Warning: Permanently added '[localhost]:31006' (ECDSA) to the list of known hosts. 2025/01/19 08:51:07 fuzzer started 2025/01/19 08:51:07 dialing manager at localhost:44245 syzkaller login: [ 62.899356] cgroup: Unknown subsys name 'net' [ 63.009938] cgroup: Unknown subsys name 'cpuset' [ 63.046494] cgroup: Unknown subsys name 'rlimit' [ 70.181000] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 81.745511] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 08:51:27 syscalls: 207 2025/01/19 08:51:27 code coverage: enabled 2025/01/19 08:51:27 comparison tracing: enabled 2025/01/19 08:51:27 extra coverage: enabled 2025/01/19 08:51:27 setuid sandbox: enabled 2025/01/19 08:51:27 namespace sandbox: enabled 2025/01/19 08:51:27 Android sandbox: enabled 2025/01/19 08:51:27 fault injection: enabled 2025/01/19 08:51:27 leak checking: enabled 2025/01/19 08:51:27 net packet injection: enabled 2025/01/19 08:51:27 net device setup: enabled 2025/01/19 08:51:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 08:51:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 08:51:27 USB emulation: enabled 2025/01/19 08:51:27 hci packet injection: enabled 2025/01/19 08:51:27 wifi device emulation: enabled 2025/01/19 08:51:27 802.15.4 emulation: enabled 2025/01/19 08:51:27 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 08:51:29 starting 8 fuzzer processes 08:51:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) iopl(0x6) r1 = geteuid() timer_getoverrun(0x0) timer_delete(0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) iopl(0x7a) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc09f, 0xfffffffffffffffa, 0x0, 0xa, 0x15, 0x10, "3595aedc51de0977d0efdc47faea2cb333ec629776058cb18e1e923b994a21fb29da0d9ec15a4c122933ec465e00cc9b69e4c8d6c3894bf4553adb73889c9eed", "05ae6d369db564a949b6642b411c81f3d9b359b66a1fcf83438228da029fff7d50834a454e98808e0e31a1c04ccbf408125fe65fc160d829ce35b38fe40aad0b", "6d63b1003b2ad9873692cbb82e585cfd2d80b6a6faef157e0ea988cd110696dc", [0x81, 0xf48]}) munlockall() iopl(0x2) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xee}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8851}, 0x20000000) iopl(0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000340)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000380)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) munlockall() 08:51:29 executing program 1: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1d9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x48010) ioprio_get$uid(0x0, 0xee01) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffff8) keyctl$reject(0x13, 0x0, 0xffffffff80000001, 0x1, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socketpair(0x22, 0x2, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x50c4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0xc081}, 0x800) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x288cc1, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000500)={0x0, "f219585d86d520ddb33322d35507a8ccdfc47acd00ac3c01c207280bfe52bdabd6367979b05448db4857f896aab1a7262cc0492d588384aabea63c65666f6851", 0x3c}, 0x48, r0) r5 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc3}, &(0x7f0000000680)={0x0, "d7615c8f29e15dcc9da6a4178f3f666a0fdbda31deeaaffa6dfa0947cbc1c8333c0a7d595f51335d7ddb3920eb228945a31d244dc3572f4df335a8fd0c50d380", 0x2d}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r4, &(0x7f0000000580)='.dead\x00', &(0x7f00000005c0)={'syz', 0x2}, r5) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "0debdd348b2d2a49f3db87213b82030735f8603a53381ff30c51353b262bd1dfbcc290b7c59f067122b310015bb1b3defb4f05ca1b969a149036c71a09df44a9", 0x21}, 0x48, r4) keyctl$unlink(0x9, r0, r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa1e}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc99}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffe0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000940)='blacklist\x00', &(0x7f0000000980)='syz') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xf8, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xcef}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x13800000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x51}, 0x800) 08:51:29 executing program 2: r0 = gettid() ptrace$cont(0x7, r0, 0x0, 0x9) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x2, @tid=r2}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000000c0)={{r4, r5+60000000}, {0x77359400}}, &(0x7f0000000100)) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1fffe000, 0x6e}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x3f, 0x5}, {0x7f, 0x6}, {0x1, 0x7}, {}, {0xd, 0x2}, {0x20, 0x3}, {0x1, 0x7}, {0x40, 0x4}, {0x9, 0x5}, {0x51, 0x3}, {0x0, 0x2}], "d48a7528628a794a"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x6}, {0x3, 0x3}], "5cc0a5f93dae174f"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x7, 0x6}, {0x81, 0x3}, {0x1f, 0x7}, {0x8, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x6}], "1927f61be321dc3e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x6}, {0x3, 0x1}, {0x80, 0x3}, {0x3}, {0x0, 0x4}, {0x40, 0x1}, {0xff, 0x4}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x40, 0x5}, {0xff, 0x2}, {0x0, 0x2}, {0xc0, 0x2}, {0x7f, 0x7}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x6}], "c849ef7ac84bc6a6"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xf7, 0x3}, {0x7, 0x7}, {0x1, 0x6}, {0xff, 