Warning: Permanently added '[localhost]:17903' (ECDSA) to the list of known hosts. 2025/01/19 12:41:33 fuzzer started 2025/01/19 12:41:33 dialing manager at localhost:44245 syzkaller login: [ 77.203793] cgroup: Unknown subsys name 'net' [ 77.313355] cgroup: Unknown subsys name 'cpuset' [ 77.357288] cgroup: Unknown subsys name 'rlimit' [ 84.262869] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 94.967603] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 12:41:52 syscalls: 201 2025/01/19 12:41:52 code coverage: enabled 2025/01/19 12:41:52 comparison tracing: enabled 2025/01/19 12:41:52 extra coverage: enabled 2025/01/19 12:41:52 setuid sandbox: enabled 2025/01/19 12:41:52 namespace sandbox: enabled 2025/01/19 12:41:52 Android sandbox: enabled 2025/01/19 12:41:52 fault injection: enabled 2025/01/19 12:41:52 leak checking: enabled 2025/01/19 12:41:52 net packet injection: enabled 2025/01/19 12:41:52 net device setup: enabled 2025/01/19 12:41:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 12:41:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 12:41:52 USB emulation: enabled 2025/01/19 12:41:52 hci packet injection: enabled 2025/01/19 12:41:52 wifi device emulation: enabled 2025/01/19 12:41:52 802.15.4 emulation: enabled 2025/01/19 12:41:52 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 12:41:54 starting 8 fuzzer processes 12:41:54 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x401, 0x7ff, 0x709}) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x7f, 0xe0742) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000180)={0x3ff, 0x1, 0x7fffffff, 0x80, 0x1, 0x6}) r2 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000001c0)={0x8001, 0x1ff, 0x513, 0x4, 0x5, 0x80000000}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x141101, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000380)={0xd42b76deb747da70, 0xdd, &(0x7f0000000280)="ccc5c28477a23d800c374e65b2bc1efb4c7615aa0e1d90baf4d682d52c2f9fed1ef6f1f2c569847d1186fe6acb0f593a48289f93da7f08a3333470b8db14fce10a2960571aed0f1ee0479c972a8f3010a564117dcce079ccdec4a3be7de1700363e7cdedd45553d11dfc6aaea3c17b9300b7389d45a696ee1e51d666be96f60c3a4674a4cec05aeb3abeeb88fb70e08513e2d8cd22de68c5d58919c70aa498c3e4ff582212e1a79f4fe624760ad86263d306819b5bc2c88ba462ada377085b0cf58579290ef9c60f1e6b78fa23a850c5603b3bf200a27e95bd1fbf18d2"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x7, 0x2, 0x1, 'queue0\x00', 0x92}) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000480)={'\x00', 0x2, 0x3, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000500)={0x10000, 0x5, 0x800, 0x1, 0x8, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000580)={{0x0, 0xfd}, {0x3a}, 0x1, 0x7, 0xd2}) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000600)=""/13) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000640)={0xf}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000b00)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000cc0)={{0xa, 0x1f}, {0x3f, 0x66}, 0x8001, 0x4}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8801) 12:41:54 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x82801, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x401, 0x100]) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0xff, 0x20, 0x3f, 0x5, "0300070632347a4787bd85b6a3594e41d06a2fe8489e0b23468ea82c1322006f"}) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0xce, 0x208000) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0x0, 0x3cd, 0x4, 0x7, 0x7, 0x80000000}) openat$cgroup_int(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x103103, 0x0) write$cgroup_int(r3, &(0x7f0000000400)=0x4, 0x12) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x70}, 0x1, 0x0, 0x0, 0x101}, 0x2000c040) bind$802154_raw(r3, &(0x7f0000000580)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000600)=""/12) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000640)=""/4096) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000001640)={0x0, 0xb, 0x1, 0x56ca351a, "15e7c653c72ebaef3e3bc3d361b96200ff58c9649ba748c857b19d9b4746e9ce"}) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000001680)=""/4096) 12:41:54 executing program 2: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='-\'(-^\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='@!:\x00', 0x0, r0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x400) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000140)={0x81, 0x0, 0x400, 0x4, 0x61442fab, 0x7ff}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) r3 = fsmount(r1, 0x0, 0x2) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000200)={0x1, 0x1, 0x6, 0x2, 0x81, 0x4}) syz_open_dev$usbmon(&(0x7f0000000240), 0x1da, 0x10000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000280)={0xaf7a, 0x9, 0x1, 0x1f43, 0x0, 0x7}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='.+.\x00', &(0x7f0000000340)='./file0\x00', r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40040) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) mq_notify(r8, &(0x7f0000000580)={0x0, 0x3a, 0x1, @tid=0xffffffffffffffff}) 12:41:54 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/186) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/218) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x6, 0x8, 0x0, 'queue0\x00', 0x7}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x327000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000340)={{0x7, 0x1ff}, {0x9}, 0x3a9}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000380)={0x3, 0xd}) r3 = syz_open_dev$mouse(&(0x7f00000003c0), 0x7fff, 0x414640) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000400)={{0x6}, {}, 0x7, 0x1}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000805}, 0x8001) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x300, 0x70bd2b, 0x800, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x4008000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000680)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x480000, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000700), 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x8, 0x1, 0x80, 0x0, 0x100]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e7}]}, 0x34}}, 0x80) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) [ 97.400006] audit: type=1400 audit(1737290514.145:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:41:54 executing program 4: r0 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '&'}}, {@access_user}, {@privport}, {@aname={'aname', 0x3d, '\x997-.'