Warning: Permanently added '[localhost]:29565' (ECDSA) to the list of known hosts. 2025/01/19 13:48:57 fuzzer started 2025/01/19 13:48:58 dialing manager at localhost:44245 syzkaller login: [ 70.287835] cgroup: Unknown subsys name 'net' [ 70.395431] cgroup: Unknown subsys name 'cpuset' [ 70.429907] cgroup: Unknown subsys name 'rlimit' [ 76.820215] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 13:49:15 syscalls: 200 2025/01/19 13:49:15 code coverage: enabled 2025/01/19 13:49:15 comparison tracing: enabled 2025/01/19 13:49:15 extra coverage: enabled 2025/01/19 13:49:15 setuid sandbox: enabled 2025/01/19 13:49:15 namespace sandbox: enabled 2025/01/19 13:49:15 Android sandbox: enabled 2025/01/19 13:49:15 fault injection: enabled 2025/01/19 13:49:15 leak checking: enabled 2025/01/19 13:49:15 net packet injection: enabled 2025/01/19 13:49:15 net device setup: enabled 2025/01/19 13:49:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 13:49:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 13:49:15 USB emulation: enabled 2025/01/19 13:49:15 hci packet injection: enabled 2025/01/19 13:49:15 wifi device emulation: enabled 2025/01/19 13:49:15 802.15.4 emulation: enabled 2025/01/19 13:49:15 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 13:49:17 starting 8 fuzzer processes 13:49:17 executing program 0: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x88602) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/138) r2 = io_uring_setup(0x9cd, &(0x7f00000001c0)={0x0, 0x4c0f, 0x27, 0x1, 0x24c}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000240)=""/151) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000300)=""/207) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x408c81, 0x0) write$snapshot(r0, &(0x7f00000004c0)="480e23abcd88b9969842cdc11164b68daac6a25a11ff32d9835c14ce05eb13e983351574da6612554182e939348221b8321ad5f92d03a7ea9669c350731d6af408425d8bded7a1ae9bb9b1b79399e7dfb41fb071bf7ad7b773f2ca44bbb07a0c4e1268b659d5179de425312feea567533327ed0465f73ed571e94831fda0035224b5fba9e477f5f20bb13f59869f6aca03ba1d671b1cb484ccfc373f14d7f4703f3d291c0bc5a72cc0ecb12faea041644814246295ab5786223805d167a9034a1f5cf74667b6c9b9463f29428daab373d7e8d62b00be0aa4d80137e7e0acbc8a8564a4b9da89d97645811b6d", 0xec) r5 = io_uring_setup(0xd2b, &(0x7f00000005c0)={0x0, 0x54ad, 0x1, 0x2, 0x343, 0x0, r2}) io_uring_setup(0x4c5, &(0x7f0000000640)={0x0, 0xe26e, 0x10, 0x3, 0x21a, 0x0, r5}) 13:49:17 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x24048841) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000850) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}]}]}, 0x58}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x93b89c9c3bd41e51}, 0x541adf60969fcc8d) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc004}, 0x24000995) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004000) 13:49:17 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0xdc}}, 0x24040001) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, r0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004010}, 0x24048000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x93}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x11) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb8, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4040890) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000a00)=""/123) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9fbdea31e22d65b76671798c69466e62"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='net/fib_triestat\x00') ioctl$CDROMSTOP(r5, 0x5307) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000004cc0)={0x0, @l2={0x1f, 0x101, @none, 0x3, 0x2}, @nfc={0x27, 0x1, 0x1, 0x7}, @can={0x1d, 0x0}, 0x1f, 0x0, 0x0, 0x0, 0x5, &(0x7f0000004c80)='ip6erspan0\x00', 0x0, 0x2, 0x8001}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000004e00)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d40)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004040) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000004f00)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x10, 0x3f8, 0x4, 0x70bd26, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040850}, 0x24000810) 13:49:17 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/155) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000100)=""/204) r3 = pidfd_getfd(r0, r2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0xf3d) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x80000000, 0x40) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000280)={0x7, 0x12, 0x2, 0x1f, "86f21f25812b05957865659635dd5961d896ba76a6b61e6ecd52ffcf0ea3e3ba"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/mcfilter\x00') ioctl$CDROMEJECT(r5, 0x5309) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='timerslack_ns\x00') ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000340)=""/122) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x240181, 0x0) ioctl$CDROMPAUSE(r7, 0x5301) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00') ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f0000000440)={0xbb1, 0x8, 0x7, 0x8, 0x9, 0x8}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000480)=[0x1, 0xfffffffd]) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000500)=@lstk={0x7, 0x0, "b427744748", 0x4, 0x1, 0x1}) 13:49:17 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) write$snapshot(r0, &(0x7f0000000040)="61476db74385d6c7547df9de54bbfe626e633e3aa534c749fb1522b8158c30507331c7eefcb4b23e144652e7d742e825c56bb588802b712766ae32691d3e5e549cd9c074eceebd9fee97a4a9f063b2359f32ec18025dec2d0e755bcb5326eb4a8f3c591ff487eb3d3a2f9574834e1b2201cdc3401906848549555a77af781eb9db59ba", 