Warning: Permanently added '[localhost]:54239' (ECDSA) to the list of known hosts. 2025/01/20 00:25:52 fuzzer started 2025/01/20 00:25:53 dialing manager at localhost:44245 syzkaller login: [ 69.831463] cgroup: Unknown subsys name 'net' [ 69.935071] cgroup: Unknown subsys name 'cpuset' [ 69.973280] cgroup: Unknown subsys name 'rlimit' [ 74.693645] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.814943] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 00:26:09 syscalls: 208 2025/01/20 00:26:09 code coverage: enabled 2025/01/20 00:26:09 comparison tracing: enabled 2025/01/20 00:26:09 extra coverage: enabled 2025/01/20 00:26:09 setuid sandbox: enabled 2025/01/20 00:26:09 namespace sandbox: enabled 2025/01/20 00:26:09 Android sandbox: enabled 2025/01/20 00:26:09 fault injection: enabled 2025/01/20 00:26:09 leak checking: enabled 2025/01/20 00:26:09 net packet injection: enabled 2025/01/20 00:26:09 net device setup: enabled 2025/01/20 00:26:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 00:26:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 00:26:09 USB emulation: enabled 2025/01/20 00:26:09 hci packet injection: enabled 2025/01/20 00:26:09 wifi device emulation: enabled 2025/01/20 00:26:09 802.15.4 emulation: enabled 2025/01/20 00:26:09 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 00:26:11 starting 8 fuzzer processes 00:26:11 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x4, 0x200, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x410) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d0, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbb80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9117}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94d6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x800, @remote, 0x80000001}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x50000}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r0, 0xa7b176de9df95433, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xfea235e89cb6e69c) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x20008840) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000020) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x9, 0x7, 0x1}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r0, 0x421, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20000) 00:26:11 executing program 1: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x128, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c0e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0d8de50d9dd8874df81697f7a4de4335f8d6b2e310e59c4b1902b94249f4e17ebd3ecd"}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff165}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000000000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}]}, 0x128}}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x24004841) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x20000800) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000005) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8088080}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x4a542dc388684c51, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000000) 00:26:11 executing program 2: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x63, 0x3, "f3b189a3d368725c7cfa83039eba0930abe4a7c02820814b2655eb4ca91d3a2af1c23934657669f871207cd97181156b03563821cf0d59629019a8a84c89b483ed65cd946eb0251c16fd631c0cde92303d3d138339ce7e2d0b4e7013bee050"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5324}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20}, 0x2000c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x284, r4, 0x900, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf1af}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @private1, 0x401}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x101, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9646}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1e6d}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x284}, 0x1, 0x0, 0x0, 0xc000}, 0x1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000880)={{0x3, 0x1}, {0x6, 0x7fffffff}, 0x8, 0x1}) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x4040) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x8a000, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xf4, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x963}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdd}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x45d}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @local, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x412}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x44801) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000bc0)={"e40be9abe67566f64daa826d6b61f933", 0x0, 0x0, {0xdb7}, {0x0, 0x7ff}, 0xfff, [0xc5, 0x9, 0x0, 0x1fe000000000, 0xffffffffffff32ee, 0x9, 0x6, 0x302b, 0xfffffffffffffff7, 0x1, 0x4, 0x0, 0x9, 0xf420, 0x9, 0x7]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}]}, 0x40}}, 0x20000010) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf0, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2736}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x869d, @local, 0x6}}}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9c5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80), 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008010) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), r6) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000001300)={&(0x7f00000010c0), 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x160, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcfa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb157}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7202}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x510}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40004) 00:26:11 executing program 3: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x50b080) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x3, 0x1b, 