0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x5}, {0x80, 0x5}, {0x6, 0x5}, {0x6, 0x1}, {0x8, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x7f, 0x3}], "d63e6efd077cffce"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x6, 0x6}, {0x76, 0x2}, {0x9}, {0x1, 0x2}, {0x3, 0x2}, {0x5d, 0x6}, {0xf9, 0x7}, {0x0, 0x5}, {0x3f, 0x4}], "ce75bc388bc4341f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x5}], "ab6142293e165a49"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x6c, 0x1}, {0xb8, 0x5}, {0xa5, 0x3}, {0xff, 0x1}, {0xf9}, {0xff, 0x4}, {0x0, 0x4}, {0x20, 0x7}, {0x2, 0x4}, {0x0, 0x6}, {0xe1}], "2190ca40ccdb3633"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x7}, {0x0, 0x4}, {0x47, 0x2}, {0x56, 0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x2}, {0xfa, 0x6}, {0x1, 0x3}, {0xac, 0x6}, {0x7f, 0x7}, {0x49, 0x1}], "1f9d1790efb594aa"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x529500, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x100, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1064}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9a345a892a69"}, @NL80211_ATTR_IE={0xb0, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @tim={0x5, 0xa7, {0x8, 0x21, 0x3, "bca06ba9902115436a9257b1f0d58aa46f74c88e795ed0b57beaca4c2c9174f32fdbd797de65c78e6f8c2287d710bc5444dbd0c38aa74aa68f008e3ea6aacf001faf8c9facb1db5e0b88441b3b89e9f107f89b1525d4583c67a4c2f24a4a84d57a3c4979d218f4ab05de2412010b432e34d7a22630cdf7d4e957cf41a08e3a1248d1cf97baa03b43d8c7905848253392a247a0aff42c2bcc4fd84dbd01e4dc6f63f0c57a"}}]}, @NL80211_ATTR_SSID={0x18, 0x34, @random="4929081825c93e922f652fe12a8fa5a3dca2085b"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}]}, 0x100}, 0x1, 0x0, 0x0, 0x90}, 0x800) sysinfo(&(0x7f0000000680)=""/147) r9 = getpgid(r2) ptrace$setopts(0x4200, r9, 0x7f, 0x4) socketpair(0x21, 0x5, 0x1ff, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8055}, 0x4) 08:51:29 executing program 3: r0 = getpgrp(0x0) rt_tgsigqueueinfo(0x0, r0, 0x21, &(0x7f0000000000)={0x2f, 0x7, 0x7}) r1 = getpid() ptrace$cont(0x7, r1, 0x9, 0x1) sched_rr_get_interval(r0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x5, 0x52) r2 = getpgrp(r1) rt_tgsigqueueinfo(r0, r2, 0x2d, &(0x7f00000000c0)={0x1e, 0x2, 0x49137911}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x0, 0x20, 0xc3f, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x20004801) waitid(0x2, r1, &(0x7f0000000300), 0x40000000, &(0x7f0000000380)) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48844}, 0x4000) rt_tgsigqueueinfo(r0, r1, 0xe, &(0x7f0000000540)={0x34, 0x6, 0x2}) ptrace$setopts(0x4200, r0, 0x100, 0x8) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000005c0), 0x8, &(0x7f0000000640)) r4 = getpgrp(r2) waitid(0x0, r4, &(0x7f0000000700), 0x2, &(0x7f0000000780)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe4, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r5 = getpgid(r2) sched_rr_get_interval(r5, &(0x7f0000000a00)) [ 84.188065] audit: type=1400 audit(1737276689.638:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:51:29 executing program 5: r0 = socket(0x1e, 0x5, 0xd06) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000010) socketpair(0x5, 0x4, 0x2b, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4088000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xae}]}, 0x50}}, 0x1) keyctl$reject(0x13, 0x0, 0x0, 0x4, 0xfffffffffffffffb) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x801) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000003c0)) r4 = socket(0x1f, 0x80000, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4) socketpair(0x28, 0xa, 0x4, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x1b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x100, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xec, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xe0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7c5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x26, 0x1, 0x81) getsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f0000000900), &(0x7f0000000940)=0x4) 08:51:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x118, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7cc}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x5) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x28}}, 0x20000800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200400, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x10, 0x20, 0xd3, 0xffff69de, {{0x24, 0x4, 0x2, 0x5, 0x90, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0xfb, 0x1, 0x4, [{@rand_addr=0x64010102, 0x7fff}, {@multicast2, 0xff}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@multicast2}]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0x8, [0xffffd523, 0x93ab]}, @rr={0x7, 0x1f, 0x17, [@remote, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2]}, @end, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x8, [{@empty, 0x5}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x1}, {@local, 0xd63}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0x80, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x68, 0x0, 0x20, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp={0x44, 0x24, 0x8e, 0x0, 0xf, [0xaf, 0x8, 0x1, 0x34b, 0x9, 0x6, 0x0, 0x2a]}, @generic={0x83, 0x10, "b81b211d09bf24a5c2838c63f036"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0xfffffff8, 0x4, {{0x3f, 