}}], [{@smackfsdef={'smackfsdef', 0x3d, '*J'}}, {@uid_gt={'uid>', r0}}, {@uid_gt={'uid>', 0xee01}}, {@appraise_type}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000180)='nomand\x00', 0x0, 0x0) geteuid() recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/236, 0xec}], 0x3, &(0x7f0000000400)=""/116, 0x74}, 0x4}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000780)=""/3, 0x3}, {&(0x7f00000007c0)=""/98, 0x62}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000900)=""/165, 0xa5}, {&(0x7f00000009c0)=""/246, 0xf6}], 0xa, &(0x7f0000000b80)=""/23, 0x17}, 0x40}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/225, 0xe1}, {&(0x7f0000001d40)=""/50, 0x32}, {&(0x7f0000001d80)=""/228, 0xe4}, {&(0x7f0000001e80)=""/55, 0x37}, {&(0x7f0000001ec0)=""/107, 0x6b}, {&(0x7f0000001f40)=""/143, 0x8f}], 0x8, &(0x7f0000002080)=""/119, 0x77}, 0x80000001}, {{&(0x7f0000002100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002180)=""/174, 0xae}, {&(0x7f0000002240)=""/224, 0xe0}, {&(0x7f0000002340)=""/54, 0x36}, {&(0x7f0000002380)}, {&(0x7f00000023c0)=""/104, 0x68}, {&(0x7f0000002440)=""/73, 0x49}], 0x6, &(0x7f0000002540)=""/221, 0xdd}, 0x3}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/14, 0xe}, {&(0x7f0000003680)=""/100, 0x64}], 0x3, &(0x7f0000003740)=""/156, 0x9c}, 0xfffff0a1}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003800)=""/78, 0x4e}, {&(0x7f0000003880)=""/74, 0x4a}], 0x2, &(0x7f0000003940)=""/78, 0x4e}, 0xffff0001}, {{&(0x7f00000039c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003a40)=""/9, 0x9}, {&(0x7f0000003a80)=""/13, 0xd}, {&(0x7f0000003ac0)=""/33, 0x21}, {&(0x7f0000003b00)=""/167, 0xa7}], 0x4, &(0x7f0000003c00)=""/186, 0xba}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003cc0)=""/245, 0xf5}, {&(0x7f0000003dc0)=""/198, 0xc6}, {&(0x7f0000003ec0)=""/166, 0xa6}], 0x3}, 0x7}], 0x8, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000041c0)={'vxcan0\x00'}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000004200)='&##\x00', &(0x7f0000004240)="f2e3ac060ec2b6fe235ce1f4c13f1b5240d326015e2c631948fdc6c935350bb76ef330d6f3151f70054f3931b0db6b42", 0x30) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000004280)='*J', &(0x7f00000042c0)='./file0\x00', 0xffffffffffffff9c) clock_gettime(0x0, &(0x7f0000008800)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/191, 0xbf}, {&(0x7f00000053c0)=""/15, 0xf}, {&(0x7f0000005400)=""/248, 0xf8}, {&(0x7f0000005500)=""/79, 0x4f}], 0x5, &(0x7f0000005600)=""/54, 0x36}, 0x8001}, {{&(0x7f0000005640)=@nfc_llcp, 0x80, &(0x7f0000006940)=[{&(0x7f00000056c0)=""/123, 0x7b}, {&(0x7f0000005740)=""/196, 0xc4}, {&(0x7f0000005840)=""/196, 0xc4}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x4, &(0x7f0000006980)=""/234, 0xea}, 0x7}, {{&(0x7f0000006a80)=@can, 0x80, &(0x7f0000006e40)=[{&(0x7f0000006b00)=""/22, 0x16}, {&(0x7f0000006b40)=""/73, 0x49}, {&(0x7f0000006bc0)}, {&(0x7f0000006c00)=""/121, 0x79}, {&(0x7f0000006c80)=""/117, 0x75}, {&(0x7f0000006d00)=""/197, 0xc5}, {&(0x7f0000006e00)=""/46, 0x2e}], 0x7, &(0x7f0000006ec0)=""/94, 0x5e}, 0x20}, {{0x0, 0x0, &(0x7f0000008100)=[{&(0x7f0000006f40)=""/4096, 0x1000}, {&(0x7f0000007f40)=""/19, 0x13}, {&(0x7f0000007f80)=""/218, 0xda}, {&(0x7f0000008080)=""/127, 0x7f}], 0x4, &(0x7f0000008140)=""/238, 0xee}, 0x3}, {{0x0, 0x0, &(0x7f00000082c0)=[{&(0x7f0000008240)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000008580)=[{&(0x7f0000008300)=""/86, 0x56}, {&(0x7f0000008380)=""/7, 0x7}, {&(0x7f00000083c0)=""/237, 0xed}, {&(0x7f00000084c0)=""/162, 0xa2}], 0x4, &(0x7f00000085c0)=""/148, 0x94}, 0xfffffbff}], 0x6, 0x10002, &(0x7f0000008840)={r2, r3+10000000}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000008880), 0x400, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000088c0), 0x380, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000008900)='9p\x00', &(0x7f0000008940)='{(\'\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000008a40)={&(0x7f0000008980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000008a00)={&(0x7f00000089c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000008a80)='./file0\x00', 0x100, &(0x7f0000008ac0)={0x0, 0x4, 0x80000, {r4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000008b00), 0x2400) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000008b40)={0x9, 0xfffffff9, 0x2, 0x1, 0xfffffffd, 0xec}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000008c00)) 12:41:54 executing program 5: pipe(&(0x7f0000003000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003080)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) recvmsg(r1, &(0x7f0000004380)={&(0x7f00000031c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003240)=""/110, 0x6e}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/8, 0x8}], 0x4}, 0x102) r4 = syz_open_dev$mouse(&(0x7f00000043c0), 0xc94, 0x2b0900) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000004440)) r6 = memfd_secret(0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000004480)={{0x1, 0x9}, 'port1\x00', 0x43, 0x91005, 0x0, 0xfffffff8, 0x8001, 0x401, 0x8, 0x0, 0x3, 0x4}) r7 = syz_open_dev$mouse(&(0x7f0000004540), 0x7, 0x800) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000004580)=""/244) write$cgroup_pid(r1, &(0x7f0000004680), 