0xc0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000440)={0x101, 0x7, 0x2, 0xdd43, 0x1b, "4dd6a0ba54ac4967"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_open_pts(r2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDENABIO(r1, 0x4b36) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000004c0)={0x1, 0x6}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000540)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x81) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000580)={0x3f, 0x3}) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000005c0)={0x5, 0x5, 0x80, 0xffffffffffffff7f, 0x8000}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x311e42, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000640)=0x9) [ 87.785383] audit: type=1400 audit(1737332771.543:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:26:11 executing program 4: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x9000000, 0x500) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000200)) r1 = syz_open_dev$sg(&(0x7f0000000240), 0xae5, 0x200) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x10001, 0x80100) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000002c0)=0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000300)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000340)=0xa7) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x1610c1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x3a442, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0xe3) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000440)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x410c02, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000500)={0x1, 0x4, 0x3, 0x9, 0x80, "7dca74f121ca758e0a42cef4965ad816994a81", 0x8, 0x4f}) 00:26:11 executing program 5: ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x55) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0xec, "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"}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x5, "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"}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000480)={0x5, "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"}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000006c0)={0x2, {0x2, 0x80, 0x8000, 0x401, 0x0, 0x3}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000700)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x141040, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000780)={0x10000, 0x9, 0x7}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000007c0)={0x0, 0x0, 0x9}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000800)={0xffffffffffff9b6a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8a, "82b2d185efb977"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001800)={{r3, 0x401, 0x9, 0x61, 0x100000001, 0x0, 0x4, 0x0, 0xffffffc1, 0x8, 0xfffffff8, 0xfffffffffffffffb, 0x8, 0x3, 0x7}}) ioctl$KDDISABIO(r2, 0x4b37) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002800), 0x10000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000002840)=""/166) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000002d00)={0x3, 0x0, 0x8, 0x16, 0x1ca, &(0x7f0000002900)}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000002d80)) 00:26:11 executing program 6: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffe, 0xc0, 0x6, @buffer={0x0, 0x96, &(0x7f00000000c0)=""/150}, &(0x7f0000000180)="b47bec9985202a0585db0080de545d61bf1292460b7e14cf14903de22648beaa257d7524c0e6f972c80b909cd20214fec68205425cce386c6bfa53759c30d4ffddee440eb29afa68717dd757e64ae8980ca8c06b28f89f4209cf8726a9a0d81f30e58e1a03c55199091336f4998ee68cc2eeadaf0919facace2cfea22384c5c6357aada84de304d8b885f7b2539228325681aa697d5ecdbcf25f8f8d05787fb040bee5a699a07e71a004bb5b5640fe4d4b1b7fe260d63a1bd62b6a5043e02b2b", &(0x7f0000000240)=""/254, 0xd0, 0x12, 0x0, &(0x7f0000000340)}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffc, 0x71, 0x0, @scatter={0x4, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/135, 0x87}]}, &(0x7f00000007c0)="32f13730c35a3a45de5a4e28822519fac95f413970c86f9815529c364545b43875f96b1b8824f8c2ad23465c873696d389633fd9080426bffebd8456508109b7c99308f7e0ff6f6c91e2d5b5216f90463358667cf9d12c7b9539426c28bd79f4ba5929ab170330ad0086d4157a333cc76b", &(0x7f0000000840)=""/21, 0x10000, 0x21, 0x3, &(0x7f0000000880)}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000940)=0x6) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000009c0)={'\x00', 0x80000001, 0x0, 0xd123}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000a40)={{0x31, 0x100000}, {0x3, 0x5888b908}, 0x5, 0x1}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x721080, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000c00)={0x7fffffff, 0x6, 0x3f, 0x7, 0x101, 0x0, 0x2}) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d40), 0x2000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000d80)) 00:26:11 executing program 7: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x74c) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fffffff) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x80000001, 0xf20, 0x1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x1, 0x8}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xf7cb21e, 0x5, 0xfffffffb, 0x4, 0x0, "d2418934b9a90c3e206ca47d320c5e9d5dea67", 0x0, 0x8}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/185) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000240)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000280)={0x5, 0x0, 0x6, 0x7}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a1000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x5) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000300)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000340)={0x9b1, 0x3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r4, 0x541d) [ 