0x83) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008844) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000200)=""/127) write$snapshot(r0, &(0x7f0000000280)="14d8ffcda95d3c881eb6afe4738f5ee058cc583ef3e4ada7af8c832d5f53f95235f8ab30de5c2dcccf6cd167d0ea091f1bb7ac61cf51132993c8f4e37f5fef1f78d4ba729ce6712bd95ad24ade5d965718770c9d4742fce56377d3512d343d8f28cbf7c74a605feb2f7d3564f5ac5d89ccfa90f8616d24c27b5306788343b7aabbd9b67151ad1c683f73b3beacad635ccb0d4d3f467fd072ef0a38b411257ddd844741e215a0493003c0d4464619de8be256025787ad014bfcc20394570e1884147af8a8541352c6a82a4996dae3bdf08d3aad23a9f81b00950e64c4febf343627d1ffcab50d4bf5b2b7d95de8fd39446857e191b9", 0xf5) semget$private(0x0, 0x0, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x4a280) read$usbmon(r1, &(0x7f00000003c0)=""/201, 0xc9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0x2, 0x4}, 0x6) r3 = semget(0x1, 0x0, 0x244) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000500)=""/203) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10010, r1, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000600)={0x40000000}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20048000) r5 = accept(r2, &(0x7f00000007c0)=@alg, &(0x7f0000000840)=0x80) recvmsg(r5, &(0x7f0000000cc0)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/71, 0x47}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000ac0)=""/64, 0x40}, {&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000c00)=""/44, 0x2c}], 0x6}, 0x40000000) r6 = socket(0x10, 0x2, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, &(0x7f0000000d00)="9bbf199b2df9c66ddebfda68e47353d0d6491aac2047beb33337fe0ff3789e2ffad1f354355ec22a58e6df6e3cda741e7e4cce1a19e2d0d3b7154ddfcba34ce1f012d23cc52a2c889bd172ce9a807f2107b5255caf403ce179f58205f4366ff85280b8de8ffef34e78a60a966794b791ab933ace373f0421d1fa4ff4dfdf54933da7f0fd7ebcf920984430a412d5c480f33cbad81c0a96b6ed64a42d4d29607841892b91725e8cc65219847fef66412065b073a07b9760bb0ece6fdff411df671e6ad9f6866a9185a97ed5ba3848c843cd0a5c5059b02298a01a81247d1dc39750") [ 89.468251] audit: type=1400 audit(1737294557.681:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:49:17 executing program 6: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2002}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/149) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = accept(r0, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0x80) r3 = accept4$packet(r1, &(0x7f0000000340), &(0x7f0000000380)=0x14, 0x80800) epoll_pwait2(r0, &(0x7f00000003c0)=[{}, {}], 0x2, &(0x7f0000000400), &(0x7f0000000440)={[0x40000000000000]}, 0x8) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) socketpair(0x1a, 0x800, 0x81, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000500)={0x0, @ax25={0x3, @null, 0x3}, @can={0x1d, r2}, @in={0x2, 0x4e22, @private=0xa010100}, 0x6, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)='veth0_virt_wifi\x00', 0x0, 0x20, 0x37a}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x60600, 0x0) process_mrelease(r5, 0x0) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f00000005c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb0, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48011}, 0x4) socketpair(0x2, 0x80001, 0x4, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000006d80)=[{{&(0x7f0000001f40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001fc0)=""/122, 0x7a}, {&(0x7f0000002040)=""/175, 0xaf}, {&(0x7f0000002100)=""/230, 0xe6}, {&(0x7f0000002200)=""/60, 0x3c}, {&(0x7f0000002240)=""/14, 0xe}, {&(0x7f0000002280)=""/87, 0x57}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x7, &(0x7f0000003380)=""/50, 0x32}, 0xfffffff8}, {{&(0x7f00000033c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000004780)=[{&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/188, 0xbc}, {&(0x7f0000004580)=""/183, 0xb7}, {&(0x7f0000004640)=""/170, 0xaa}, {&(0x7f0000004700)=""/124, 0x7c}], 0x6, &(0x7f0000004800)=""/220, 0xdc}, 0x9}, {{&(0x7f0000004900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004980)=""/222, 0xde}, {&(0x7f0000004a80)=""/178, 0xb2}, {&(0x7f0000004b40)=""/2, 0x2}, {&(0x7f0000004b80)=""/99, 0x63}, {&(0x7f0000004c00)=""/5, 0x5}, {&(0x7f0000004c40)=""/41, 0x29}, {&(0x7f0000004c80)=""/109, 0x6d}, {&(0x7f0000004d00)=""/132, 0x84}], 0x8, &(0x7f0000004e40)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000005e40)=@l2, 0x80, &(0x7f0000006440)=[{&(0x7f0000005ec0)=""/166, 0xa6}, {&(0x7f0000005f80)=""/69, 0x45}, {&(0x7f0000006000)=""/193, 0xc1}, {&(0x7f0000006100)=""/163, 0xa3}, {&(0x7f00000061c0)=""/243, 0xf3}, {&(0x7f00000062c0)=""/64, 0x40}, {&(0x7f0000006300)=""/159, 0x9f}, {&(0x7f00000063c0)=""/81, 0x51}], 0x8}, 0x33679b96}, {{&(0x7f00000064c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006540)=""/205, 0xcd}, {&(0x7f0000006640)=""/199, 0xc7}, {&(0x7f0000006740)=""/88, 0x58}, {&(0x7f00000067c0)=""/207, 0xcf}], 0x4, &(0x7f0000006900)=""/147, 0x93}}, {{0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f00000069c0)=""/191, 0xbf}, {&(0x7f0000006a80)=""/114, 0x72}, {&(0x7f0000006b00)}, {&(0x7f0000006b40)=""/116, 0x74}, {&(0x7f0000006bc0)=""/105, 0x69}, {&(0x7f0000006c40)=""/192, 0xc0}], 0x6}, 0xff}], 0x6, 0x60, &(0x7f0000006f00)) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000006f80)={0x0, @generic={0x2a, "4ea434d9e254e16d63a4473747fa"}, @qipcrtr={0x2a, 0xffffffff, 0x4001}, @xdp={0x2c, 0x9, r7, 0x12}, 0x8001, 0x0, 0x0, 0x0, 0x5, &(0x7f0000006f40)='veth1_to_bond\x00', 0x100000001, 0x7, 0x1}) process_madvise(r5, &(0x7f00000071c0)=[{&(0x7f0000007000)="674fed0dc6df0fbd6d2179823ffb635ffc1a84a0e804478e5b1e6ce393df329dc43560cd3227749190ffec7173b856f146e56f410b24df47389827700f3b0f0a4a350132a7f21cc4ef4eeb84bf", 0x4d}, {&(0x7f0000007080)="4d1df63a4d880f15acaf9ca8e156c6934c94579dfe2d186a2de8c449b890824194bf9e989b4459dcbdb8ab21a377683ccee259f38a72926b88", 