219.035292] [ 219.035292] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 219.036413] __mutex_lock+0x13d/0xb50 [ 219.037207] wiphy_register+0x1b2e/0x25d0 [ 219.038194] ieee80211_register_hw+0x23a4/0x3d60 [ 219.039015] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 219.040492] init_mac80211_hwsim+0x389/0x870 [ 219.041269] do_one_initcall+0xf9/0x640 [ 219.042117] kernel_init_freeable+0x53d/0x7a0 [ 219.043062] kernel_init+0x1e/0x2d0 [ 219.043707] ret_from_fork+0x48/0x80 [ 219.044485] ret_from_fork_asm+0x1a/0x30 [ 219.045571] [ 219.045571] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 219.046077] __lock_acquire+0x29fd/0x4580 [ 219.046504] lock_acquire+0x19b/0x520 [ 219.046894] __mutex_lock+0x13d/0xb50 [ 219.047295] unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.047846] unregister_netdevice_queue+0x224/0x2e0 [ 219.048322] _cfg80211_unregister_wdev+0x57b/0x700 [ 219.048812] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 219.049291] ieee80211_unregister_hw+0x55/0x3a0 [ 219.049759] hwsim_exit_net+0x3a0/0x730 [ 219.050158] ops_exit_list+0xb3/0x180 [ 219.050564] cleanup_net+0x546/0xad0 [ 219.050955] process_one_work+0x8ee/0x1a10 [ 219.051398] worker_thread+0x674/0xe70 [ 219.051823] kthread+0x3ab/0x720 [ 219.052191] ret_from_fork+0x48/0x80 [ 219.052566] ret_from_fork_asm+0x1a/0x30 [ 219.052999] [ 219.052999] other info that might help us debug this: [ 219.052999] [ 219.053665] Possible unsafe locking scenario: [ 219.053665] [ 219.054157] CPU0 CPU1 [ 219.054566] ---- ---- [ 219.054958] lock(&rdev->wiphy.mtx); [ 219.055301] lock(rtnl_mutex); [ 219.055809] lock(&rdev->wiphy.mtx); [ 219.056347] lock(rtnl_mutex); [ 219.056662] [ 219.056662] *** DEADLOCK *** [ 219.056662] [ 219.057151] 4 locks held by kworker/u8:1/64: [ 219.057541] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 219.058429] #1: ffff88800ed0fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 219.059284] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 219.060074] #3: ffff888035be0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 219.060955] [ 219.060955] stack backtrace: [ 219.061334] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250128 #1 [ 219.061371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 219.061394] Workqueue: netns cleanup_net [ 219.061435] Call Trace: [ 219.061445] [ 219.061461] dump_stack_lvl+0xca/0x120 [ 219.061528] print_circular_bug+0x47b/0x750 [ 219.061574] check_noncircular+0x2e9/0x3c0 [ 219.061616] ? __pfx_check_noncircular+0x10/0x10 [ 219.061658] ? hlock_class+0x4e/0x130 [ 219.061689] ? mark_lock+0xac/0xed0 [ 219.061729] ? srso_return_thunk+0x5/0x5f [ 219.061785] ? timerqueue_del+0x83/0x150 [ 219.061829] ? lockdep_lock+0xba/0x1b0 [ 219.061887] ? __pfx_lockdep_lock+0x10/0x10 [ 219.061949] __lock_acquire+0x29fd/0x4580 [ 219.062003] ? __pfx___lock_acquire+0x10/0x10 [ 219.062046] ? lock_release+0x20f/0x6f0 [ 219.062090] ? __pfx_lock_release+0x10/0x10 [ 219.062138] lock_acquire+0x19b/0x520 [ 219.062181] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.062230] ? __pfx_lock_acquire+0x10/0x10 [ 219.062287] ? srso_return_thunk+0x5/0x5f [ 219.062343] ? lock_release+0x20f/0x6f0 [ 219.062387] ? srso_return_thunk+0x5/0x5f [ 219.062442] ? lock_is_held_type+0x9e/0x120 [ 219.062506] ? srso_return_thunk+0x5/0x5f [ 219.062565] __mutex_lock+0x13d/0xb50 [ 219.062618] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.062663] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.062709] ? srso_return_thunk+0x5/0x5f [ 219.062765] ? synchronize_rcu_expedited+0x38a/0x420 [ 219.062810] ? __pfx___mutex_lock+0x10/0x10 [ 219.062864] ? __pfx_autoremove_wake_function+0x10/0x10 [ 219.062919] ? srso_return_thunk+0x5/0x5f [ 219.062975] ? kasan_quarantine_put+0x84/0x1e0 [ 219.063036] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 219.063071] ? srso_return_thunk+0x5/0x5f [ 219.063131] unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.063177] ? __virt_addr_valid+0x2e8/0x5d0 [ 219.063230] ? __pfx_lock_release+0x10/0x10 [ 219.063275] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 219.063321] ? find_held_lock+0x2c/0x110 [ 219.063379] ? srso_return_thunk+0x5/0x5f [ 219.063437] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 219.063504] ? srso_return_thunk+0x5/0x5f [ 219.063560] ? lock_release+0x20f/0x6f0 [ 219.063604] ? __pfx_lock_release+0x10/0x10 [ 219.063647] ? srso_return_thunk+0x5/0x5f [ 219.063703] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 219.063750] ? srso_return_thunk+0x5/0x5f [ 219.063811] unregister_netdevice_queue+0x224/0x2e0 [ 219.063855] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 219.063899] ? up_write+0x195/0x520 [ 219.063954] _cfg80211_unregister_wdev+0x57b/0x700 [ 219.064007] ? srso_return_thunk+0x5/0x5f [ 219.064066] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 219.064105] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 219.064144] ? srso_return_thunk+0x5/0x5f [ 219.064199] ? srso_return_thunk+0x5/0x5f [ 219.064255] ? synchronize_rcu+0x1ff/0x260 [ 219.064298] ieee80211_unregister_hw+0x55/0x3a0 [ 219.064343] hwsim_exit_net+0x3a0/0x730 [ 219.064385] ? __pfx_hwsim_exit_net+0x10/0x10 [ 219.064425] ? srso_return_thunk+0x5/0x5f [ 219.064487] ? netdev_run_todo+0x788/0x1040 [ 219.064536] ? __pfx_hwsim_exit_net+0x10/0x10 [ 219.064579] ops_exit_list+0xb3/0x180 [ 219.064621] cleanup_net+0x546/0xad0 [ 219.064666] ? __pfx_cleanup_net+0x10/0x10 [ 219.064720] process_one_work+0x8ee/0x1a10 [ 219.064785] ? __pfx_lock_acquire+0x10/0x10 [ 219.064830] ? __pfx_process_one_work+0x10/0x10 [ 219.064888] ? srso_return_thunk+0x5/0x5f [ 219.064944] ? move_linked_works+0x172/0x270 [ 219.064989] ? srso_return_thunk+0x5/0x5f [ 219.065045] ? assign_work+0x196/0x240 [ 219.065102] worker_thread+0x674/0xe70 [ 219.065160] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 219.065212] ? srso_return_thunk+0x5/0x5f [ 219.065268] ? __pfx_worker_thread+0x10/0x10 [ 219.065328] kthread+0x3ab/0x720 [ 219.065379] ? __pfx_kthread+0x10/0x10 [ 219.065431] ? srso_return_thunk+0x5/0x5f [ 219.065497] ? finish_task_switch.isra.0+0x206/0x840 [ 219.065549] ? __pfx_kthread+0x10/0x10 [ 219.065603] ret_from_fork+0x48/0x80 [ 219.065634] ? __pfx_kthread+0x10/0x10 [ 219.065687] ret_from_fork_asm+0x1a/0x30 [ 219.065753] [ 220.560074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.562679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.567778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.571418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.573990] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.576053] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.624901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.627908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.629860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.634734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.637356] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.638629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.693449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.695423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.697027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.701624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.703406] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.704692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.761266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.762926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.763931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.765558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.768133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.769973] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.771781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.773777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.791199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.793593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.795228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