89.159548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.165231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.172758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.178330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.185299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.187900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.243894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.246144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.248218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.253888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.257005] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.260724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.274385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.277052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.278875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.281907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.283726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.285191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.286938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.298288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.307018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.315189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.344066] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.351942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.356372] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.360446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.364024] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.366467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.368956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.372183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.377124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.380948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.382655] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.398201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.402212] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.407431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.409106] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.411949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.419353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.419408] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.421180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.432636] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.435711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.443886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.452535] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.476888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.484816] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.488891] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.245672] Bluetooth: hci0: command tx timeout [ 91.308709] Bluetooth: hci1: command tx timeout [ 91.372686] Bluetooth: hci3: command tx timeout [ 91.436747] Bluetooth: hci2: command tx timeout [ 91.502244] Bluetooth: hci4: command tx timeout [ 91.502810] Bluetooth: hci6: command tx timeout [ 91.502937] Bluetooth: hci5: command tx timeout [ 91.564686] Bluetooth: hci7: command tx timeout [ 93.292589] Bluetooth: hci0: command tx timeout [ 93.356632] Bluetooth: hci1: command tx timeout [ 93.420659] Bluetooth: hci3: command tx timeout [ 93.485176] Bluetooth: hci2: command tx timeout [ 93.548662] Bluetooth: hci5: command tx timeout [ 93.548760] Bluetooth: hci6: command tx timeout [ 93.548814] Bluetooth: hci4: command tx timeout [ 93.612560] Bluetooth: hci7: command tx timeout [ 95.341565] Bluetooth: hci0: command tx timeout [ 95.404647] Bluetooth: hci1: command tx timeout [ 95.468607] Bluetooth: hci3: command tx timeout [ 95.533121] Bluetooth: hci2: command tx timeout [ 95.596682] Bluetooth: hci5: command tx timeout [ 95.596833] Bluetooth: hci4: command tx timeout [ 95.596920] Bluetooth: hci6: command tx timeout [ 95.660645] Bluetooth: hci7: command tx timeout [ 97.388762] Bluetooth: hci0: command tx timeout [ 97.452581] Bluetooth: hci1: command tx timeout [ 97.516674] Bluetooth: hci3: command tx timeout [ 97.580681] Bluetooth: hci2: command tx timeout [ 97.645380] Bluetooth: hci5: command tx timeout [ 97.645682] Bluetooth: hci6: command tx timeout [ 97.646748] Bluetooth: hci4: command tx timeout [ 97.708582] Bluetooth: hci7: command tx timeout [ 149.330284] syz-executor.1 (280) used greatest stack depth: 23440 bytes left [ 152.213773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.215275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.217434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.218265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.219169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.220422] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.221441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.227655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.228686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.232457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.233985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.234268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.236911] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.237268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.238521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.243178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.265701] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.285849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.449001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.462579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.466267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.468215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.480458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.482866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.490982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.496953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.497979] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