0x12) getsockname(r0, &(0x7f00000046c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000004740)=0x80) inotify_add_watch(r7, &(0x7f0000004780)='./file0\x00', 0x4) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000047c0)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000004800)="45aa56f5191c05cc1f5ac510ffbbe558", 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000004840)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004880)={'wg0\x00'}) 12:41:54 executing program 6: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b53fb874e7f9fcd2", "e1fe0b8c704ab6127fae73027150dca4", "cbffe77e", "44523b68bb7bdb5e"}, 0x28) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x8040) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @private=0xa010101}}, 0x0, 0x0, 0x100, 0x0, "903488b5e924b9154af2cbd64aba3835ea701e4486fa0426ce7c2a19dbd5a447fc3d3b9f079b68d25c8be5ce62f13d2a0f7e85cb53cdd85b97c3aee25ed62d868178dad03bc7725274a25acb869614ef"}, 0xd8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r0, 0xffffffffffffffe0, 0x0, 0xf79c, 0xfffffffffffff5aa}) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) bind$802154_raw(r1, &(0x7f0000000340)={0x24, @none={0x0, 0x1}}, 0x14) r2 = fsmount(r1, 0x0, 0x70) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000380)) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000440), 0xa257, 0x20200) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000480)=0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x40, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@access_uid={'access', 0x3d, r5}}, {@cache_mmap}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@cache_loose}, {@afid={'afid', 0x3d, 0x6}}], [{@fsname}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, 'ns/user\x00'}}, {@euid_gt}, {@subj_role={'subj_role', 0x3d, ']-'}}]}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0xa2b00, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x410080, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x6, 0xba, 0x800, 0x1f}) sendmsg$802154_raw(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000800)={&(0x7f0000000700)="e9c458ec5e4bd09f97b5c2760232a2372704296f25bc193af5d77e963a618ee655ecf306a2996b31ab977e481209e31c3d084bdd1b7d57010ec81a110782d11b7a915e3f5b5906469dd3f89681e37d6e802016c0db64f51d3788c07cfce6ed68abe06b2ecff6a8219c5b2cff48b2940a3fdf2d57fe861e47b26b50db8c831d02d796241969aa4e9eabe588d473a3d49ce98049d610b8095b8c4e5239e45d31c20922be182b6e154cd3ab08edcdf6eedd32257a934812d6e37e3c036a0326a38a93e83737b47ebd2f567697d410b8a60dd32b76fa428b99cd8de1e92a3fc7e626f0dc", 0xe2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4004) 12:41:54 executing program 7: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x14, 0x7, 0x3, 0x2}) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1f, 0x4, @thr={&(0x7f0000000040)="94a9e997cee0402acd9b4a0dc0e5fa2b6d1367eab65d0607e353bca3023b4484621ff39ae61f784788d54948ba45e5a384b75279137f5afea31796ac4ff6b2fd31ae9739baca70aa5c360331654cc513887676727c2a11bf6f6c655da4c157c242b4debeb9b60d5db0b7e2a96031427467b862fb52787364c894daf28e394f84f3160c4a23de1453a17b9dcb85555744298265de5cbe4ed130bb63ebf1ecd16e34b061f5d1fd8368cbd075a61fb3aa2eb43c7d5ca569ece650562c5b7faaaabef48cb43f6c8c053db007eb4afd4b", &(0x7f0000000140)="8773f5dac17e6f85ee45cb99e16efd7aac641853f90d01b82168e7cabe0847cf75dc175a3e1b39d8db396c661a9078faa11ebfb2d7d2aabeb828bebc95731385e7acacd6351f7e82008a4c3b3655d344cc8d0d5ff298f238618ef4c6115b87984b74bd82d994f6c1ef44f451dd754fcf4960314a93d59c4903a5eeb89a7b10751fd87136e68585"}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) inotify_init() r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0xfffffffffffffffb, 0x200) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000480)={&(0x7f00000003c0), &(0x7f0000000400)=""/90, 0x5a}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000540)={&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000500)=""/21, 0x15}) r1 = fsopen(&(0x7f0000000580)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f0000000600)=@nfc, &(0x7f0000000680)=0x80) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000006c0)={0x3f, "df7e7f62f5ac86a1302ea6375848ba5e083f2c9c9e3ab6d4566b583e963b605daf0540c91aa740eaf59c5b86aaf6596181c89068dda985eddb8a0c19522038db"}) syz_open_dev$hidraw(&(0x7f0000000740), 0x8, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000780)='/dev/hidraw#\x00', &(0x7f00000007c0)='./file0\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x541000, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000880)=""/99) r4 = memfd_secret(0x80000) write$hidraw(r4, &(0x7f0000000900)="1e4f6275c2a7c02eb58fdde7a5baf3887f4d92fb4da2bb0118eaa47fbdc6f386dfa606272f31495f0db85a1e96d11ab3c234511777bbc100f67ebcd5d5b7816fc2dc4f490237992606327a8cf4849ad758ce00c0b73a81c697375b2a715f7e058214fd2ba6a6a625ed34f46092eae2c1c95c1c97adc661210e84946667ce6c83bc13fd98d09f7cd47abedfbcb039c9be9c218d80826d38da55b842a079b1a81341823c1027b5b3a4a25520d271bcc0e4c941b8e3f254f61a8414f33ef78e8fe93b8d331bedd32a26bdeef8660b8edb71f49352aba106dcda300ca43449042bc879", 0xe1) [ 98.776772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.781236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.783383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.786264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.788739] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.790712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.840679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.843016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.844855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.854665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.856280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.861764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.909858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.913845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.916245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