Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:13235' (ECDSA) to the list of known hosts. 2025/01/20 01:34:12 fuzzer started 2025/01/20 01:34:13 dialing manager at localhost:44245 syzkaller login: [ 62.909303] cgroup: Unknown subsys name 'net' [ 63.032223] cgroup: Unknown subsys name 'cpuset' [ 63.073520] cgroup: Unknown subsys name 'rlimit' [ 69.699182] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 81.123261] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 01:34:32 syscalls: 200 2025/01/20 01:34:32 code coverage: enabled 2025/01/20 01:34:32 comparison tracing: enabled 2025/01/20 01:34:32 extra coverage: enabled 2025/01/20 01:34:32 setuid sandbox: enabled 2025/01/20 01:34:32 namespace sandbox: enabled 2025/01/20 01:34:32 Android sandbox: enabled 2025/01/20 01:34:32 fault injection: enabled 2025/01/20 01:34:32 leak checking: enabled 2025/01/20 01:34:32 net packet injection: enabled 2025/01/20 01:34:32 net device setup: enabled 2025/01/20 01:34:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 01:34:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 01:34:32 USB emulation: enabled 2025/01/20 01:34:32 hci packet injection: enabled 2025/01/20 01:34:32 wifi device emulation: enabled 2025/01/20 01:34:32 802.15.4 emulation: enabled 2025/01/20 01:34:32 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 01:34:33 starting 8 fuzzer processes 01:34:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2a}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_PMKID={0x14, 0x55, "29e3e4d148dda408218659cb5231a111"}, @NL80211_ATTR_PMKID={0x14, 0x55, "43636536522c758e619eaace1e98e995"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket(0x22, 0x3, 0x3bd38af) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0), 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/scsi_disk', 0xc8202, 0xd) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000340), &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9c, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe8, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0x80, [@gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x100, @val=0x17, @void}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0x5, 0x1f, 0x23, 0x2}}, @mesh_chsw={0x76, 0x6, {0x3b, 0x4, 0x3f}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9f, 0x80, [@measure_req={0x26, 0x70, {0x0, 0x0, 0x7, "79773ed5987ad11da0c6f9fbbdc1d961c81ad787657f205e07697e4bfc55843a2a61d6855ef663c690d46519fb86476c7da276cd9b1d823a5a30d2e0f5aa5d059b27a2b9bd010610af96d3ddb14edee0e794e25f9d38c7c7c5e53a6d54630b1132646fe294b1043c5d0e7c6432"}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x6, 0x0, {0x3, 0xa5, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x0, 0x2}}, @challenge={0x10, 0x1, 0x2b}, @peer_mgmt={0x75, 0x8, {0x0, 0x20, @val=0xff, @val=0x3a, @void}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x62, 0x3a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4810) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/timer_list\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc5, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2154}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x30, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffc}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffff001}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0xc9f9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x2000d080) 01:34:33 executing program 1: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x68, 0x29, 0x2, {0x9, [{{0x4}, 0x3b, 0x9, 0x7, './file0'}, {{0x80, 0xffffffff, 0x6}, 0x7fffffff, 0x3f, 0x7, './file0'}, {{0x1, 0x4, 0x6}, 0x7, 0x1, 0x7, './file0'}]}}, 0x68) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1}, 0xb) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5c, 0x7d, 0x2, {{0x0, 0x44, 0xf507, 0x80000001, {0x0, 0x3, 0x2}, 0x8000000, 0x3, 0x3, 0x7, 0x4, '#)@[', 0x3, '*\\\xaf', 0x2, ']^', 0x8, '#@)%%^@\xa2'}, 0x3, '^[^', 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x5c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r0, r1/1000+60000}, {0x77359400}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x1}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1b8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x14) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={{}, {r5, r6/1000+60000}}, 0x100) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000004c0)={'macvtap0\x00', 0x1000}) r8 = open$dir(&(0x7f0000000500)='./file0\x00', 0x200000, 0xa0) execveat(r8, &(0x7f0000000540)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000580)='*\\\xaf', &(0x7f00000005c0)='\xd2\x00', &(0x7f0000000600)='*\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='^[^', &(0x7f00000006c0)='macvtap0\x00', &(0x7f0000000700)='.\x00'], &(0x7f00000008c0)=[&(0x7f0000000780)='@%,\x00', &(0x7f00000007c0)='wlan0\x00', &(0x7f0000000800)=']\x00', &(0x7f0000000840)='^[^', &(0x7f0000000880)='\x00'], 0x800) clone3(&(0x7f0000000b40)={0x200001000, &(0x7f0000000900)=0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x13}, &(0x7f00000009c0)=""/152, 0x98, &(0x7f0000000a80)=""/80, &(0x7f0000000b00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000bc0)=r10) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000c00)={0x7, 0x33, 0x2}, 0x7) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x128, r11, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xcb, 0xac, "4a7971f54d2ad7b3a811d44f0d1b2ddbcf47e03c682ab966b40c70db0db435f15cec932da76ede9a41e9669778b460beadb3873e173060678972aef76adf789712d0d1b0c338f3c9e77ce1ae5d5f4a001e86c641ade2cce8fbb176bb79f44c5e9d6fc30358839a28a8b0feee959903b21713d1c72ad7e4d29f6c013bb36f1ac476102a6b1b08a4d0ad31199d00f05041dc871cd31ff399093df8969898a2d0979ad38e0781909f5a5ec38b750d95ca78fdef9f70038cf88e21601955219bf81dc4c543cf1a78a1"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x37, 