0x39}, {&(0x7f00000070c0)="4a37b30f557397bf1ac105671e9dd32d9be6650a0d5b247a5ebef48fe4fc26ec4e1daceeb0b8d81a366f1b1cda35503cff2de856dca64c294181abb629795f705c3c7a088d6d0c1314cb109415f49d970747d98e652db3b3b370a8986cc9d9250a333129d67f2cf30c7637313a57ab0c308e47ee7664ac16d76933110147492afc51e980c859006caefa22950b8a0226e49e7576a4b58ee8dd940e31fbd796631d67b0b1be2c1975b41e827f4bd5b5b234171aed2fa747878183204f0eb4050e6449ff048555c3de5c22725474376cd24d3d0f33395c5863921e947dcb04eecf2d1e830fdcc9", 0xe6}], 0x3, 0x4, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000007340)={&(0x7f0000007200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007300)={&(0x7f0000007240)={0xa0, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x804) 13:49:17 executing program 5: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/192) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/29) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x36a, 0x1470c2) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000140)=""/18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00') ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x20, 0x1d, 0x200, 0x10000, "3920e6db4280480967a1a9a36aea50372cbf368d97f1d0b74c28010b5c6b145a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000380)=""/129) recvmmsg(r1, &(0x7f0000004d80)=[{{&(0x7f00000018c0)=@ax25={{0x3, @netrom}, [@remote, @remote, @remote, @netrom, @bcast, @rose, @rose, @null]}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001940)=""/175, 0xaf}, {&(0x7f0000001a00)=""/78, 0x4e}, {&(0x7f0000001a80)=""/62, 0x3e}, {&(0x7f0000001ac0)=""/49, 0x31}, {&(0x7f0000001b00)=""/99, 0x63}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/44, 0x2c}, {&(0x7f0000001c00)=""/185, 0xb9}, {&(0x7f0000001cc0)=""/242, 0xf2}, {&(0x7f0000001dc0)=""/37, 0x25}], 0xa, &(0x7f0000001ec0)=""/198, 0xc6}, 0x62}, {{&(0x7f0000001fc0)=@phonet, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002040)=""/113, 0x71}, {&(0x7f00000020c0)=""/190, 0xbe}, {&(0x7f0000002180)=""/39, 0x27}, {&(0x7f00000021c0)=""/244, 0xf4}, {&(0x7f00000022c0)=""/200, 0xc8}], 0x5, &(0x7f0000002440)=""/182, 0xb6}, 0x3}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002500)=""/153, 0x99}, {&(0x7f00000025c0)=""/84, 0x54}, {&(0x7f0000002640)=""/13, 0xd}], 0x3, &(0x7f00000026c0)=""/167, 0xa7}, 0xfff}, {{&(0x7f0000002780)=@ax25={{0x3, @netrom}, [@remote, @remote, @rose, @rose, @null, @remote, @remote, @netrom]}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/192, 0xc0}, {&(0x7f00000028c0)=""/116, 0x74}, {&(0x7f0000002940)=""/153, 0x99}], 0x3, &(0x7f0000002a40)=""/176, 0xb0}, 0x1f}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002b00)=""/4096, 0x1000}], 0x1, &(0x7f0000003b40)=""/241, 0xf1}, 0x9}, {{&(0x7f0000003c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/50, 0x32}], 0x2, &(0x7f0000004d40)=""/61, 0x3d}, 0x4}], 0x6, 0x2001, &(0x7f0000004f00)) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000005000)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x20, 0x3fa, 0x10, 0x0, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x20008051) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000005040)='net/dev\x00') ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000005080)=""/98) r5 = gettid() syz_open_procfs(r5, &(0x7f0000005100)='net/udp6\x00') ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000005140)=0x5) socketpair(0x11, 0xa, 0x2, &(0x7f0000005180)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005280)={&(0x7f0000005200)={0x60, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x60}}, 0x400e014) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000005340)=""/73) 13:49:17 executing program 7: r0 = getpgrp(0xffffffffffffffff) getpgid(r0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x78}}, 0x4000) getpgrp(r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000c0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, 0xfffffffffffffffc, 0x48001) r6 = socket(0x18, 0x80000, 0x10000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40880}, 0x2) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x105002, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, &(0x7f0000000740)) syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r1) [ 90.886801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.887222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.893853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.894704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.898422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.898825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.906928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.911037] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.913833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.927195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.931180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.934554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.938646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.949688] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.952385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.969687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.972229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.975238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.983802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.984801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.001610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.006961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.014341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.015916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.019809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.023481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.026112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.028132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.028579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