.500237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.517754] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.519064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.528417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.537815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.543260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.549095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.554841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.556825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.557659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.578998] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.580449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.582160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.583992] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.588029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.589991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.597054] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.606445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.606872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.618882] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.643734] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.284739] Bluetooth: hci0: command tx timeout [ 154.349187] Bluetooth: hci2: command tx timeout [ 154.349805] Bluetooth: hci1: command tx timeout [ 154.732836] Bluetooth: hci7: command tx timeout [ 154.796666] Bluetooth: hci3: command tx timeout [ 154.797822] Bluetooth: hci6: command tx timeout [ 154.798120] Bluetooth: hci4: command tx timeout [ 154.860623] Bluetooth: hci5: command tx timeout [ 156.333624] Bluetooth: hci0: command tx timeout [ 156.396647] Bluetooth: hci2: command tx timeout [ 156.396782] Bluetooth: hci1: command tx timeout [ 156.780607] Bluetooth: hci7: command tx timeout [ 156.844781] Bluetooth: hci6: command tx timeout [ 156.844960] Bluetooth: hci4: command tx timeout [ 156.845068] Bluetooth: hci3: command tx timeout [ 156.910845] Bluetooth: hci5: command tx timeout [ 158.380684] Bluetooth: hci0: command tx timeout [ 158.445660] Bluetooth: hci2: command tx timeout [ 158.445769] Bluetooth: hci1: command tx timeout [ 158.828692] Bluetooth: hci7: command tx timeout [ 158.893781] Bluetooth: hci3: command tx timeout [ 158.894291] Bluetooth: hci4: command tx timeout [ 158.894345] Bluetooth: hci6: command tx timeout [ 158.957579] Bluetooth: hci5: command tx timeout [ 160.429529] Bluetooth: hci0: command tx timeout [ 160.493595] Bluetooth: hci1: command tx timeout [ 160.493694] Bluetooth: hci2: command tx timeout [ 160.876718] Bluetooth: hci7: command tx timeout [ 160.941602] Bluetooth: hci6: command tx timeout [ 160.941742] Bluetooth: hci4: command tx timeout [ 160.941826] Bluetooth: hci3: command tx timeout [ 161.004889] Bluetooth: hci5: command tx timeout [ 214.854732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.859166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.861690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.869113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.880805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.882295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.908739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.912113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.913654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.919135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.926023] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.927117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.180001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.186825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.189086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.210216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.222934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.228936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.269673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.271286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.272293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.276844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.281513] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.282299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.405735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.416689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.430695] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.440937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.444342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.454384] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.460482] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.466039] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.472334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.473299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.474871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.481813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.482982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.498089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.499892] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.522118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.522499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.522961] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.536430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.556838] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.562227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.567383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.575894] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.593084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.940568] Bluetooth: hci0: command tx timeout [ 217.005497] Bluetooth: hci1: command tx timeout [ 217.325496] Bluetooth: hci3: command tx timeout [ 217.326674] Bluetooth: hci2: command tx timeout [ 217.582532] Bluetooth: hci5: command