0xac, "4aae2220054fce7ca91ecfa8098d0a2a378727f2ab2955e7f3c7d61ee538d98fbb9d47175ab8fad58fee1fb42bede81f39fc1b"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}]}, 0x128}, 0x1, 0x0, 0x0, 0x20020804}, 0x20000000) 01:34:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pata_oldpiix', 0x101040, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8dc952df83"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "37259a8399998ec9629df0ef56"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000810) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x404800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) mknodat$loop(r1, &(0x7f0000000340)='./file0\x00', 0x400, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/222, 0xde, 0x0, &(0x7f0000000480)=""/229, 0xe5}, &(0x7f00000005c0)=0x40) r5 = syz_open_dev$usbmon(&(0x7f0000000600), 0x6, 0x22000) fcntl$getownex(r5, 0x10, &(0x7f0000000640)) getpeername(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000007c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000840)={0x0, 'gretap0\x00', {0x2}, 0xff00}) write$P9_RREADDIR(r1, &(0x7f0000000880)={0x87, 0x29, 0x1, {0xfff, [{{0x1, 0x3, 0x4}, 0x5, 0xff, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0x0, 0xff, 0x7, './file1'}, {{0x80, 0x0, 0x7}, 0x80000000, 0x5, 0x7, './file0'}, {{0x0, 0x1, 0x3}, 0x0, 0x1f, 0x7, './file0'}]}}, 0x87) 01:34:33 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4', 0x870325876669f348, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xb0002, 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000180)={0x6, 'veth1_macvtap\x00', {0xfffffff8}}) socketpair(0x18, 0x4, 0x6, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r3, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x28ec, 0x2632, 0x0, &(0x7f00000002c0)={[0x7ff]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x28, 0xf, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x1000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5c0d}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r8 = socket(0x6, 0x4, 0x8) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f00000005c0)={'bond_slave_1\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000600)={0x3, 'xfrm0\x00', {0x7}, 0x933}) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1e}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x20}}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000045) [ 83.314381] audit: type=1400 audit(1737336873.970:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:34:33 executing program 4: shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x8, 0x8, 0x8, 0x0, 0x7, 0x7], &(0x7f0000000080)=[0x0, 0x0], 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/116, 0x74, 0x1, &(0x7f0000000140)=""/231, 0xe7}, &(0x7f0000000280)=0x40) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x810, 0xffffffffffffffff, 0x6fc) getuid() ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000003c0)=@buf={0xe6, &(0x7f00000002c0)="06a4d06e85653050b4170218c09a84005372cad3e210a4ebc1db94e2d3bff8c55f9128746e015e234cbbe21c2aec710a96cfecd59bd119bb48b7f54b67d3fe7e1df296594fcda9a58f803b77aea876188b07b9bd29f45f7d9d136440ec7950d26caed6da449d1a6e193a63636e6e7ee01407b1bad69925e7a57bb2613669139963f0457b84127357d6bd1cac6a9cfec08db13c5601d81220f58e4c373ee97bee48fb18a4a164ed9e510ed8fce1e05bfc10b93e0343a3f527c16b52971fbba149fddb223044599e40cf9d57edd1cae40073e3909d5ae05367301952804a1d30f7c7a381f0ba13"}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0xfffffffffffffff7) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x9bb811cfe4adb01}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c60a160907"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "d9431a0d"}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6d0cd377d4"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "61d11881b05ba47cc606d41022"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x840) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/170, 0xaa, 0x0, &(0x7f0000000640)=""/84, 0x54}, &(0x7f0000000700)=0x40) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000080) getpeername(0xffffffffffffffff, &(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000009c0)=0x80) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x17c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x30000, 0x4b}}}}, [@NL80211_ATTR_IE={0x146, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x68, 0x7}}, @perr={0x84, 0x135, {0x1f, 0x13, [@ext={{}, @broadcast, 0x916, @device_b, 0x39}, @not_ext={{}, @device_b, 0x35, "", 0x1b}, @ext={{}, @device_a, 0x9, @broadcast, 0x2c}, @not_ext={{}, @device_a, 0xffffffff, "", 0x11}, @ext={{}, @broadcast, 0x8d3a, @broadcast, 0x14}, @not_ext={{}, @device_b, 0x800, "", 0x1a}, @not_ext={{}, @broadcast, 0x3ff, "", 0x29}, @ext={{}, @broadcast, 0x7, @broadcast, 0x29}, @not_ext={{}, @broadcast, 0x5, "", 0x37}, @not_ext={{}, @broadcast, 0x4}, @not_ext={{}, @device_b, 0x0, "", 0x3a}, @ext={{}, @broadcast, 0x5, @device_b, 0x14}, @not_ext={{}, @device_a, 0xfffffffc, "", 0x2b}, @ext={{}, @broadcast, 0x1, @device_b, 0x3d}, @ext={{}, @device_a, 0x3, @broadcast, 0x3e}, @ext={{}, @broadcast, 0x3, @device_a, 0x23}, @ext={{}, @broadcast, 0x1, @device_a, 0x11}, @not_ext={{}, @device_a, 0x10000, "", 0xa}, @ext={{}, @broadcast, 0x80, @device_a, 0x12}]}}, @dsss={0x3, 0x1, 0x1}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48012}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000012c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000000cc0)={0x5b8, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_BEACON_HEAD={0x246, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_a, @random="ddebd7d0f0c9", {0x4, 0x5}}, @ver_80211n={0x0, 0x7, 0x3, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x4, @random=0x1, 0x5082, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x9, 0x6, 0x2893, 0x6}}, @val={0x6, 0x2, 0x2}, @val={0x5, 