.035024] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.039944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.041379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.042184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.052779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.054412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.059024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.062901] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.063887] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.064543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.066531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.067000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.068161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.070245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.071558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.097738] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.102283] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.105079] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.107183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.972379] Bluetooth: hci0: command tx timeout [ 93.034559] Bluetooth: hci2: command tx timeout [ 93.035589] Bluetooth: hci1: command tx timeout [ 93.162619] Bluetooth: hci4: command tx timeout [ 93.163114] Bluetooth: hci3: command tx timeout [ 93.163493] Bluetooth: hci7: command tx timeout [ 93.163739] Bluetooth: hci5: command tx timeout [ 93.226636] Bluetooth: hci6: command tx timeout [ 95.018634] Bluetooth: hci0: command tx timeout [ 95.084346] Bluetooth: hci1: command tx timeout [ 95.084373] Bluetooth: hci2: command tx timeout [ 95.210408] Bluetooth: hci5: command tx timeout [ 95.210529] Bluetooth: hci7: command tx timeout [ 95.210594] Bluetooth: hci3: command tx timeout [ 95.210644] Bluetooth: hci4: command tx timeout [ 95.275443] Bluetooth: hci6: command tx timeout [ 97.067926] Bluetooth: hci0: command tx timeout [ 97.131361] Bluetooth: hci2: command tx timeout [ 97.131459] Bluetooth: hci1: command tx timeout [ 97.258510] Bluetooth: hci4: command tx timeout [ 97.258613] Bluetooth: hci3: command tx timeout [ 97.258706] Bluetooth: hci7: command tx timeout [ 97.260588] Bluetooth: hci5: command tx timeout [ 97.323043] Bluetooth: hci6: command tx timeout [ 99.114592] Bluetooth: hci0: command tx timeout [ 99.178498] Bluetooth: hci1: command tx timeout [ 99.179665] Bluetooth: hci2: command tx timeout [ 99.306601] Bluetooth: hci5: command tx timeout [ 99.306749] Bluetooth: hci7: command tx timeout [ 99.306907] Bluetooth: hci3: command tx timeout [ 99.307024] Bluetooth: hci4: command tx timeout [ 99.370748] Bluetooth: hci6: command tx timeout [ 153.104199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.106204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.107211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.108253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.111158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.112921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.115642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.116682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.116700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.120072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.132516] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.136604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.147695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.150202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.153436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.158166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.160426] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.165267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.299015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.308534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.333637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.353706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.368641] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.377674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.378831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.386735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.404559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.465995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.468079] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.470376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.478559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.480221] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.481976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.485355] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.486460] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.489642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.491074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.497717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.508635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.508817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.511987] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.512166] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.514383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.516612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.519237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.534061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.543632] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.545091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.178449] Bluetooth: hci1: command tx timeout [ 155.178878] Bluetooth: hci0: command tx timeout [ 155.242424] Bluetooth: hci2: command tx timeout [ 155.498496] Bluetooth: hci3: command tx timeout [ 155.562490] Bluetooth: hci4: command tx timeout [ 155.626390] Bluetooth: hci6: command tx timeout [ 155.626872] Bluetooth: hci7: command tx timeout [ 155.690535] Bluetooth: hci5: command tx timeout [ 157.227438] Bluetooth: hci0: command tx timeout [ 157.227543] Bluetooth: hci1: command tx timeout [ 157.293376] Bluetooth: hci2: command tx timeout [ 157.547891] Bluetooth: hci3: command tx timeout [ 157.611338] Bluetooth: hci4: command tx timeout [ 157.675364] Bluetooth: hci7: command tx timeout [ 157.675444] Bluetooth: hci6: command tx timeout [ 157.739470] Bluetooth: hci5: command tx timeout [ 159.275431] Bluetooth: hci0: command tx timeout [ 159.275529] Bluetooth: hci1: command tx timeout [ 159.338390] Bluetooth: hci2: command tx timeout [ 159.595412] Bluetooth: hci3: command tx timeout [ 159.659476] Bluetooth: hci4: command tx timeout [ 159.722356] Bluetooth: hci6: command tx timeout [ 159.722441] Bluetooth: hci7: command tx timeout [ 159.786534] Bluetooth: hci5: command tx timeout [ 161.322418] Bluetooth: hci1: command tx timeout [ 161.322520] Bluetooth: hci0: command tx timeout [ 161.387340] Bluetooth: hci2: command tx timeout [ 161.643440] Bluetooth: hci3: command tx timeout [ 161.707375] Bluetooth: hci4: command tx timeout [ 161.770437] Bluetooth: hci6: command tx timeout [ 161.770672] Bluetooth: hci7: command tx timeout [ 161.834342] Bluetooth: hci5: command tx timeout [ 215.352671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.355184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.357680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.369748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.373628] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.376226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.486076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.490503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.492711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.496518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.499158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.501517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.536746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.538992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.543068] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.543665] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.545719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.546067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.554486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.554519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.559738] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.563533] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.563727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.578992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.622955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.628152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.639784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.641646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.649557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.651668] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.673802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.675526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.685714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.689841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.691863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.692182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.692801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.707155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.707506] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.711484] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.713470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.717532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.722418] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.724485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.728625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.752822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.764657] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.766729] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.450846] Bluetooth: hci0: command tx timeout [ 217.578714] Bluetooth: hci1: command tx timeout [ 217.644189] Bluetooth: hci2: command tx timeout [ 217.644719] Bluetooth: hci3: command tx timeout [ 217.770372] Bluetooth: hci5: command tx timeout [ 217.834659] Bluetooth: hci7: command tx timeout [ 217.835012] Bluetooth: hci6: command tx timeout [ 217.835200] Bluetooth: hci4: command tx timeout [ 219.500318] Bluetooth: hci0: command tx timeout [ 219.627348] Bluetooth: hci1: command tx timeout [ 219.691387] Bluetooth: hci2: command tx timeout [ 219.691418] Bluetooth: hci3: command tx timeout [ 219.819406] Bluetooth: hci5: command tx timeout [ 219.882423] Bluetooth: hci7: command tx timeout [ 219.882461] Bluetooth: hci4: command tx timeout [ 219.882544] Bluetooth: hci6: command tx timeout [ 221.546509] Bluetooth: hci0: command tx timeout [ 221.674440] Bluetooth: hci1: command tx timeout [ 221.739396] Bluetooth: hci3: command tx timeout [ 221.739419] Bluetooth: hci2: command tx timeout [ 221.868221] Bluetooth: hci5: command tx timeout [ 221.930404] Bluetooth: hci6: command tx timeout [ 221.932560] Bluetooth: hci7: command tx timeout [ 221.932639] Bluetooth: hci4: command tx timeout [ 223.594499] Bluetooth: hci0: command tx timeout [ 223.722401] Bluetooth: hci1: command tx timeout [ 223.786365] Bluetooth: hci2: command tx timeout [ 223.788572] Bluetooth: hci3: command tx timeout [ 223.914346] Bluetooth: hci5: command tx timeout [ 223.978417] Bluetooth: hci4: command tx timeout [ 223.978503] Bluetooth: hci7: command tx