.926926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.928900] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.930137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.972227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.980668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.983086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.988933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.002699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.010348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.010972] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.012304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.030811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.051965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.058109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.061760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.072443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.079240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.083776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.099116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.118008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.121394] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.137956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 99.143790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.145700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.169313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 99.184858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.184909] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 99.212915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.216409] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 99.264890] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 99.289755] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.326133] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 99.340797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.806446] Bluetooth: hci0: command tx timeout [ 100.934397] Bluetooth: hci1: command tx timeout [ 100.997656] Bluetooth: hci2: command tx timeout [ 101.190635] Bluetooth: hci5: command tx timeout [ 101.253633] Bluetooth: hci4: command tx timeout [ 101.253771] Bluetooth: hci3: command tx timeout [ 101.382585] Bluetooth: hci6: command tx timeout [ 101.509602] Bluetooth: hci7: command tx timeout [ 102.853961] Bluetooth: hci0: command tx timeout [ 102.981655] Bluetooth: hci1: command tx timeout [ 103.045988] Bluetooth: hci2: command tx timeout [ 103.237674] Bluetooth: hci5: command tx timeout [ 103.301643] Bluetooth: hci4: command tx timeout [ 103.301683] Bluetooth: hci3: command tx timeout [ 103.430535] Bluetooth: hci6: command tx timeout [ 103.557692] Bluetooth: hci7: command tx timeout [ 104.902050] Bluetooth: hci0: command tx timeout [ 105.029801] Bluetooth: hci1: command tx timeout [ 105.093596] Bluetooth: hci2: command tx timeout [ 105.286586] Bluetooth: hci5: command tx timeout [ 105.349558] Bluetooth: hci3: command tx timeout [ 105.350801] Bluetooth: hci4: command tx timeout [ 105.477556] Bluetooth: hci6: command tx timeout [ 105.607537] Bluetooth: hci7: command tx timeout [ 106.949857] Bluetooth: hci0: command tx timeout [ 107.078629] Bluetooth: hci1: command tx timeout [ 107.141582] Bluetooth: hci2: command tx timeout [ 107.333570] Bluetooth: hci5: command tx timeout [ 107.398644] Bluetooth: hci4: command tx timeout [ 107.398690] Bluetooth: hci3: command tx timeout [ 107.525579] Bluetooth: hci6: command tx timeout [ 107.653621] Bluetooth: hci7: command tx timeout [ 161.362919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.366170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.372415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.374346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.375396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.378345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.381464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.383889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.384983] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.386237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.396160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.430770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.435012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.439769] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.447904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.451358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.452408] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.454652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.501090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.513661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.514664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.527659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.530752] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.531857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.580686] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.582859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.594870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.599852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.621708] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.630849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.677385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.685065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.707772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.716810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.717928] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.726950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.731433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.731733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.735590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.736034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.737160] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.746719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.748919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.764444] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.765296] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.775857] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.779597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.779793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.461892] Bluetooth: hci0: command tx timeout [ 163.525651] Bluetooth: hci2: command tx timeout [ 163.526222] Bluetooth: hci1: command tx timeout [ 163.589734] Bluetooth: hci3: command tx timeout [ 163.717630] Bluetooth: hci4: command tx timeout [ 163.781714] Bluetooth: hci5: command tx timeout [ 163.973930] Bluetooth: hci6: command tx timeout [ 164.037747] Bluetooth: hci7: command tx timeout [ 165.509541] Bluetooth: hci0: command tx timeout [ 165.573583] Bluetooth: hci2: command tx timeout [ 165.573672] Bluetooth: hci1: command tx timeout [ 165.638553] Bluetooth: hci3: command tx timeout [ 165.766751] Bluetooth: hci4: command tx timeout [ 165.830551] Bluetooth: hci5: command tx timeout [ 166.022588] Bluetooth: hci6: command tx timeout [ 166.086544] Bluetooth: hci7: command tx timeout [ 167.557539] Bluetooth: hci0: command tx timeout [ 167.623576] Bluetooth: hci2: command tx timeout [ 167.623672] Bluetooth: hci1: command tx timeout [ 167.685556] Bluetooth: hci3: command tx timeout [ 167.814657] Bluetooth: hci4: command tx timeout [ 167.878591] Bluetooth: hci5: command tx timeout [ 168.069563] Bluetooth: hci6: command tx timeout [ 168.134771] Bluetooth: hci7: command tx timeout [ 169.606514] Bluetooth: hci0: command tx timeout [ 169.669582] Bluetooth: hci1: command tx timeout [ 169.670114] Bluetooth: hci2: command tx timeout [ 169.733523] Bluetooth: hci3: command tx timeout [ 169.864498] Bluetooth: hci4: command tx timeout [ 169.925614] Bluetooth: hci5: command tx timeout [ 170.119524] Bluetooth: hci6: command tx timeout [ 170.182518] Bluetooth: hci7: command tx timeout [ 223.446328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.448318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.451061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.458764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.461373] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.463437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.504304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.506548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.508677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.522623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.526862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.528942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.773575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.784925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.790883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.801439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.803267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.803715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.808803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.810094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.813996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.847021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.851751] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.853271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.860153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.860377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.866196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.867891] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.868129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.875778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.881004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.895771] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.896758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.908783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.912136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.918824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.919173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.921396] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.922258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.923360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.929738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.932105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.961971] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.978904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.981153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.990005] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.015346] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 224.018022] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.541674] Bluetooth: hci0: command tx timeout [ 225.606547] Bluetooth: hci1: command tx timeout [ 225.861665] Bluetooth: hci3: command tx timeout [ 225.927081] Bluetooth: hci2: command tx timeout [ 225.991288] Bluetooth: hci6: command tx timeout [ 226.053658] Bluetooth: hci4: command tx timeout [ 226.053743] Bluetooth: hci5: command tx timeout [ 226.118928] Bluetooth: hci7: command tx timeout [ 227.590729] Bluetooth: hci0: command tx timeout [ 227.655505] Bluetooth: hci1: command tx timeout [ 227.910568] Bluetooth: hci3: command tx timeout [ 227.974751] Bluetooth: hci2: command tx timeout [ 228.038905] Bluetooth: hci6: command tx timeout [ 228.101612] Bluetooth: hci5: command tx timeout [ 228.104577] Bluetooth: hci4: command tx timeout [ 228.166516] Bluetooth: hci7: command tx timeout [ 