0xeb, {0x1, 0x80, 0x9f, "7c60cc617b1f131c504cc8bd96eca912e0d8854936f6a61a7a7aef020881fc4b675172ce083940f385790d3672b28e5e2ce439c0fb522a8ff5025ecef635961d50f28e6f4daaa59e641af669d4538e47ee521c2dcb19570cf5e9095da69bed38225be129d7c70775f5bf9f399cbb1d459c764ffdb52b05c67789c27b26f9d51ea75b30dcea4a971b241c51c79dd2c1cd1495f016988b3397b6d0ea141520c9f83e3190e8c9cb376cc60685c1a959945ecbefbf76770d82c1f2ab0226364f3d21b83c7a01617aaf60d15a40689fd2f0f4588ba6c31cbabbd6621bd0f2d45ca7007cbba4343ce85dc9"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x7f, 0x61}}, @val={0x76, 0x6, {0x1, 0x49, 0x23, 0x862}}, [{0xdd, 0xb6, "b05ca34c09056b07c499c9fc096039b247a1f31b9f22d1fe39a72b80f8b9259ac92c88cf26010bf4321ab908d86be5c4e3a766564b191a73457f0e9c83aa87411027eb23d2a17a2d5bd6f694ae7fcd83d1b280937b2912266d9c939c5bda9fc7395d35922bd6b63fa6450e545afbad7906cc26ae461839909bb9d2a998db0e4639da9ce7bd2df2ca24a8b8346df106af870caa1dfc92bc729af5358d63b58bb7e9851fe065786e1d4c512897af69d6be5b98c7fab2d1"}, {0xdd, 0x45, "3d0f69ff3dad662460e89fea0234c202c4a84930991b1387765b2dc162831521f7508ee65a56816b0e0bf2078640052f32eff142180651f942ab090771678987f6438c65cd"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x16, 0x80, [@mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x6, 0x4, 0x3b, 0x3f}}, @ssid]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x156, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5db2}, @device_b, @device_a, @random="f581793d6766", {0x6, 0x7}}, 0x1, @default, 0x690, @void, @void, @val={0x3, 0x1, 0x8}, @void, @val={0x6, 0x2, 0x400}, @void, @val={0x25, 0x3, {0x1, 0x34, 0x81}}, @void, @val={0x3c, 0x4, {0x1, 0x20, 0x28, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1f, 0x41}}, @void, [{0xdd, 0x76, "f302b153678f8c63156338d896897b21951e42fd0a15f61c8db24daf08b104169c918386ad8559db6e1a9f6fafb6d1b20326a8869f1670b9c49adcb7212a47b084d1875e910e8daf39d5c3bc4dcfad379865c758a6541f743bf0521afaec810101307a3b37f7378d76ebe211429e171ed798890b9cc0"}, {0xdd, 0x2f, "16800df9194602a7185679aa160928ecfb81349090582f7b6c4cd26d47727769c9137d297600a993b8f688c7eab98e"}, {0xdd, 0x60, "8f59f1cc58ed640240cfa2a2fc6bae6e5cf9bdda6df14d58e89e4689ea5244db39209ce23fd71c6462913b623242d96e39e5848883837bb3ed3e851c0985878f850aa3eed2b95b0af9d36ac4a313949142328eedca0b9ce0fbacc76458dbd3e7"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1c0, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_b, @initial, {0xd, 0x7}}, @ver_80211n={0x0, 0x7, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x71, @random=0x3f, 0x3000, @void, @void, @val={0x3, 0x1, 0xab}, @void, @val={0x6, 0x2, 0x2}, @val={0x5, 0xd9, {0x80, 0xb6, 0x3f, "13634d9716213226c07c7abf94f666de6727c590b40e0dbfb25663bdada83e21396200479c51d54730ac52a67caec94939bb928c892de38b1e163cbc511e0a9840ef26e02493f87d4022ed60690b33404be55dc3d024fbc3395799b76e2bf5f4bf379e500ed496783d7e44b697ddf9392bcf9a3f790b904d8385cedb4a17f79350e54bb998cc897d32383eb693e23aa60ffd668be6e0199d06ef1b61c68c4951eda3a40afe769a917a75c7342c7774aa2f49313509919ce873570ff3eb94efcda7d1581bc57cb85bcd74d20ba685c94b1e6d255c9fba"}}, @val={0x25, 0x3, {0x0, 0x8, 0x80}}, @void, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x5, 0x0, {0xdcc1f92, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x800, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x73, "60a096f4cbf151120b37a0360c771998704de2763a13ac3bf94e6c066fe60a366a8adf0cddd404dce68abbde8ab5d63729115ff74ee12339df1fb17792e4ebeda1b055b8672a782882ddbf957ba0c86008fce7fa366b6d4aae4bd42ebbc00ba6779c186bbd2a8bb054ca6bfd23238d7ea06b69"}, {0xdd, 0x12, "49ad9ede693a3da50e060966ba643eb6cb29"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xff}}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001300)={'veth1_to_batadv\x00', {0x2, 0x0, @loopback}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200, 0x49}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4044000) get_mempolicy(&(0x7f0000001480), &(0x7f00000014c0), 0x2, &(0x7f0000ffa000/0x3000)=nil, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x7c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0xf}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 01:34:34 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/cpu', 0x400100, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x8, 0x0, 0x48, 0x7f, 0x0, 0x8, 0x100404, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x11c, 0x3, 0x1, 0x2, 0x3, 0xfffffffd, 0x5b, 0x0, 0xfff, 0x0, 0x3}, r1, 0x1, 0xffffffffffffffff, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x74}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x6c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="63de8b3926b0"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c0}, 0x4044880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, r3, 0x10000000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x7, 0x1, 0x5}}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x55) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000580)='veth0_macvtap\x00', 0x10) faccessat(r0, &(0x7f00000005c0)='./file0\x00', 0x10) r6 = openat$incfs(r2, &(0x7f00000006c0)='.log\x00', 0x0, 0xa1) perf_event_open$cgroup(&(0x7f0000000640)={0x4, 0x80, 0x20, 0x5, 0x4, 0x9, 0x0, 0x2, 0x8e401, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xca3, 0x1, @perf_bp={&(0x7f0000000600), 0xa}, 0x480, 0x0, 0x6, 0x1, 0x2, 0x7, 0x7ff, 0x0, 0x4, 0x0, 0x3f}, r6, 0x10, r4, 0x0) io_uring_setup(0x3819, &(0x7f0000000700)={0x0, 0xaf66, 0x0, 0x1, 0x215, 0x0, r2}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000840), &(0x7f0000000880)=0x4) 01:34:34 executing program 6: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hwmon', 0x105000, 0x1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x1f, 0x9, 0xa1, 0x0, 0x7, 0x608, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffff22c, 0x0, @perf_config_ext={0xf1c6, 0x3}, 0x8484, 0x1000, 0x2, 0x8, 0x5, 0x4, 0x7, 0x0, 0x0, 0x0, 0x3}, r0, 