0x4, 0x3, 0x2, 0xfc, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local, {[@timestamp_addr={0x44, 0x14, 0xc7, 0x1, 0x6, [{@multicast2, 0x1f}, {@rand_addr=0x64010100, 0x7}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x3c, 0x1, 0x6, [{@broadcast, 0x9}, {@empty, 0x693a}, {@private=0xa010100, 0xfff}, {@rand_addr=0x64010100, 0x40000000}, {@local, 0x3}, {@remote, 0x8}, {@loopback}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0xda, 0x3, 0xb, [{@private=0xa010100, 0x7}, {@multicast1, 0x1}, {@multicast2, 0xcc}, {@private=0xa010101, 0x7b}]}, @timestamp={0x44, 0x24, 0x7e, 0x0, 0x4, [0x0, 0x1000, 0x3ff, 0xe8, 0x9a, 0x81, 0x3, 0xd8]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0x6, [{@remote, 0xffff}, {@remote, 0x401}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x4}, {@multicast1, 0x8}, {@broadcast, 0x401}, {@empty, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000000900)={0xbac, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r7}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3000000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7265}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x381, 0x67, 0x1f, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x2, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), r0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x40, r14, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x50) 08:51:29 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x6e535e3c96b98cfe}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x88}}, 0x8044) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x81) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x50}, 0x800) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x7168d2a3c877cd73) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x44}}, 0x24040000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c800) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1000}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x74, 0x0, 0x400, 0x70bd2a, 0x3f, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0x2000c014) 08:51:29 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x3e, &(0x7f0000000000)={0x1d, 0x5, 0xfffffff9}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x6, &(0x7f0000000080)=""/139, &(0x7f0000000140)=0x8b) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x90140, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x4, 0x13, 0x0, "1a805a14aa947b788eaec4ea804732e6ef9c9815b2b9d238992fb572094bfb7ca0874ef414e6279b9898a98fdeee7b7044e0d411dcd9d1174092de84741b43ca", "be12ed4ecb5b4bd67641b930d65d7611593b63ec46a1d12a29cf277de52eb69557330ae619c7f4af29d3669bc00ce4dff2de0831e8f81473de3f33ce2396ca35", "72fba9b0fe0fb810c45333dbf1f56f305d4dbf995f206cc34e3755f55ef1877a", [0x9, 0x4]}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x9, @local, 0x8}}, 0x0, 0x0, 0x48, 0x0, "9288c9fdc80affcc858969f17125f0e977b1a5c87fa29c23d61591a2c205ddd626ddc24459ade80445c88b2844584a2c9fcd7fb4a02f72bc0b3edf08f3df7df0f6b8afef464adea35301c133a0b925ac"}, 0xd8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x154, r4, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x5, 0x3}], "103c0a0e745c6dde"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x8, 0x5}, {0xca, 0x5}], "d6bce5d041c51dae"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x3}, {0x1f, 0x3}, {0x7f, 0x4}, {0x81, 0x4}, {0x52, 0x5}, {0x7f, 0x1}, {0x4, 0x3}, {0x80, 0x7}, {}, {0x3}, {0x63, 0x4}, {0x80, 0x2}, {0xfd, 0x7}, {0x8}, {0x99, 0x7}, {0x1f, 0x5}, {0x76, 0x4}, {0x9, 0x3}], "d8b6a52e7b0de6a2"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x8, 0x3}, {0x20, 0x7}, {0x80}, {0xf7, 0x40}, {0x4, 0x5}], "55be7bfb1ab08058"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x76, 0x7}], "9f7a5b1eedb91080"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6, 0x6}, {0x8, 0x4}, {0x7, 0x4}, {0xdc, 0x1}, {0x0, 0x4}, {0x2e, 0x6}, {0x4}, {0x5, 0x2}, {0xff, 0x6}, {0x4, 0x5}, {0x5, 0x3}, {0xf0, 0x5}], "e718cc519ffee48a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8, 0x6}, {0x7f, 0x5}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x9, 0x1}, {0x7, 0x7}, {0x3, 0x1}, {0x3f, 0x1}, {0x3, 0x2}, {0x9d, 0x1}, {0x1f, 0x6}, {0x2, 0x4}, {0x81}, {0x8}, {0xfd, 0x4}, {0x7, 0x3}], "ffc4ecc1316e766f"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x80, 0x2}, {0xff, 0x3}, {0xff, 0x2}], "fdf228ff63f2b7a0"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x80, 0x3}, {0x1, 0x1}, {0x56, 0x1}, {0x8, 0x6}, {0x3f}, {0x9, 0x6}, {0xe3, 0x2}, {0x1}, {0x81, 0x4}, {0x40, 0x7}, {0x3, 0x7}, {0x8, 0x1}], "b121f32c4e6e41e9"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5}, {0xe0, 0x3}, {0x0, 0x3}, {0x48, 0x2}, {0xa7, 0x3}, {0x2, 0x2}, {0x3, 0x2}, {0x1f, 0x4}, {0x1f, 0x1}, {0x3f, 0x1}, {0x1, 0x5}], "21a547e22ce11244"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x400c899}, 0x4004) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000006c0)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000740), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000780)='FROZEN\x00', 0x7) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000940)={&(0x7f00000007c0), 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xcc, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x30, 0x45, "036bae5c1c4396f827fbc280502339e8fd0dc30e029f3a18dac8db9c89b93334d3b2d4ff2e3feda04f8f8766"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "b9e234b938ac384560b5a2a93d42e958c613667ad5b9c1feae697207"}, @NL80211_ATTR_TESTDATA={0x60, 