229.638674] Bluetooth: hci0: command tx timeout [ 229.703395] Bluetooth: hci1: command tx timeout [ 229.960621] Bluetooth: hci3: command tx timeout [ 230.023512] Bluetooth: hci2: command tx timeout [ 230.086554] Bluetooth: hci6: command tx timeout [ 230.149539] Bluetooth: hci4: command tx timeout [ 230.149572] Bluetooth: hci5: command tx timeout [ 230.214554] Bluetooth: hci7: command tx timeout [ 231.685640] Bluetooth: hci0: command tx timeout [ 231.751531] Bluetooth: hci1: command tx timeout [ 232.005551] Bluetooth: hci3: command tx timeout [ 232.069615] Bluetooth: hci2: command tx timeout [ 232.133532] Bluetooth: hci6: command tx timeout [ 232.198523] Bluetooth: hci4: command tx timeout [ 232.198543] Bluetooth: hci5: command tx timeout [ 232.263520] Bluetooth: hci7: command tx timeout [ 285.329723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.331878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.333775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.339420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.342347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.345034] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.399591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.406080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.413678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.422662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.426942] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.429931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.555774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.561285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.568001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.596704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.606995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.629024] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.636239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.639117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.639856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.645325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.649937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.653783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.670929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.688806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.695172] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.697217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.709657] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.718175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.791867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.823074] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.835192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.840515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.848649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.866178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.871314] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.876299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.879033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.890400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.895574] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.898769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.020833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.024037] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.026241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.031632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.039895] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.044981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.429602] Bluetooth: hci0: command tx timeout [ 287.493597] Bluetooth: hci1: command tx timeout [ 287.685698] Bluetooth: hci2: command tx timeout [ 287.749530] Bluetooth: hci3: command tx timeout [ 287.942539] Bluetooth: hci4: command tx timeout [ 287.942889] Bluetooth: hci5: command tx timeout [ 288.005768] Bluetooth: hci6: command tx timeout [ 288.069545] Bluetooth: hci7: command tx timeout [ 289.477859] Bluetooth: hci0: command tx timeout [ 289.541699] Bluetooth: hci1: command tx timeout [ 289.733726] Bluetooth: hci2: command tx timeout [ 289.797740] Bluetooth: hci3: command tx timeout [ 289.989603] Bluetooth: hci5: command tx timeout [ 289.989621] Bluetooth: hci4: command tx timeout [ 290.053681] Bluetooth: hci6: command tx timeout [ 290.117553] Bluetooth: hci7: command tx timeout [ 291.526591] Bluetooth: hci0: command tx timeout [ 291.590516] Bluetooth: hci1: command tx timeout [ 291.782533] Bluetooth: hci2: command tx timeout [ 291.848543] Bluetooth: hci3: command tx timeout [ 292.037655] Bluetooth: hci4: command tx timeout [ 292.038606] Bluetooth: hci5: command tx timeout [ 292.102571] Bluetooth: hci6: command tx timeout [ 292.167620] Bluetooth: hci7: command tx timeout [ 293.575519] Bluetooth: hci0: command tx timeout [ 293.638555] Bluetooth: hci1: command tx timeout [ 293.830669] Bluetooth: hci2: command tx timeout [ 293.894569] Bluetooth: hci3: command tx timeout [ 294.088483] Bluetooth: hci5: command tx timeout [ 294.088583] Bluetooth: hci4: command tx timeout [ 294.149605] Bluetooth: hci6: command tx timeout [ 294.213521] Bluetooth: hci7: command tx timeout [ 345.701287] [ 345.701678] ====================================================== [ 345.702763] WARNING: possible circular locking dependency detected [ 345.703904] 6.13.0-rc7-next-20250117 #1 Not tainted [ 345.704736] ------------------------------------------------------ [ 345.705745] kworker/u8:1/66 is trying to acquire lock: [ 345.706607] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.708391] [ 345.708391] but task is already holding lock: [ 345.709516] ffff888015100768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 345.711524] [ 345.711524] which lock already depends on the new lock. [ 