tx timeout [ 217.647288] Bluetooth: hci4: command tx timeout [ 217.708604] Bluetooth: hci7: command tx timeout [ 217.773571] Bluetooth: hci6: command tx timeout [ 218.988557] Bluetooth: hci0: command tx timeout [ 219.052645] Bluetooth: hci1: command tx timeout [ 219.372569] Bluetooth: hci3: command tx timeout [ 219.372667] Bluetooth: hci2: command tx timeout [ 219.630494] Bluetooth: hci5: command tx timeout [ 219.692691] Bluetooth: hci4: command tx timeout [ 219.756654] Bluetooth: hci7: command tx timeout [ 219.820590] Bluetooth: hci6: command tx timeout [ 221.036667] Bluetooth: hci0: command tx timeout [ 221.100578] Bluetooth: hci1: command tx timeout [ 221.420820] Bluetooth: hci3: command tx timeout [ 221.420917] Bluetooth: hci2: command tx timeout [ 221.676677] Bluetooth: hci5: command tx timeout [ 221.740646] Bluetooth: hci4: command tx timeout [ 221.804525] Bluetooth: hci7: command tx timeout [ 221.868684] Bluetooth: hci6: command tx timeout [ 223.084626] Bluetooth: hci0: command tx timeout [ 223.148816] Bluetooth: hci1: command tx timeout [ 223.468579] Bluetooth: hci3: command tx timeout [ 223.468671] Bluetooth: hci2: command tx timeout [ 223.726705] Bluetooth: hci5: command tx timeout [ 223.788531] Bluetooth: hci4: command tx timeout [ 223.852517] Bluetooth: hci7: command tx timeout [ 223.916566] Bluetooth: hci6: command tx timeout [ 277.179346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.182375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.187844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.195919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.202200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.205948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.251316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.254400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.256640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.275286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.291717] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.293248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.451406] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.456123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.461165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.466948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.471236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.477638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.498757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.500980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.504652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.507018] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.510659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.512026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.541949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.546640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.547902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.549406] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.555641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.557224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.565988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.595160] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.603836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.605412] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.607933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.611726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.617630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.623777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.625097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.628642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.629674] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.632133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.815651] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.819105] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.826318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.838936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.866979] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.869218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.277547] Bluetooth: hci0: command tx timeout [ 279.341306] Bluetooth: hci1: command tx timeout [ 279.533249] Bluetooth: hci2: command tx timeout [ 279.597715] Bluetooth: hci3: command tx timeout [ 279.660667] Bluetooth: hci6: command tx timeout [ 279.724919] Bluetooth: hci5: command tx timeout [ 279.788537] Bluetooth: hci4: command tx timeout [ 279.980534] Bluetooth: hci7: command tx timeout [ 281.328476] Bluetooth: hci0: command tx timeout [ 281.389586] Bluetooth: hci1: command tx timeout [ 281.582090] Bluetooth: hci2: command tx timeout [ 281.644489] Bluetooth: hci3: command tx timeout [ 281.709046] Bluetooth: hci6: command tx timeout [ 281.772516] Bluetooth: hci5: command tx timeout [ 281.837703] Bluetooth: hci4: command tx timeout [ 282.028533] Bluetooth: hci7: command tx timeout [ 283.372510] Bluetooth: hci0: command tx timeout [ 283.438237] Bluetooth: hci1: command tx timeout [ 283.629698] Bluetooth: hci2: command tx timeout [ 283.694088] Bluetooth: hci3: command tx timeout [ 283.757518] Bluetooth: hci6: command tx timeout [ 283.821578] Bluetooth: hci5: command tx timeout [ 283.884515] Bluetooth: hci4: command tx timeout [ 284.078530] Bluetooth: hci7: command tx timeout [ 285.420620] Bluetooth: hci0: command tx timeout [ 285.485501] Bluetooth: hci1: command tx timeout [ 285.676700] Bluetooth: hci2: command tx timeout [ 285.740592] Bluetooth: hci3: command tx timeout [ 285.804597] Bluetooth: hci6: command tx timeout [ 285.868613] Bluetooth: hci5: command tx timeout [ 285.932564] Bluetooth: hci4: command tx timeout [ 286.124916] Bluetooth: hci7: command tx timeout [ 337.452851] [ 337.453092] ====================================================== [ 337.453704] WARNING: possible circular locking dependency