0x45, "36d28a47e9d26902fedfc8a770c38aa7028bd50a93439c8e13f38fd9d0f5806359f64477a5c89715a854b28935f9880719fe33f850da55e4277b7a3351bbe044cb99d782fc6d5b7e7cac3904547b95c184c0aaeca1bab4feab8ca092"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4081}, 0x4044) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000980)=0x8b, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000ac0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/36, 0x24, 0x0, &(0x7f0000000a00)=""/192, 0xc0}, &(0x7f0000000b00)=0x40) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000b80)=@ccm_128={{0x304}, "5e5ad4ee84a6dc91", "a33441127ed23b7dace3737c72a729e6", "a5c6ecb1", "f8bbb66c2df553da"}, 0x28) [ 85.628131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.630221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.631088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.632316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.635523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.637470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.639087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.640796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.641929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.658426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.671292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.679493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.691897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.695075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.707008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.709491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.711278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.713157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.749586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.752999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.756160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.763947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.767749] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.771043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.874623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.876365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.878850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.882813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.884441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.891248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.915308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.921240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.922097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.931174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.939609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.942012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.947899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.948363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.969017] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.975371] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.994065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.004860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.037595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.048387] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.052063] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.062106] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.107467] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.108327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.716364] Bluetooth: hci1: command tx timeout [ 87.716601] Bluetooth: hci0: command tx timeout [ 87.779790] Bluetooth: hci2: command tx timeout [ 87.843728] Bluetooth: hci3: command tx timeout [ 88.035963] Bluetooth: hci4: command tx timeout [ 88.036149] Bluetooth: hci6: command tx timeout [ 88.164135] Bluetooth: hci5: command tx timeout [ 88.227718] Bluetooth: hci7: command tx timeout [ 89.764039] Bluetooth: hci0: command tx timeout [ 89.764140] Bluetooth: hci1: command tx timeout [ 89.827843] Bluetooth: hci2: command tx timeout [ 89.892324] Bluetooth: hci3: command tx timeout [ 90.083736] Bluetooth: hci4: command tx timeout [ 90.083841] Bluetooth: hci6: command tx timeout [ 90.212676] Bluetooth: hci5: command tx timeout [ 90.275745] Bluetooth: hci7: command tx timeout [ 91.812169] Bluetooth: hci1: command tx timeout [ 91.812273] Bluetooth: hci0: command tx timeout [ 91.875846] Bluetooth: hci2: command tx timeout [ 91.939687] Bluetooth: hci3: command tx timeout [ 92.131744] Bluetooth: hci6: command tx timeout [ 92.131836] Bluetooth: hci4: command tx timeout [ 92.259768] Bluetooth: hci5: command tx timeout [ 92.323699] Bluetooth: hci7: command tx timeout [ 93.859812] Bluetooth: hci0: command tx timeout [ 93.859992] Bluetooth: hci1: command tx timeout [ 93.923805] Bluetooth: hci2: command tx timeout [ 93.987969] Bluetooth: hci3: command tx timeout [ 94.180338] Bluetooth: hci4: command tx timeout [ 94.180508] Bluetooth: hci6: command tx timeout [ 94.307752] Bluetooth: hci5: command tx timeout [ 94.372756] Bluetooth: hci7: command tx timeout [ 145.716538] syz-executor.6 (288) used greatest stack depth: 23552 bytes left [ 