0x8, r0, 0x2) bind$802154_raw(r0, &(0x7f0000000200)={0x24, @short}, 0x14) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x56}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) r1 = openat$incfs(r0, &(0x7f0000000340)='.log\x00', 0x80, 0x90) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3f) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/software_nodes', 0x200000, 0x102) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/virtio', 0x8002, 0x18) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x3, 0x5, 0x0, 0xff, 0x0, 0x8, 0x82400, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x5, @perf_bp={&(0x7f0000000400), 0xf}, 0x12100, 0x8, 0x8, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3a0}, r2, 0x0, 0xffffffffffffffff, 0xa) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x648400, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000500)='ipvlan1\x00', 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/sunrpc', 0x0, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x11) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0xd2, 0x5, 0x80, 0x5, 0x0, 0x0, 0x401, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x10001, 0x6}, 0x2808, 0xf40, 0x4, 0x7, 0xb58, 0xfffffff9, 0x6, 0x0, 0x81, 0x0, 0x1}, r6, 0x4, r3, 0x5) perf_event_open$cgroup(&(0x7f0000000780)={0x0, 0x80, 0x20, 0xf7, 0x8, 0xfa, 0x0, 0x7, 0x10050, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x3}, 0x840, 0x9, 0x101, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x7, 0x0, 0x7f}, r6, 0xf, 0xffffffffffffffff, 0xe) 01:34:34 executing program 7: ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'bond_slave_0\x00', {}, 0xfc}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x5f, &(0x7f0000000040)="2360466cfa126c4f5331ea236947e8f5ae075387ecc687b014224de5c30b78970f7469afd6bfceb100a913d67b1b9286670fbec0c3ffce7b99e95352814722890858947029ab4ceb0ec452d19766c6e42932ce6261a6fcde062e611a3a0445"}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'syz_tun\x00', {0x4}, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000001c0)={0x6, 'bond_slave_0\x00', {0x3800000}, 0x1}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)={0x2, 'team0\x00', {0x101}, 0xd9c}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000240)={'bridge0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x8000, 0x14) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2a8, 0x14, 0x200, 0x70bd2b, 0x25dfdbfe, {0x28, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "d2d8dd54a4d4dd58b17bf60ccb52952aaa6d65c81e5b8942c7751f76cc04b9b521f74596fc7e25d8c1c9ac12dc7dd96707d256d489667c9efd4524399a4e54c0e57211e333c10f0e9530248383cdd0e86be0532cad74b5c16073eb7d61b3d68734e90a54ce5d764d0e6bd259fb0bcc930b2a52fe644248e0dc214d3669441639ebde3aa0786061fdc51f515679e153f134e418efa4f7ae1930743efd470d0eb11a8ee84526860e2a921bd2706de549af400814"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "5f8800ebfb614827ac571b36d397aef8e5c40cf96a0ac7e10e94e83ddeb208f072c26c338fb0f04609bd910b46e2a2d35c2b0211e3d4c75e78a6a02d9938fe1e4e8cf14f0a2397671f1f2649e9b228e4e84cc32e8c57b065fe8155e9e71c547a87c1605b158b081e6d2e65f06bf428157cecd0de21690fc7b30b6ef5df11dcdfb99cafe9265c496c775d62fd13e513c8622af110210a5982d3e912e772081735443eb542e53c44542820afd3d0719c0fe26801a929719d4697ac9d427e68c30677e72bf71bb28ff10111b593a9a9f8071fe463bb"}]}, 0x2a8}}, 0x840) getsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000700)={0x8, 'syzkaller0\x00', {'bond_slave_0\x00'}, 0x401}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x2c, 0x2, 0x9, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000800)=@buf={0x42, &(0x7f0000000780)="7091ad5c300881d1c5b4a118a8a0953eb7d6c18084e0eae06bdd1d9fcc1aede487d132496ba96b04983c31581f70fc2599a924a8d2e852894570bb137e3a18b2d636"}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000840), &(0x7f0000000880)=0x8) [ 84.635265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.636999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.639520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.645260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.649138] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.651653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.694197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.698417] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.703346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.710884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.714120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.716116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.761923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.767878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.784284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.799473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.825595] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.828262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.868658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.871344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.876523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.880165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.889780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.893613] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.897130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.910333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.912456] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.925210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.953997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.957325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.962141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.964131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.964416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.973373] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