detected [ 337.454305] 6.13.0-rc7-next-20250117 #1 Not tainted [ 337.454831] ------------------------------------------------------ [ 337.456277] kworker/u8:0/11 is trying to acquire lock: [ 337.457511] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.459336] [ 337.459336] but task is already holding lock: [ 337.460478] ffff888034f38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.463089] [ 337.463089] which lock already depends on the new lock. [ 337.463089] [ 337.464758] [ 337.464758] the existing dependency chain (in reverse order) is: [ 337.466021] [ 337.466021] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.466690] __mutex_lock+0x13d/0xb50 [ 337.467147] wiphy_register+0x1b2e/0x25d0 [ 337.467636] ieee80211_register_hw+0x23a4/0x3d60 [ 337.468179] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 337.468743] init_mac80211_hwsim+0x389/0x870 [ 337.469268] do_one_initcall+0xf9/0x640 [ 337.469745] kernel_init_freeable+0x53d/0x7a0 [ 337.470302] kernel_init+0x1e/0x2d0 [ 337.470780] ret_from_fork+0x48/0x80 [ 337.471270] ret_from_fork_asm+0x1a/0x30 [ 337.471772] [ 337.471772] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.472449] __lock_acquire+0x29fd/0x4580 [ 337.473010] lock_acquire+0x19b/0x520 [ 337.473524] __mutex_lock+0x13d/0xb50 [ 337.474048] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.474665] unregister_netdevice_queue+0x224/0x2e0 [ 337.475222] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.475775] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.476324] ieee80211_unregister_hw+0x55/0x3a0 [ 337.476858] hwsim_exit_net+0x3a0/0x730 [ 337.477331] ops_exit_list+0xb3/0x180 [ 337.477779] cleanup_net+0x546/0xad0 [ 337.478216] process_one_work+0x8ee/0x1a10 [ 337.478718] worker_thread+0x674/0xe70 [ 337.479194] kthread+0x3ab/0x720 [ 337.479610] ret_from_fork+0x48/0x80 [ 337.480047] ret_from_fork_asm+0x1a/0x30 [ 337.480603] [ 337.480603] other info that might help us debug this: [ 337.480603] [ 337.481378] Possible unsafe locking scenario: [ 337.481378] [ 337.481950] CPU0 CPU1 [ 337.482407] ---- ---- [ 337.482863] lock(&rdev->wiphy.mtx); [ 337.483263] lock(rtnl_mutex); [ 337.483854] lock(&rdev->wiphy.mtx); [ 337.484477] lock(rtnl_mutex); [ 337.484843] [ 337.484843] *** DEADLOCK *** [ 337.484843] [ 337.485410] 4 locks held by kworker/u8:0/11: [ 337.485846] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.486843] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.487802] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.488702] #3: ffff888034f38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.489697] [ 337.489697] stack backtrace: [ 337.490139] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 337.490943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.491723] Workqueue: netns cleanup_net [ 337.492148] Call Trace: [ 337.492404] [ 337.492637] dump_stack_lvl+0xca/0x120 [ 337.493044] print_circular_bug+0x47b/0x750 [ 337.493476] check_noncircular+0x2e9/0x3c0 [ 337.493903] ? lock_repin_lock+0x207/0x320 [ 337.494351] ? __pfx_check_noncircular+0x10/0x10 [ 337.494825] ? hlock_class+0x4e/0x130 [ 337.495205] ? mark_lock+0xac/0xed0 [ 337.495581] ? __pfx_lock_repin_lock+0x10/0x10 [ 337.496063] ? timerqueue_del+0x83/0x150 [ 337.496484] ? lockdep_lock+0xba/0x1b0 [ 337.496909] ? __pfx_lockdep_lock+0x10/0x10 [ 337.497371] __lock_acquire+0x29fd/0x4580 [ 337.497805] ? __pfx___lock_acquire+0x10/0x10 [ 337.498258] ? lock_release+0x20f/0x6f0 [ 337.498668] ? __pfx_lock_release+0x10/0x10 [ 337.499114] lock_acquire+0x19b/0x520 [ 337.499510] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.500097] ? __pfx_lock_acquire+0x10/0x10 [ 337.500540] ? srso_return_thunk+0x5/0x5f [ 337.500993] ? lock_release+0x20f/0x6f0 [ 337.501409] ? srso_return_thunk+0x5/0x5f [ 337.501852] ? lock_is_held_type+0x9e/0x120 [ 337.502311] ? srso_return_thunk+0x5/0x5f [ 337.502754] __mutex_lock+0x13d/0xb50 [ 337.503166] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.503755] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.504321] ? srso_return_thunk+0x5/0x5f [ 337.504740] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.505219] ? __pfx___mutex_lock+0x10/0x10 [ 337.505640] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.506145] ? srso_return_thunk+0x5/0x5f [ 337.506554] ? kasan_quarantine_put+0x84/0x1e0 [ 337.507022] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.507465] ? srso_return_thunk+0x5/0x5f [ 337.507895] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.508448] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.508905] ? __pfx_lock_release+0x10/0x10 [ 337.509320] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.509873] ? find_held_lock+0x2c/0x110 [ 337.510277] ? srso_return_thunk+0x5/0x5f [ 337.510695] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.511175] ? srso_return_thunk+0x5/0x5f [ 337.511584] ? lock_release+0x20f/0x6f0 [ 337.511986] ? __pfx_lock_release+0x10/0x10 [ 337.512400] ? srso_return_thunk+0x5/0x5f [ 337.512814] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.513331] ? srso_return_thunk+0x5/0x5f [ 337.513765] unregister_netdevice_queue+0x224/0x2e0 [ 337.514260] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.514805] ? up_write+0x195/0x520 [ 337.515210] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.515715] ? srso_return_thunk+0x5/0x5f [ 337.516163] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.516673] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.517205] ? srso_return_thunk+0x5/0x5f [ 337.517628] ? srso_return_thunk+0x5/0x5f [ 337.518036] ? synchronize_rcu+0x1ff/0x260 [ 337.518438] ieee80211_unregister_hw+0x55/0x3a0 [ 337.518878] hwsim_exit_net+0x3a0/0x730 [ 337.519265] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.519688] ? srso_return_thunk+0x5/0x5f [ 337.520101] ? netdev_run_todo+0x788/0x1040 [ 337.520522] ? srso_return_thunk+0x5/0x5f [ 337.520977] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.521439] ops_exit_list+0xb3/0x180 [ 337.521851] cleanup_net+0x546/0xad0 [ 