148.463202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.465142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.470449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.475515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.480755] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.482026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.597539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.599265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.600431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.611837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.614801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.615888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.724051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.725548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.733734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.735031] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.736017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.741828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.743175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.744826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.756224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.756253] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.758590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.778847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.779714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.802718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.813522] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.814364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.823994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.824214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.825500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.837162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.854829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.859209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.874862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.876575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.881090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.887577] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.894086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.894188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.898919] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.902126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.066900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.085999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.089376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.134525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.141972] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.156129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.499701] Bluetooth: hci0: command tx timeout [ 150.627759] Bluetooth: hci1: command tx timeout [ 150.819758] Bluetooth: hci2: command tx timeout [ 150.883877] Bluetooth: hci3: command tx timeout [ 151.012269] Bluetooth: hci5: command tx timeout [ 151.013545] Bluetooth: hci7: command tx timeout [ 151.013894] Bluetooth: hci4: command tx timeout [ 151.203856] Bluetooth: hci6: command tx timeout [ 152.548049] Bluetooth: hci0: command tx timeout [ 152.675930] Bluetooth: hci1: command tx timeout [ 152.867724] Bluetooth: hci2: command tx timeout [ 152.934641] Bluetooth: hci3: command tx timeout [ 153.059706] Bluetooth: hci4: command tx timeout [ 153.059804] Bluetooth: hci7: command tx timeout [ 153.059856] Bluetooth: hci5: command tx timeout [ 153.251840] Bluetooth: hci6: command tx timeout [ 154.596682] Bluetooth: hci0: command tx timeout [ 154.724690] Bluetooth: hci1: command tx timeout [ 154.917130] Bluetooth: hci2: command tx timeout [ 154.980683] Bluetooth: hci3: command tx timeout [ 155.108733] Bluetooth: hci5: command tx timeout [ 155.108854] Bluetooth: hci7: command tx timeout [ 155.108958] Bluetooth: hci4: command tx timeout [ 155.299894] Bluetooth: hci6: command tx timeout [ 156.643693] Bluetooth: hci0: command tx timeout [ 156.772743] Bluetooth: hci1: command tx timeout [ 156.964756] Bluetooth: hci2: command tx timeout [ 157.028760] Bluetooth: hci3: command tx timeout [ 157.156964] Bluetooth: hci4: command tx timeout [ 157.157084] Bluetooth: hci7: command tx timeout [ 157.157139] Bluetooth: hci5: command tx timeout [ 157.347683] Bluetooth: hci6: command tx timeout [ 210.563042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.566375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.567128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.572549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.576961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.580815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.622514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.627096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.637388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.650217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.655501] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.668087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.673620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.686962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.692444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.702301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.702741