.981449] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.985986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.991189] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.995129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.997410] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.009198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.010779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.026759] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.030394] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.033444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.050004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.088509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.094513] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.097186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.724730] Bluetooth: hci0: command tx timeout [ 86.788147] Bluetooth: hci1: command tx timeout [ 86.915950] Bluetooth: hci2: command tx timeout [ 86.979995] Bluetooth: hci4: command tx timeout [ 87.044074] Bluetooth: hci6: command tx timeout [ 87.108900] Bluetooth: hci3: command tx timeout [ 87.171912] Bluetooth: hci5: command tx timeout [ 87.235961] Bluetooth: hci7: command tx timeout [ 88.774173] Bluetooth: hci0: command tx timeout [ 88.835894] Bluetooth: hci1: command tx timeout [ 88.964949] Bluetooth: hci2: command tx timeout [ 89.028417] Bluetooth: hci4: command tx timeout [ 89.091959] Bluetooth: hci6: command tx timeout [ 89.156036] Bluetooth: hci3: command tx timeout [ 89.221985] Bluetooth: hci5: command tx timeout [ 89.283978] Bluetooth: hci7: command tx timeout [ 90.819878] Bluetooth: hci0: command tx timeout [ 90.885825] Bluetooth: hci1: command tx timeout [ 91.011996] Bluetooth: hci2: command tx timeout [ 91.077054] Bluetooth: hci4: command tx timeout [ 91.139865] Bluetooth: hci6: command tx timeout [ 91.204081] Bluetooth: hci3: command tx timeout [ 91.267854] Bluetooth: hci5: command tx timeout [ 91.333006] Bluetooth: hci7: command tx timeout [ 92.867887] Bluetooth: hci0: command tx timeout [ 92.931877] Bluetooth: hci1: command tx timeout [ 93.060087] Bluetooth: hci2: command tx timeout [ 93.124928] Bluetooth: hci4: command tx timeout [ 93.189367] Bluetooth: hci6: command tx timeout [ 93.252948] Bluetooth: hci3: command tx timeout [ 93.318841] Bluetooth: hci5: command tx timeout [ 93.380847] Bluetooth: hci7: command tx timeout [ 147.240124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.243721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.244415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.245715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.247555] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.251960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.255474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.258646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.259712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.269084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.274401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.277142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.283347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.287150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.291671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.301066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.307585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.313582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.418340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.425904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.427567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.435176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.442219] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.445029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.474635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.482199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.497913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.525079] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.538479] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.541894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.634491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.646591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.661905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.664103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.666943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.671956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.684042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.684980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.700919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.701390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.702325] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.702872] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.713657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.716601] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.717659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.719793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.724258] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.725469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.317439] Bluetooth: hci0: command tx timeout [ 149.379951] Bluetooth: hci1: command tx timeout [ 149.381686] Bluetooth: hci2: command tx timeout [ 149.508198] Bluetooth: hci3: command tx timeout [ 149.635973] Bluetooth: hci4: command tx timeout [ 149.765873] Bluetooth: hci5: command tx timeout [ 149.827992] Bluetooth: hci7: command tx timeout [ 149.892003] Bluetooth: hci6: command tx timeout [ 151.363904] Bluetooth: hci0: command tx timeout [ 151.428567] Bluetooth: hci1: command tx timeout [ 151.428655] Bluetooth: hci2: command tx timeout [ 151.555850] Bluetooth: hci3: command tx timeout [ 151.684842] Bluetooth: hci4: command tx timeout [ 151.812593] Bluetooth: hci5: command tx timeout [ 151.875883] Bluetooth: hci7: command tx timeout [ 151.939938] Bluetooth: hci6: command tx timeout [ 153.411841] Bluetooth: hci0: command tx timeout [ 153.475951] Bluetooth: hci1: command tx timeout [ 153.476547] Bluetooth: hci2: command tx timeout [ 153.603877] Bluetooth: hci3: command tx timeout [ 153.732929] Bluetooth: hci4: command tx timeout [ 153.862357] Bluetooth: hci5: command tx timeout [ 153.924012] Bluetooth: hci7: command tx timeout [ 153.988103] Bluetooth: hci6: command tx timeout [ 155.460825] Bluetooth: hci0: command tx timeout [ 155.523875] Bluetooth: hci2: command tx timeout [ 155.523910] Bluetooth: hci1: command tx timeout [ 155.651916] Bluetooth: hci3: command tx timeout [ 155.780122] Bluetooth: hci4: command tx timeout [ 155.910817] Bluetooth: hci5: command tx timeout [ 155.971863] Bluetooth: hci7: command tx timeout [ 156.037891] Bluetooth: hci6: command tx timeout [ 209.177455] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.179052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.180413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.181894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.187070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.188583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.189685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.191955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.194832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.199497] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.201747] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.202702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.308252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.309425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.310463] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.319527] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.322001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.325083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.434130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.458343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.459711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.465025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.469136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.471276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.487179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.494659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.500008] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.503329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.504373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.514463] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.515202] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.522817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.524598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.525037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.528341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.537925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.546673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.548323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.550240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.585891] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.586258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.589715] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.591140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.597590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.607150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.634078] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.638071] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.641718] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.267936] Bluetooth: hci0: command tx timeout [ 211.268242] Bluetooth: hci1: command tx timeout [ 211.459932] Bluetooth: hci2: command tx timeout [ 211.587844] Bluetooth: hci5: command tx timeout [ 211.651853] Bluetooth: hci4: command tx timeout [ 211.652139] Bluetooth: hci3: command tx timeout [ 211.715880] Bluetooth: hci6: command tx timeout [ 211.780939] Bluetooth: hci7: command tx timeout [ 213.316039] Bluetooth: hci1: command tx timeout [ 213.316558] Bluetooth: hci0: command tx timeout [ 213.509812] Bluetooth: hci2: command tx timeout [ 213.636099] Bluetooth: hci5: command tx timeout [ 213.701070] Bluetooth: hci3: command tx timeout [ 213.701179] Bluetooth: hci4: command tx timeout [ 213.764904] Bluetooth: hci6: command tx timeout [ 213.828846] Bluetooth: hci7: command tx timeout [ 215.364927] Bluetooth: hci0: command tx timeout [ 215.365695] Bluetooth: hci1: command tx timeout [ 215.558163] Bluetooth: hci2: command tx timeout [ 215.685009] Bluetooth: hci5: command tx timeout [ 215.748843] Bluetooth: hci4: command tx timeout [ 215.748926] Bluetooth: hci3: command tx timeout [ 215.813307] Bluetooth: hci6: command tx timeout [ 215.878876] Bluetooth: hci7: command tx timeout [ 217.412064] Bluetooth: hci1: command tx timeout [ 217.412847] Bluetooth: hci0: command tx timeout [ 217.604938] Bluetooth: hci2: command tx timeout [ 217.731872] Bluetooth: hci5: command tx timeout [ 217.796294] Bluetooth: hci3: command tx timeout [ 217.797097] Bluetooth: hci4: command tx timeout [ 217.859879] Bluetooth: hci6: command tx timeout [ 217.923908] Bluetooth: hci7: command tx timeout [ 269.366961] [ 269.367260] ====================================================== [ 269.367894] WARNING: possible circular locking dependency detected [ 269.368526] 6.13.0-rc7-next-20250117 #1 Not tainted [ 269.369030] ------------------------------------------------------ [ 269.372640] kworker/u8:0/11 is trying to acquire