337.522240] ? __pfx_cleanup_net+0x10/0x10 [ 337.522681] process_one_work+0x8ee/0x1a10 [ 337.523132] ? __pfx_lock_acquire+0x10/0x10 [ 337.523569] ? __pfx_process_one_work+0x10/0x10 [ 337.524052] ? srso_return_thunk+0x5/0x5f [ 337.524491] ? move_linked_works+0x172/0x270 [ 337.524937] ? srso_return_thunk+0x5/0x5f [ 337.525365] ? assign_work+0x196/0x240 [ 337.525777] worker_thread+0x674/0xe70 [ 337.526187] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.526709] ? __pfx_worker_thread+0x10/0x10 [ 337.527180] kthread+0x3ab/0x720 [ 337.527557] ? __pfx_kthread+0x10/0x10 [ 337.527970] ? srso_return_thunk+0x5/0x5f [ 337.528406] ? finish_task_switch.isra.0+0x206/0x840 [ 337.528921] ? __pfx_kthread+0x10/0x10 [ 337.529327] ret_from_fork+0x48/0x80 [ 337.529696] ? __pfx_kthread+0x10/0x10 [ 337.530101] ret_from_fork_asm+0x1a/0x30 [ 337.530541] [ 339.263136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.264780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.265507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.267624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.270978] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.271374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.272155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.279276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.281689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.286278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.293129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.295096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.448588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.453058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.455953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.470709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.480490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.485195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.526218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.529824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.533780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.542291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.555842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.562228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.580552] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.586324] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.596343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.603981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.618074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.618811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.626131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.633721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.639914] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.648274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.667677] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.669887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.672842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.678018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.680340] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.682718] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.692809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.695209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.697047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.701715] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.705696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.708020] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.731649] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.755877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.292499] Bluetooth: hci0: command tx timeout [ 341.356454] Bluetooth: hci1: command tx timeout [ 341.549540] Bluetooth: hci2: command tx timeout [ 341.677468] Bluetooth: hci3: command tx timeout [ 341.741583] Bluetooth: hci5: command tx timeout [ 341.804504] Bluetooth: hci6: command tx timeout [ 341.805106] Bluetooth: hci4: command tx timeout [ 341.868473] Bluetooth: hci7: command tx timeout [ 343.340617] Bluetooth: hci0: command tx timeout [ 343.404501] Bluetooth: hci1: command tx timeout [ 343.597565] Bluetooth: hci2: command tx timeout [ 343.724635] Bluetooth: hci3: command tx timeout [ 343.789080] Bluetooth: hci5: command tx timeout [ 343.852667] Bluetooth: hci6: command tx timeout [ 343.852742] Bluetooth: hci4: command tx timeout [ 343.917571] Bluetooth: hci7: command tx timeout [ 345.390453] Bluetooth: hci0: command tx timeout [ 345.453465] Bluetooth: hci1: command tx timeout [ 345.645574] Bluetooth: hci2: command tx timeout [ 345.774486] Bluetooth: hci3: command tx timeout [ 345.837474] Bluetooth: hci5: command tx timeout [ 345.902509] Bluetooth: hci6: command tx timeout [ 345.903043] Bluetooth: hci4: command tx timeout [ 345.964553] Bluetooth: hci7: command tx timeout [ 347.438453] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 00:30:21 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000066 R11=3038383866666666 R12=0000000000000066 R13=0000000000000001 R14=ffff888008fea013 R15=ffff8880095dee28 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff4de9a9449 CR3=000000000ef74000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004119b6e000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8bb27 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffff8880096a7e68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864021d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4509f66ea8 CR3=000000000c92c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=17508013a3080b9b7e4f4bbef411165d XMM02=f61f520134a0d9c200000000000fd218 XMM03=a3797342f9eb3dd900000000000fdd40 XMM04=ad9f33e5ef63624e00000000000ae988 XMM05=6f8f2e014f21a947000000000014f1d0 XMM06=6098c19552daab490000000000111e40 XMM07=a3797342f9eb3dd900000000000fdd40 XMM08=f61f520134a0d9c200000000000fd218 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000