.796838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.886863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.896235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.897230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.910767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.910792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.923392] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.956874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.960721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.963702] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.965049] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.968784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.972294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.973285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.976897] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.977027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.979070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.986669] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.990901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.599526] Bluetooth: hci0: command tx timeout [ 222.664575] Bluetooth: hci1: command tx timeout [ 222.728571] Bluetooth: hci2: command tx timeout [ 222.791521] Bluetooth: hci3: command tx timeout [ 222.856523] Bluetooth: hci4: command tx timeout [ 223.047749] Bluetooth: hci5: command tx timeout [ 223.048288] Bluetooth: hci6: command tx timeout [ 223.113510] Bluetooth: hci7: command tx timeout [ 224.647585] Bluetooth: hci0: command tx timeout [ 224.712533] Bluetooth: hci1: command tx timeout [ 224.776728] Bluetooth: hci2: command tx timeout [ 224.840598] Bluetooth: hci3: command tx timeout [ 224.904608] Bluetooth: hci4: command tx timeout [ 225.096562] Bluetooth: hci6: command tx timeout [ 225.097016] Bluetooth: hci5: command tx timeout [ 225.160597] Bluetooth: hci7: command tx timeout [ 226.696709] Bluetooth: hci0: command tx timeout [ 226.761279] Bluetooth: hci1: command tx timeout [ 226.824899] Bluetooth: hci2: command tx timeout [ 226.888635] Bluetooth: hci3: command tx timeout [ 226.952554] Bluetooth: hci4: command tx timeout [ 227.144162] Bluetooth: hci5: command tx timeout [ 227.144909] Bluetooth: hci6: command tx timeout [ 227.208562] Bluetooth: hci7: command tx timeout [ 228.745329] Bluetooth: hci0: command tx timeout [ 228.808733] Bluetooth: hci1: command tx timeout [ 228.872568] Bluetooth: hci2: command tx timeout [ 228.936526] Bluetooth: hci3: command tx timeout [ 228.999571] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 04:14:47 Registers: info registers vcpu 0 RAX=ffff8880124acbe0 RBX=ffffffff8861c798 RCX=ffffffff81429a8a RDX=ffff888011e9d270 RSI=0000000000000001 RDI=ffff88806c8b8430 RBP=ffff88806c8b8430 RSP=ffff88800f1a7da0 R8 =0000000000000000 R9 =ffffed1001df2900 R10=ffff88800ef94807 R11=ffff88800ed02078 R12=ffff8880124b2ad0 R13=ffffffff8861c798 R14=ffff88800ed01bc0 R15=0000000000000086 RIP=ffffffff81aeecd9 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3dd459ee80 CR3=000000000e2f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000ffffffff0000557af9514b40 XMM05=0000557af950b9000000557af94fe580 XMM06=0000557af94fe5c00000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000020000020000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800ed0eca0 R8 =0000000000000000 R9 =ffffed1001c89046 R10=000000000000005d R11=303378302f612020 R12=000000000000005d R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5ed94d2d10 CR3=0000000014cf8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=aa97c0ae1ee0b9bc214f4c0e2b4ea4f8 XMM02=00000000000fd6a8a3797342f9eb3dd9 XMM03=00000000000fd92068a8aee3740b9fad XMM04=ef83746328e8003c00000000000ae988 XMM05=8045d17f5487d372000000000013f748 XMM06=6098c19552daab490000000000115cd8 XMM07=ea899072da79512f00000000000fd920 XMM08=d12871896912de2d00000000000fd6a8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000