lock: [ 269.373166] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.374268] [ 269.374268] but task is already holding lock: [ 269.374872] ffff8880300a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 269.375912] [ 269.375912] which lock already depends on the new lock. [ 269.375912] [ 269.376720] [ 269.376720] the existing dependency chain (in reverse order) is: [ 269.377458] [ 269.377458] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 269.378158] __mutex_lock+0x13d/0xb50 [ 269.378653] wiphy_register+0x1b2e/0x25d0 [ 269.379175] ieee80211_register_hw+0x23a4/0x3d60 [ 269.379748] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 269.380342] init_mac80211_hwsim+0x389/0x870 [ 269.380887] do_one_initcall+0xf9/0x640 [ 269.381389] kernel_init_freeable+0x53d/0x7a0 [ 269.381945] kernel_init+0x1e/0x2d0 [ 269.382397] ret_from_fork+0x48/0x80 [ 269.382846] ret_from_fork_asm+0x1a/0x30 [ 269.383376] [ 269.383376] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 269.384024] __lock_acquire+0x29fd/0x4580 [ 269.384525] lock_acquire+0x19b/0x520 [ 269.384986] __mutex_lock+0x13d/0xb50 [ 269.385467] unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.386115] unregister_netdevice_queue+0x224/0x2e0 [ 269.386693] _cfg80211_unregister_wdev+0x57b/0x700 [ 269.387284] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 269.387859] ieee80211_unregister_hw+0x55/0x3a0 [ 269.388416] hwsim_exit_net+0x3a0/0x730 [ 269.388951] ops_exit_list+0xb3/0x180 [ 269.389439] cleanup_net+0x546/0xad0 [ 269.389928] process_one_work+0x8ee/0x1a10 [ 269.390488] worker_thread+0x674/0xe70 [ 269.391014] kthread+0x3ab/0x720 [ 269.391490] ret_from_fork+0x48/0x80 [ 269.391967] ret_from_fork_asm+0x1a/0x30 [ 269.392511] [ 269.392511] other info that might help us debug this: [ 269.392511] [ 269.393321] Possible unsafe locking scenario: [ 269.393321] [ 269.393942] CPU0 CPU1 [ 269.394433] ---- ---- [ 269.394923] lock(&rdev->wiphy.mtx); [ 269.395384] lock(rtnl_mutex); [ 269.395996] lock(&rdev->wiphy.mtx); [ 269.396632] lock(rtnl_mutex); [ 269.397016] [ 269.397016] *** DEADLOCK *** [ 269.397016] [ 269.397620] 4 locks held by kworker/u8:0/11: [ 269.398069] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 269.399143] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 269.400203] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 269.401219] #3: ffff8880300a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 269.402388] [ 269.402388] stack backtrace: [ 269.402900] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 269.403854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 269.404733] Workqueue: netns cleanup_net [ 269.405204] Call Trace: [ 269.405500] [ 269.405771] dump_stack_lvl+0xca/0x120 [ 269.406279] print_circular_bug+0x47b/0x750 [ 269.406823] check_noncircular+0x2e9/0x3c0 [ 269.407367] ? lock_repin_lock+0x207/0x320 [ 269.407914] ? __pfx_check_noncircular+0x10/0x10 [ 269.408508] ? hlock_class+0x4e/0x130 [ 269.408979] ? mark_lock+0xac/0xed0 [ 269.409444] ? __pfx_lock_repin_lock+0x10/0x10 [ 269.410041] ? lockdep_lock+0xba/0x1b0 [ 269.410554] ? __pfx_lockdep_lock+0x10/0x10 [ 269.411126] __lock_acquire+0x29fd/0x4580 [ 269.411660] ? __pfx___lock_acquire+0x10/0x10 [ 269.412182] ? lock_release+0x20f/0x6f0 [ 269.412639] ? __pfx_lock_release+0x10/0x10 [ 269.413133] lock_acquire+0x19b/0x520 [ 269.413595] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.414302] ? __pfx_lock_acquire+0x10/0x10 [ 269.414849] ? srso_return_thunk+0x5/0x5f [ 269.415438] ? lock_release+0x20f/0x6f0 [ 269.415949] ? srso_return_thunk+0x5/0x5f [ 269.416486] ? lock_is_held_type+0x9e/0x120 [ 269.417034] ? srso_return_thunk+0x5/0x5f [ 269.417582] __mutex_lock+0x13d/0xb50 [ 269.418085] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.418789] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.419493] ? srso_return_thunk+0x5/0x5f [ 269.419997] ? synchronize_rcu_expedited+0x38a/0x420 [ 269.420585] ? __pfx___mutex_lock+0x10/0x10 [ 269.421104] ? __pfx_autoremove_wake_function+0x10/0x10 [ 269.421719] ? srso_return_thunk+0x5/0x5f [ 269.422218] ? kasan_quarantine_put+0x84/0x1e0 [ 269.422778] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 269.423307] ? srso_return_thunk+0x5/0x5f [ 269.423800] unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.424352] ? __virt_addr_valid+0x2e8/0x5d0 [ 269.424820] ? __pfx_lock_release+0x10/0x10 [ 269.425299] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 269.425895] ? find_held_lock+0x2c/0x110 [ 269.426359] ? srso_return_thunk+0x5/0x5f [ 269.426784] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 269.427281] ? srso_return_thunk+0x5/0x5f [ 269.427722] ? lock_release+0x20f/0x6f0 [ 269.428183] ? __pfx_lock_release+0x10/0x10 [ 269.428671] ? srso_return_thunk+0x5/0x5f [ 269.429152] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 269.429715] ? srso_return_thunk+0x5/0x5f [ 269.430146] unregister_netdevice_queue+0x224/0x2e0 [ 269.430630] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 269.431159] ? up_write+0x195/0x520 [ 269.431540] _cfg80211_unregister_wdev+0x57b/0x700 [ 269.432023] ? srso_return_thunk+0x5/0x5f [ 269.432448] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 269.432924] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 269.433440] ? srso_return_thunk+0x5/0x5f [ 269.433856] ? srso_return_thunk+0x5/0x5f [ 269.434271] ? synchronize_rcu+0x1ff/0x260 [ 269.434682] ieee80211_unregister_hw+0x55/0x3a0 [ 269.435132] hwsim_exit_net+0x3a0/0x730 [ 269.435536] ? __pfx_hwsim_exit_net+0x10/0x10 [ 269.435970] ? srso_return_thunk+0x5/0x5f [ 269.436389] ? netdev_run_todo+0x788/0x1040 [ 269.436811] ? srso_return_thunk+0x5/0x5f [ 269.437230] ? __pfx_hwsim_exit_net+0x10/0x10 [ 269.437665] ops_exit_list+0xb3/0x180 [ 269.438042] cleanup_net+0x546/0xad0 [ 269.438415] ? __pfx_cleanup_net+0x10/0x10 [ 269.438835] process_one_work+0x8ee/0x1a10 [ 