timeout [ 223.978604] Bluetooth: hci6: command tx timeout [ 277.820034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.842497] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.845161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.855774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.861311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.863880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.912108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.916062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.919775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.932967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.938576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.940668] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.958477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.961561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.966188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.974533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.978583] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.981710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.036165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.039667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.042490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.048758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.055721] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.058725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.096966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.101230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.103052] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.107364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.112504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.114595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.143809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.147103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.157790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.160440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.184842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.187995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.192214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.195482] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.199192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.202611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.214078] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.216816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.347066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.355464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.370001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.397002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.418765] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.421719] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.914387] Bluetooth: hci0: command tx timeout [ 279.978352] Bluetooth: hci1: command tx timeout [ 280.042372] Bluetooth: hci2: command tx timeout [ 280.234359] Bluetooth: hci3: command tx timeout [ 280.298451] Bluetooth: hci4: command tx timeout [ 280.298487] Bluetooth: hci6: command tx timeout [ 280.555417] Bluetooth: hci5: command tx timeout [ 280.876319] Bluetooth: hci7: command tx timeout [ 281.962326] Bluetooth: hci0: command tx timeout [ 282.026434] Bluetooth: hci1: command tx timeout [ 282.090365] Bluetooth: hci2: command tx timeout [ 282.282384] Bluetooth: hci3: command tx timeout [ 282.346447] Bluetooth: hci6: command tx timeout [ 282.346684] Bluetooth: hci4: command tx timeout [ 282.602317] Bluetooth: hci5: command tx timeout [ 282.922307] Bluetooth: hci7: command tx timeout [ 284.011306] Bluetooth: hci0: command tx timeout [ 284.074361] Bluetooth: hci1: command tx timeout [ 284.139270] Bluetooth: hci2: command tx timeout [ 284.330394] Bluetooth: hci3: command tx timeout [ 284.395305] Bluetooth: hci6: command tx timeout [ 284.395403] Bluetooth: hci4: command tx timeout [ 284.651332] Bluetooth: hci5: command tx timeout [ 284.970315] Bluetooth: hci7: command tx timeout [ 286.059360] Bluetooth: hci0: command tx timeout [ 286.122409] Bluetooth: hci1: command tx timeout [ 286.187739] Bluetooth: hci2: command tx timeout [ 286.379558] Bluetooth: hci3: command tx timeout [ 286.442680] Bluetooth: hci4: command tx timeout [ 286.442788] Bluetooth: hci6: command tx timeout [ 286.699007] Bluetooth: hci5: command tx timeout [ 287.019416] Bluetooth: hci7: command tx timeout [ 335.775041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.775167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.931618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.931703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.029814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.029891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.141584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.141666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.278184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.278710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.476564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.476649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.896318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.896386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.010329] [ 337.010570] ====================================================== [ 337.011158] WARNING: possible circular locking dependency detected [ 337.011748] 6.13.0-rc7-next-20250117 #1 Not tainted [ 337.012249] ------------------------------------------------------ [ 337.013390] kworker/u8:2/13682 is trying to acquire lock: [ 337.014619] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.016644] [ 337.016644] but task