345.711524] [ 345.713106] [ 345.713106] the existing dependency chain (in reverse order) is: [ 345.718200] [ 345.718200] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 345.719634] __mutex_lock+0x13d/0xb50 [ 345.720618] wiphy_register+0x1b2e/0x25d0 [ 345.721663] ieee80211_register_hw+0x23a4/0x3d60 [ 345.722798] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 345.724012] init_mac80211_hwsim+0x389/0x870 [ 345.725123] do_one_initcall+0xf9/0x640 [ 345.726149] kernel_init_freeable+0x53d/0x7a0 [ 345.727295] kernel_init+0x1e/0x2d0 [ 345.728205] ret_from_fork+0x48/0x80 [ 345.729112] ret_from_fork_asm+0x1a/0x30 [ 345.730141] [ 345.730141] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 345.731509] __lock_acquire+0x29fd/0x4580 [ 345.732574] lock_acquire+0x19b/0x520 [ 345.733565] __mutex_lock+0x13d/0xb50 [ 345.734542] unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.735852] unregister_netdevice_queue+0x224/0x2e0 [ 345.737017] _cfg80211_unregister_wdev+0x57b/0x700 [ 345.738249] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 345.739491] ieee80211_unregister_hw+0x55/0x3a0 [ 345.740593] hwsim_exit_net+0x3a0/0x730 [ 345.741592] ops_exit_list+0xb3/0x180 [ 345.742523] cleanup_net+0x546/0xad0 [ 345.743471] process_one_work+0x8ee/0x1a10 [ 345.744589] worker_thread+0x674/0xe70 [ 345.745641] kthread+0x3ab/0x720 [ 345.746577] ret_from_fork+0x48/0x80 [ 345.747510] ret_from_fork_asm+0x1a/0x30 [ 345.748550] [ 345.748550] other info that might help us debug this: [ 345.748550] [ 345.750142] Possible unsafe locking scenario: [ 345.750142] [ 345.751380] CPU0 CPU1 [ 345.752332] ---- ---- [ 345.753214] lock(&rdev->wiphy.mtx); [ 345.754175] lock(rtnl_mutex); [ 345.755459] lock(&rdev->wiphy.mtx); [ 345.756693] lock(rtnl_mutex); [ 345.757396] [ 345.757396] *** DEADLOCK *** [ 345.757396] [ 345.758537] 4 locks held by kworker/u8:1/66: [ 345.759455] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 345.761570] #1: ffff88800bc7fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 345.763669] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 345.765556] #3: ffff888015100768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 345.767695] [ 345.767695] stack backtrace: [ 345.768576] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 345.770190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 345.771759] Workqueue: netns cleanup_net [ 345.772568] Call Trace: [ 345.773052] [ 345.773485] dump_stack_lvl+0xca/0x120 [ 345.774290] print_circular_bug+0x47b/0x750 [ 345.775239] check_noncircular+0x2e9/0x3c0 [ 345.776097] ? __pfx_check_noncircular+0x10/0x10 [ 345.776919] ? hlock_class+0x4e/0x130 [ 345.777671] ? srso_return_thunk+0x5/0x5f [ 345.778567] ? mark_lock+0xac/0xed0 [ 345.779399] ? lockdep_lock+0xba/0x1b0 [ 345.780331] ? __pfx_lockdep_lock+0x10/0x10 [ 345.781203] __lock_acquire+0x29fd/0x4580 [ 345.782007] ? __pfx___lock_acquire+0x10/0x10 [ 345.782907] ? lock_release+0x20f/0x6f0 [ 345.783793] ? __pfx_lock_release+0x10/0x10 [ 345.784722] ? srso_return_thunk+0x5/0x5f [ 345.785655] lock_acquire+0x19b/0x520 [ 345.786525] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.787817] ? __pfx_lock_acquire+0x10/0x10 [ 345.788896] ? __pfx_lock_release+0x10/0x10 [ 345.789863] ? __pfx_try_to_wake_up+0x10/0x10 [ 345.790884] ? srso_return_thunk+0x5/0x5f [ 345.791850] ? lock_is_held_type+0x9e/0x120 [ 345.792851] ? srso_return_thunk+0x5/0x5f [ 345.793828] __mutex_lock+0x13d/0xb50 [ 345.794723] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.795968] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.797206] ? srso_return_thunk+0x5/0x5f [ 345.798133] ? synchronize_rcu_expedited+0x38a/0x420 [ 345.799224] ? __pfx___mutex_lock+0x10/0x10 [ 345.800198] ? srso_return_thunk+0x5/0x5f [ 345.801154] ? srso_return_thunk+0x5/0x5f [ 345.802094] ? kasan_quarantine_put+0x84/0x1e0 [ 345.803133] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 345.804124] ? srso_return_thunk+0x5/0x5f [ 345.805065] unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.806264] ? __virt_addr_valid+0x2e8/0x5d0 [ 345.807264] ? __pfx_lock_release+0x10/0x10 [ 345.808201] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 345.809465] ? find_held_lock+0x2c/0x110 [ 345.810391] ? srso_return_thunk+0x5/0x5f [ 345.811348] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 345.812420] ? srso_return_thunk+0x5/0x5f [ 345.813327] ? lock_release+0x20f/0x6f0 [ 345.814174] ? __pfx_lock_release+0x10/0x10 [ 345.815109] ? srso_return_thunk+0x5/0x5f [ 345.816013] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 345.817130] ? srso_return_thunk+0x5/0x5f [ 345.818068] unregister_netdevice_queue+0x224/0x2e0 [ 345.819141] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 345.820293] ? up_write+0x195/0x520 [ 345.821114] _cfg80211_unregister_wdev+0x57b/0x700 [ 345.822165] ? srso_return_thunk+0x5/0x5f [ 345.823089] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 345.824118] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 345.825239] ? srso_return_thunk+0x5/0x5f [ 345.826143] ? srso_return_thunk+0x5/0x5f [ 345.827092] ? synchronize_rcu+0x1ff/0x260 [ 345.828007] ieee80211_unregister_hw+0x55/0x3a0 [ 345.829009] hwsim_exit_net+0x3a0/0x730 [ 345.829879] ? __pfx_hwsim_exit_net+0x10/0x10 [ 345.830835] ? srso_return_thunk+0x5/0x5f [ 345.831788] ? netdev_run_todo+0x788/0x1040 [ 345.833778] ? srso_return_thunk+0x5/0x5f [ 345.834722] ? __pfx_hwsim_exit_net+0x10/0x10 [ 345.835719] ops_exit_list+0xb3/0x180 [ 345.836556] cleanup_net+0x546/0xad0 [ 345.837385] ? __pfx_cleanup_net+0x10/0x10 [ 345.838341] process_one_work+0x8ee/0x1a10 [ 345.839335] ? __pfx_lock_acquire+0x10/0x10 [ 345.840278] ? __pfx_process_one_work+0x10/0x10 [ 345.841320] ? srso_return_thunk+0x5/0x5f [ 345.842257] ? move_linked_works+0x172/0x270 [ 345.843242] ? srso_return_thunk+0x5/0x5f [ 345.844185] ? assign_work+0x196/0x240 [ 345.845083] worker_thread+0x674/0xe70 [ 