269.439279] ? __pfx_lock_acquire+0x10/0x10 [ 269.439708] ? __pfx_process_one_work+0x10/0x10 [ 269.440176] ? srso_return_thunk+0x5/0x5f [ 269.440595] ? move_linked_works+0x172/0x270 [ 269.441025] ? srso_return_thunk+0x5/0x5f [ 269.441442] ? assign_work+0x196/0x240 [ 269.441841] worker_thread+0x674/0xe70 [ 269.442242] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 269.442754] ? __pfx_worker_thread+0x10/0x10 [ 269.443208] kthread+0x3ab/0x720 [ 269.443561] ? __pfx_kthread+0x10/0x10 [ 269.443953] ? srso_return_thunk+0x5/0x5f [ 269.444370] ? finish_task_switch.isra.0+0x206/0x840 [ 269.444864] ? __pfx_kthread+0x10/0x10 [ 269.445261] ret_from_fork+0x48/0x80 [ 269.445621] ? __pfx_kthread+0x10/0x10 [ 269.446019] ret_from_fork_asm+0x1a/0x30 [ 269.446442] [ 270.998614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.001719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.008013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.014539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.018226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.020636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.060530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.061846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.062661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.067389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.068649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.069309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.137474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.151285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.170359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.176956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.179314] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.181396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.257324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.265122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.269089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.280357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.283415] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.287282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.316253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.327326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.329126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.343290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.346955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.354363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.356075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.358716] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.360510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.386077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.404656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.406114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.515839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.526119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.526395] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.540070] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.540491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.547082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.549261] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.551379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.552496] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.553369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.561033] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.561630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.092298] Bluetooth: hci0: command tx timeout [ 273.155862] Bluetooth: hci1: command tx timeout [ 273.220263] Bluetooth: hci2: command tx timeout [ 273.348417] Bluetooth: hci3: command tx timeout [ 273.411851] Bluetooth: hci5: command tx timeout [ 273.475831] Bluetooth: hci4: command tx timeout [ 273.604244] Bluetooth: hci7: command tx timeout [ 273.669152] Bluetooth: hci6: command tx timeout [ 275.140364] Bluetooth: hci0: command tx timeout [ 275.203810] Bluetooth: hci1: command tx timeout [ 275.268792] Bluetooth: hci2: command tx timeout [ 275.396088] Bluetooth: hci3: command tx timeout [ 275.460074] Bluetooth: hci5: command tx timeout [ 275.523820] Bluetooth: hci4: command tx timeout [ 275.653784] Bluetooth: hci7: command tx timeout [ 275.715847] Bluetooth: hci6: command tx timeout [ 277.187889] Bluetooth: hci0: command tx timeout [ 277.252323] Bluetooth: hci1: command tx timeout [ 277.315833] Bluetooth: hci2: command tx timeout [ 277.444319] Bluetooth: hci3: command tx timeout [ 277.508879] Bluetooth: hci5: command tx timeout [ 277.571870] Bluetooth: hci4: command tx timeout [ 277.699968] Bluetooth: hci7: command tx timeout [ 277.763853] Bluetooth: hci6: command tx timeout [ 279.236254] Bluetooth: hci0: command tx timeout [ 279.299814] Bluetooth: hci1: command tx timeout [ 279.364839] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 01:37:40 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea025 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa7dc472510 CR3=0000000015ff0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000003ffffffff0000560658368df0 XMM05=000056065834e830000056065834e810 XMM06=0000560658368d70ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800ec83780 RCX=ffffffff81429a0f RDX=ffff88800ec83780 RSI=ffffffff81429a18 RDI=ffff88800ec83de8 RBP=0000000000200000 RSP=ffff88800f17fdb8 R8 =0000000000000000 R9 =ffffed1001d9ff00 R10=0000000000200000 R11=0000000000000001 R12=ffff8880071fe6f9 R13=ffff888007202250 R14=ffff88800ec83780 R15=0000000000000086 RIP=ffffffff81429a1f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562ecec70760 CR3=000000000e1d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414524b800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000