is already holding lock: [ 337.018190] ffff88802e988768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.020042] [ 337.020042] which lock already depends on the new lock. [ 337.020042] [ 337.021562] [ 337.021562] the existing dependency chain (in reverse order) is: [ 337.022782] [ 337.022782] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.023442] __mutex_lock+0x13d/0xb50 [ 337.023900] wiphy_register+0x1b2e/0x25d0 [ 337.024388] ieee80211_register_hw+0x23a4/0x3d60 [ 337.024934] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 337.025491] init_mac80211_hwsim+0x389/0x870 [ 337.026012] do_one_initcall+0xf9/0x640 [ 337.026497] kernel_init_freeable+0x53d/0x7a0 [ 337.027011] kernel_init+0x1e/0x2d0 [ 337.027429] ret_from_fork+0x48/0x80 [ 337.027848] ret_from_fork_asm+0x1a/0x30 [ 337.028341] [ 337.028341] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.028955] __lock_acquire+0x29fd/0x4580 [ 337.029426] lock_acquire+0x19b/0x520 [ 337.029872] __mutex_lock+0x13d/0xb50 [ 337.030332] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.030951] unregister_netdevice_queue+0x224/0x2e0 [ 337.031506] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.032067] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.032622] ieee80211_unregister_hw+0x55/0x3a0 [ 337.033148] hwsim_exit_net+0x3a0/0x730 [ 337.033611] ops_exit_list+0xb3/0x180 [ 337.034060] cleanup_net+0x546/0xad0 [ 337.034503] process_one_work+0x8ee/0x1a10 [ 337.034999] worker_thread+0x674/0xe70 [ 337.035471] kthread+0x3ab/0x720 [ 337.035895] ret_from_fork+0x48/0x80 [ 337.036337] ret_from_fork_asm+0x1a/0x30 [ 337.036828] [ 337.036828] other info that might help us debug this: [ 337.036828] [ 337.037589] Possible unsafe locking scenario: [ 337.037589] [ 337.038159] CPU0 CPU1 [ 337.038609] ---- ---- [ 337.039060] lock(&rdev->wiphy.mtx); [ 337.039463] lock(rtnl_mutex); [ 337.040047] lock(&rdev->wiphy.mtx); [ 337.040678] lock(rtnl_mutex); [ 337.041034] [ 337.041034] *** DEADLOCK *** [ 337.041034] [ 337.041603] 4 locks held by kworker/u8:2/13682: [ 337.042051] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.043055] #1: ffff888031377d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.044024] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.044923] #3: ffff88802e988768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.045945] [ 337.045945] stack backtrace: [ 337.046380] CPU: 0 UID: 0 PID: 13682 Comm: kworker/u8:2 Not tainted 6.13.0-rc7-next-20250117 #1 [ 337.047200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.047974] Workqueue: netns cleanup_net [ 337.048400] Call Trace: [ 337.048653] [ 337.048881] dump_stack_lvl+0xca/0x120 [ 337.049298] print_circular_bug+0x47b/0x750 [ 337.049736] check_noncircular+0x2e9/0x3c0 [ 337.050168] ? __pfx_check_noncircular+0x10/0x10 [ 337.050641] ? hlock_class+0x4e/0x130 [ 337.051019] ? mark_lock+0xac/0xed0 [ 337.051391] ? srso_return_thunk+0x5/0x5f [ 337.051824] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 337.052291] ? lockdep_lock+0xba/0x1b0 [ 337.052704] ? __pfx_lockdep_lock+0x10/0x10 [ 337.053169] __lock_acquire+0x29fd/0x4580 [ 337.053596] ? __pfx___lock_acquire+0x10/0x10 [ 337.054047] ? lock_release+0x20f/0x6f0 [ 337.054456] ? __pfx_lock_release+0x10/0x10 [ 337.054893] lock_acquire+0x19b/0x520 [ 337.055283] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.055858] ? __pfx_lock_acquire+0x10/0x10 [ 337.056310] ? srso_return_thunk+0x5/0x5f [ 337.056746] ? lock_release+0x20f/0x6f0 [ 337.057156] ? srso_return_thunk+0x5/0x5f [ 337.057593] ? lock_is_held_type+0x9e/0x120 [ 337.058048] ? srso_return_thunk+0x5/0x5f [ 337.058481] __mutex_lock+0x13d/0xb50 [ 337.058880] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.059447] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.060028] ? srso_return_thunk+0x5/0x5f [ 337.060465] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.060974] ? __pfx___mutex_lock+0x10/0x10 [ 337.061428] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.061963] ? srso_return_thunk+0x5/0x5f [ 337.062396] ? kasan_quarantine_put+0x84/0x1e0 [ 337.062873] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.063318] ? srso_return_thunk+0x5/0x5f [ 337.063751] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.064318] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.064773] ? __pfx_lock_release+0x10/0x10 [ 337.065205] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.065798] ? find_held_lock+0x2c/0x110 [ 337.066227] ? srso_return_thunk+0x5/0x5f [ 337.066661] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.067167] ? srso_return_thunk+0x5/0x5f [ 337.067601] ? lock_release+0x20f/0x6f0 [ 337.068006] ? __pfx_lock_release+0x10/0x10 [ 337.068453] ? srso_return_thunk+0x5/0x5f [ 337.068887] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.069419] ? srso_return_thunk+0x5/0x5f [ 337.069863] unregister_netdevice_queue+0x224/0x2e0 [ 337.070359] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.070900] ? up_write+0x195/0x520 [ 337.071293] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.071796] ? srso_return_thunk+0x5/0x5f [ 337.072250] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.072755] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.073298] ? srso_return_thunk+0x5/0x5f [ 337.073726] ? srso_return_thunk+0x5/0x5f [ 337.074159] ? synchronize_rcu+0x1ff/0x260 [ 337.074584] ieee80211_unregister_hw+0x55/0x3a0 [ 337.075050] hwsim_exit_net+0x3a0/0x730 [ 337.075450] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.075902] ? srso_return_thunk+0x5/0x5f [ 337.076347] ? netdev_run_todo+0x788/0x1040 [ 337.076786] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.077242] ops_exit_list+0xb3/0x180 [ 337.077634] cleanup_net+0x546/0xad0 [ 337.078019] ? __pfx_cleanup_net+0x10/0x10 [ 337.078451] process_one_work+0x8ee/0x1a10 [ 337.078903] ? __pfx_lock_acquire+0x10/0x10 [ 337.079342] ? __pfx_process_one_work+0x10/0x10 [ 337.079829] ? srso_return_thunk+0x5/0x5f [ 337.080271] ? move_linked_works+0x172/0x270 [ 337.080709] ? srso_return_thunk+0x5/0x5f [ 337.081138] ? assign_work+0x196/0x240 [ 337.081551] worker_thread+0x674/0xe70 [ 337.081965] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.082498] ? srso_return_thunk+0x5/0x5f [ 337.082937] ? __pfx_worker_thread+0x10/0x10 [ 337.083402] kthread+0x3ab/0x720 [ 337.083769] ? __pfx_kthread+0x10/0x10 [ 337.084190] ? srso_return_thunk+0x5/0x5f [ 337.084622] ? finish_task_switch.isra.0+0x206/0x840 [ 337.085142] ? __pfx_kthread+0x10/0x10 [ 337.085559] ret_from_fork+0x48/0x80 [ 337.085929] ? __pfx_kthread+0x10/0x10 [ 337.086333] ret_from_fork_asm+0x1a/0x30 [ 337.086770] [ 337.162257] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 339.124561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.126815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.132074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.137740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.143853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.145796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.512154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.519561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.521755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.536590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.542749] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.547409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.574644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.581529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.588582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.601446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.606629] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.613574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.636117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.642369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.652636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.662133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.675814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.677917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.702562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.718560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.733033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.737934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.747549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.752426] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.818918] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.821213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.825514] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.832416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.838398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.854109] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.859547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.864558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.867738] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.869920] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.871509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.878882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.879212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.894632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.915327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.926588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.965574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.967866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.162296] Bluetooth: hci0: command tx timeout [ 341.612272] Bluetooth: hci1: command tx timeout [ 341.675404] Bluetooth: hci2: command tx timeout [ 341.740268] Bluetooth: hci3: command tx timeout [ 341.802372] Bluetooth: hci4: command tx timeout [ 341.930420] Bluetooth: hci6: command tx timeout [ 341.931099] Bluetooth: hci5: command tx timeout [ 342.058447] Bluetooth: hci7: command tx timeout [ 343.211261] Bluetooth: hci0: command tx timeout [ 343.660305] Bluetooth: hci1: command tx timeout [ 343.722486] Bluetooth: hci2: command tx timeout [ 343.786344] Bluetooth: hci3: command tx timeout [ 343.850395] Bluetooth: hci4: command tx timeout [ 343.978417] Bluetooth: hci6: command tx timeout [ 343.978539] Bluetooth: hci5: command tx timeout [ 344.106294] Bluetooth: hci7: command tx timeout [ 345.259265] Bluetooth: hci0: command tx timeout [ 345.706295] Bluetooth: hci1: command tx timeout [ 345.771277] Bluetooth: hci2: command tx timeout [ 345.834352] Bluetooth: hci3: command tx timeout [ 345.899388] Bluetooth: hci4: command tx timeout [ 346.026289] Bluetooth: hci5: command tx timeout [ 346.026809] Bluetooth: hci6: command tx timeout [ 346.155362] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:53:25 Registers: info registers vcpu 0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff888031376bb8 R8 =0000000000000001 R9 =ffffed100626ed67 R10=000000000000006c R11=3a6b636f6c206762 R12=000000000000006c R13=0000000000000001 R14=ffff888008fea036 R15=ffff888031376eb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b5a770000 CR3=000000002c7c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42cc0 RCX=ffffffff816641b2 RDX=ffff88800f325340 RSI=ffffffff8166418c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880353d79d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c8599 R13=ffff88806ce42cc8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166418e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ceea7c6f4 CR3=0000000005a88000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f3ceea8b47000007f3ceea8af20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000