345.846028] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 345.847713] ? srso_return_thunk+0x5/0x5f [ 345.848612] ? __pfx_worker_thread+0x10/0x10 [ 345.849574] kthread+0x3ab/0x720 [ 345.850349] ? __pfx_kthread+0x10/0x10 [ 345.851238] ? srso_return_thunk+0x5/0x5f [ 345.852010] ? finish_task_switch.isra.0+0x206/0x840 [ 345.852902] ? __pfx_kthread+0x10/0x10 [ 345.853615] ret_from_fork+0x48/0x80 [ 345.854263] ? __pfx_kthread+0x10/0x10 [ 345.854973] ret_from_fork_asm+0x1a/0x30 [ 345.855763] [ 347.408290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.412573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.415094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.419896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.424834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.428671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.536088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.538798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.541988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.548493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.550991] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.553133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.604910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.606974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.615767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.622815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.634724] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.644668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.799878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.812764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.814808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.821636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.823369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.829615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.829904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.830965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.836389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.839300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.841463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.857365] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.877640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.877925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.894369] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.905607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.910695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.910988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.917985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.921743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.930318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.931357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.931784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.932899] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 347.937724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.938622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.944154] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 347.945784] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.954323] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.955792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.446476] Bluetooth: hci0: command tx timeout [ 349.637546] Bluetooth: hci1: command tx timeout [ 349.701588] Bluetooth: hci2: command tx timeout [ 349.957480] Bluetooth: hci3: command tx timeout [ 350.021559] Bluetooth: hci6: command tx timeout [ 350.086630] Bluetooth: hci7: command tx timeout [ 350.213596] Bluetooth: hci4: command tx timeout [ 350.213820] Bluetooth: hci5: command tx timeout [ 351.493570] Bluetooth: hci0: command tx timeout [ 351.685497] Bluetooth: hci1: command tx timeout [ 351.749503] Bluetooth: hci2: command tx timeout [ 352.006808] Bluetooth: hci3: command tx timeout [ 352.070470] Bluetooth: hci6: command tx timeout [ 352.133484] Bluetooth: hci7: command tx timeout [ 352.262527] Bluetooth: hci5: command tx timeout [ 352.262909] Bluetooth: hci4: command tx timeout [ 353.541471] Bluetooth: hci0: command tx timeout [ 353.733487] Bluetooth: hci1: command tx timeout [ 353.797512] Bluetooth: hci2: command tx timeout [ 354.053703] Bluetooth: hci3: command tx timeout [ 354.117536] Bluetooth: hci6: command tx timeout [ 354.181985] Bluetooth: hci7: command tx timeout [ 354.309489] Bluetooth: hci5: command tx timeout [ 354.312566] Bluetooth: hci4: command tx timeout [ 355.590446] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 12:46:02 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8bb27 RDX=ffffed100d9c6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=ffff8880160bf140 R12=ffffffff864021d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056121fcd0e70 CR3=000000000e602000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001ffffffff000056122937a240 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005612293aaca000005612293a83d0 XMM06=00005612293acfb00000000300000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000068 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800bc7ebb8 R8 =0000000000000001 R9 =ffffed100178fd67 R10=0000000000000068 R11=7369786520656874 R12=0000000000000068 R13=0000000000000001 R14=ffff888008fea021 R15=ffff88800bc7eeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4b75e5b1d0 CR3=000000001351e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ae093a237961e7b12146929472ccbbec XMM02=00000000000fd3a0f61f520134a0d9c2 XMM03=0000000000138c50f9980df3bdc2dbad XMM04=cf63e26e023163d100000000000ae988 XMM05=ebfae20747c011c50000000000150908 XMM06=9f165a4fe6c971ad0000000000138d58 XMM07=711fbe8126c5d3440000000000138c50 XMM08=ee7587d5db12e8e300000000000fd3a0 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000