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.708131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.710150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.718788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.726162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.751551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.754253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.759276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.759811] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.764017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.765947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.781503] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.785384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.787824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.979896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.995366] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.005897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.007054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.008963] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.011065] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.011162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.015278] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.017497] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.020350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.024264] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.024774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.028253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.030229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.032188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.058884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.076339] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.083694] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.643809] Bluetooth: hci0: command tx timeout [ 212.771754] Bluetooth: hci1: command tx timeout [ 212.835753] Bluetooth: hci2: command tx timeout [ 212.899794] Bluetooth: hci4: command tx timeout [ 212.901279] Bluetooth: hci3: command tx timeout [ 213.091815] Bluetooth: hci7: command tx timeout [ 213.091841] Bluetooth: hci6: command tx timeout [ 213.155939] Bluetooth: hci5: command tx timeout [ 214.691783] Bluetooth: hci0: command tx timeout [ 214.819750] Bluetooth: hci1: command tx timeout [ 214.885732] Bluetooth: hci2: command tx timeout [ 214.947724] Bluetooth: hci4: command tx timeout [ 214.947795] Bluetooth: hci3: command tx timeout [ 215.139698] Bluetooth: hci6: command tx timeout [ 215.139766] Bluetooth: hci7: command tx timeout [ 215.203756] Bluetooth: hci5: command tx timeout [ 216.739677] Bluetooth: hci0: command tx timeout [ 216.867747] Bluetooth: hci1: command tx timeout [ 216.933653] Bluetooth: hci2: command tx timeout [ 216.995784] Bluetooth: hci3: command tx timeout [ 216.995842] Bluetooth: hci4: command tx timeout [ 217.187990] Bluetooth: hci6: command tx timeout [ 217.189103] Bluetooth: hci7: command tx timeout [ 217.253643] Bluetooth: hci5: command tx timeout [ 218.787816] Bluetooth: hci0: command tx timeout [ 218.915716] Bluetooth: hci1: command tx timeout [ 218.980130] Bluetooth: hci2: command tx timeout [ 219.043916] Bluetooth: hci4: command tx timeout [ 219.043995] Bluetooth: hci3: command tx timeout [ 219.235737] Bluetooth: hci7: command tx timeout [ 219.235818] Bluetooth: hci6: command tx timeout [ 219.300631] Bluetooth: hci5: command tx timeout [ 269.785308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.785432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.622003] [ 270.622518] ====================================================== [ 270.623914] WARNING: possible circular locking dependency detected [ 270.625287] 6.13.0-rc7-next-20250117 #1 Not tainted [ 270.630124] ------------------------------------------------------ [ 270.633906] kworker/u8:1/66 is trying to acquire lock: [ 270.635082] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.637377] [ 270.637377] but task is already holding lock: [ 270.638664] ffff888023cb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 270.640912] [ 270.640912] which lock already depends on the new lock. [ 270.640912] [ 270.642652] [ 270.642652] the existing dependency chain (in reverse order) is: [ 270.644265] [ 270.644265] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 270.645780] __mutex_lock+0x13d/0xb50 [ 270.646839] wiphy_register+0x1b2e/0x25d0 [ 270.647985] ieee80211_register_hw+0x23a4/0x3d60 [ 270.649209] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 270.650491] init_mac80211_hwsim+0x389/0x870 [ 270.651727] do_one_initcall+0xf9/0x640 [ 270.652852] kernel_init_freeable+0x53d/0x7a0 [ 270.654074] kernel_init+0x1e/0x2d0 [ 270.655068] ret_from_fork+0x48/0x80 [ 270.656066] ret_from_fork_asm+0x1a/0x30 [ 270.657185] [ 270.657185] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 270.658640] __lock_acquire+0x29fd/0x4580 [ 270.659893] lock_acquire+0x19b/0x520 [ 270.660959] __mutex_lock+0x13d/0xb50 [ 270.662035] unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.663469] unregister_netdevice_queue+0x224/0x2e0 [ 270.664743] _cfg80211_unregister_wdev+0x57b/0x700 [ 270.666019] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 270.667321] ieee80211_unregister_hw+0x55/0x3a0 [ 270.668545] hwsim_exit_net+0x3a0/0x730 [ 270.669631] ops_exit_list+0xb3/0x180 [ 270.670660] cleanup_net+0x546/0xad0 [ 270.671694] process_one_work+0x8ee/0x1a10 [ 270.672877] worker_thread+0x674/0xe70 [ 270.673973] kthread+0x3ab/0x720 [ 270.674987] ret_from_fork+0x48/0x80 [ 270.675982] ret_from_fork_asm+0x1a/0x30 [ 270.677129] [ 270.677129] other info that might help us debug this: [ 270.677129] [ 270.678849] Possible unsafe locking scenario: [ 270.678849] [ 270.680174] CPU0 CPU1 [ 270.681262] ---- ---- [ 270.682217] lock(&rdev->wiphy.mtx); [ 270.683096] lock(rtnl_mutex); [ 270.684302] lock(&rdev->wiphy.mtx); [ 270.685636] lock(rtnl_mutex); [ 270.686400] [ 270.686400] *** DEADLOCK *** [ 270.686400] [ 270.687618] 4 locks held by kworker/u8:1/66: [ 270.688538] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 270.690756] #1: ffff88800bdbfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 270.692863] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 270.694814] #3: ffff888023cb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 270.697048] [ 270.697048] stack backtrace: [ 270.697962] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 270.699675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 270.701295] Workqueue: netns cleanup_net [ 270.702192] Call Trace: [ 270.702728] [ 270.703218] dump_stack_lvl+0xca/0x120 [ 270.704094] print_circular_bug+0x47b/0x750 [ 270.705020] check_noncircular+0x2e9/0x3c0 [ 270.705961] ? __pfx_check_noncircular+0x10/0x10 [ 270.707010] ? hlock_class+0x4e/0x130 [ 270.707860] ? srso_return_thunk+0x5/0x5f [ 270.708819] ? mark_lock+0xac/0xed0 [ 270.709657] ? lockdep_lock+0xba/0x1b0 [ 270.710598] ? __pfx_lockdep_lock+0x10/0x10 [ 270.711628] __lock_acquire+0x29fd/0x4580 [ 270.712574] ? __pfx___lock_acquire+0x10/0x10 [ 270.713518] ? lock_release+0x20f/0x6f0 [ 270.714413] ? __pfx_lock_release+0x10/0x10 [ 270.715254] ? srso_return_thunk+0x5/0x5f [ 270.716132] lock_acquire+0x19b/0x520 [ 270.716945] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.718138] ? __pfx_lock_acquire+0x10/0x10 [ 270.719061] ? srso_return_thunk+0x5/0x5f [ 270.719956] ? lock_is_held_type+0x9e/0x120 [ 270.720905] ? srso_return_thunk+0x5/0x5f [ 270.721858] __mutex_lock+0x13d/0xb50 [ 270.722720] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.723993] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.725243] ? srso_return_thunk+0x5/0x5f [ 270.726205] ? synchronize_rcu_expedited+0x38a/0x420 [ 270.727330] ? __pfx___mutex_lock+0x10/0x10 [ 270.728316] ? srso_return_thunk+0x5/0x5f [ 270.729284] ? srso_return_thunk+0x5/0x5f [ 270.730236] ? kasan_quarantine_put+0x84/0x1e0 [ 270.731290] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 270.732279] ? srso_return_thunk+0x5/0x5f [ 270.733291] unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.734612] ? __virt_addr_valid+0x2e8/0x5d0 [ 270.735705] ? __pfx_lock_release+0x10/0x10 [ 270.736740] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 270.738086] ? find_held_lock+0x2c/0x110 [ 270.739086] ? srso_return_thunk+0x5/0x5f [ 270.740195] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 270.741447] ? srso_return_thunk+0x5/0x5f [ 270.742525] ? lock_release+0x20f/0x6f0 [ 270.743578] ? __pfx_lock_release+0x10/0x10 [ 270.744709] ? srso_return_thunk+0x5/0x5f [ 270.745826] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 270.747186] ? srso_return_thunk+0x5/0x5f [ 270.748279] unregister_netdevice_queue+0x224/0x2e0 [ 270.749509] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 270.750762] ? up_write+0x195/0x520 [ 270.751676] _cfg80211_unregister_wdev+0x57b/0x700 [ 270.752807] ? srso_return_thunk+0x5/0x5f [ 270.753800] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 270.754937] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 270.755549] ? srso_return_thunk+0x5/0x5f [ 270.755976] ? srso_return_thunk+0x5/0x5f [ 270.756414] ? synchronize_rcu+0x1ff/0x260 [ 270.756846] ieee80211_unregister_hw+0x55/0x3a0 [ 270.757309] hwsim_exit_net+0x3a0/0x730 [ 270.757697] ? __pfx_hwsim_exit_net+0x10/0x10 [ 270.758132] ? srso_return_thunk+0x5/0x5f [ 270.758543] ? netdev_run_todo+0x788/0x1040 [ 270.758975] ? srso_return_thunk+0x5/0x5f [ 270.759404] ? __pfx_hwsim_exit_net+0x10/0x10 [ 270.759850] ops_exit_list+0xb3/0x180 [ 270.760242] cleanup_net+0x546/0xad0 [ 270.760623] ? __pfx_cleanup_net+0x10/0x10 [ 270.761047] process_one_work+0x8ee/0x1a10 [ 270.761497] ? __pfx_lock_acquire+0x10/0x10 [ 270.761934] ? __pfx_process_one_work+0x10/0x10 [ 270.762406] ? srso_return_thunk+0x5/0x5f [ 270.762822] ? move_linked_works+0x172/0x270 [ 270.763272] ? srso_return_thunk+0x5/0x5f [ 270.763690] ? assign_work+0x196/0x240 [ 270.764091] worker_thread+0x674/0xe70 [ 270.764498] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 270.765005] ? srso_return_thunk+0x5/0x5f [ 270.765429] ? __pfx_worker_thread+0x10/0x10 [ 270.765881] kthread+0x3ab/0x720 [ 270.766240] ? __pfx_kthread+0x10/0x10 [ 270.766634] ? srso_return_thunk+0x5/0x5f [ 270.767059] ? finish_task_switch.isra.0+0x206/0x840 [ 270.767557] ? __pfx_kthread+0x10/0x10 [ 270.767952] ret_from_fork+0x48/0x80 [ 270.768322] ? __pfx_kthread+0x10/0x10 [ 270.768716] ret_from_fork_asm+0x1a/0x30 [ 270.769142] [ 272.562846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.567898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.570198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.576977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.586663] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.591433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.620659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.623292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.626848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.634864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.637351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.639532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.714460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.720340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.725365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.733290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.738022] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.740062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.780844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.790955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.794112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.796348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.798369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.804950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.806917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.815242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.824531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.827735] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.828030] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.828326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.832040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.833985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.836772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.837384] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.837878] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.841884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.845080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.848880] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.849486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.867863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.884754] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.896902] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.930881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.955722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.962047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.986087] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.995873] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.000079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.660898] Bluetooth: hci1: command tx timeout [ 274.660969] Bluetooth: hci0: command tx timeout [ 274.852804] Bluetooth: hci2: command tx timeout [ 274.915717] Bluetooth: hci3: command tx timeout [ 274.915751] Bluetooth: hci5: command tx timeout [ 274.915837] Bluetooth: hci4: command tx timeout [ 274.979689] Bluetooth: hci6: command tx timeout [ 275.108073] Bluetooth: hci7: command tx timeout [ 276.707648] Bluetooth: hci1: command tx timeout [ 276.707666] Bluetooth: hci0: command tx timeout [ 276.899612] Bluetooth: hci2: command tx timeout [ 276.963765] Bluetooth: hci4: command tx timeout [ 276.963850] Bluetooth: hci3: command tx timeout [ 276.964042] Bluetooth: hci5: command tx timeout [ 277.027644] Bluetooth: hci6: command tx timeout [ 277.156465] Bluetooth: hci7: command tx timeout [ 278.755942] Bluetooth: hci1: command tx timeout [ 278.756033] Bluetooth: hci0: command tx timeout [ 278.947633] Bluetooth: hci2: command tx timeout [ 279.011689] Bluetooth: hci4: command tx timeout [ 279.011770] Bluetooth: hci3: command tx timeout [ 279.011833] Bluetooth: hci5: command tx timeout [ 279.075751] Bluetooth: hci6: command tx timeout [ 279.203760] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:54:36 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283cd30 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800bdbeb20 R8 =0000000000000000 R9 =fffffbfff0be1544 R10=00000000000fe503 R11=0000000033312e36 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10d2666 R15=dffffc0000000000 RIP=ffffffff8283cd85 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ec429f1710 CR3=00000000163da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c000088410000000c0000883c0 XMM04=000000c000148090000000c000148060 XMM05=000000c0001480f0000000c0001480c0 XMM06=000000c000148150000000c000148120 XMM07=000000c000147760000000c00008f4d0 XMM08=000000c0001484b0000000c000148480 XMM09=000000c000148510000000c0001484e0 XMM10=000000c000148540000000c00008f530 XMM11=000000c0001485a0000000c000148570 XMM12=000000c000148600000000c0001485d0 XMM13=000000c000148660000000c000148630 XMM14=000000c0001486c0000000c000148690 XMM15=000000c0000e9080000000c0001486f0 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800c260000 RCX=ffffffff81429a0f RDX=ffff88800c260000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000200000 RSP=ffff88800c26fdb8 R8 =0000000000000000 R9 =ffffed10017c1000 R10=0000000000200000 R11=ffff88800c2604b8 R12=ffffc900001b6ff9 R13=ffff88800a6b0250 R14=ffff88800c260000 R15=0000000000000086 RIP=ffffffff81429a0f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c217d9f018 CR3=00000000163da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004162292e00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000