Warning: Permanently added '[localhost]:55205' (ECDSA) to the list of known hosts. 2025/09/01 09:37:08 fuzzer started 2025/09/01 09:37:08 dialing manager at localhost:35473 syzkaller login: [ 58.355678] cgroup: Unknown subsys name 'net' [ 58.623787] cgroup: Unknown subsys name 'cpuset' [ 58.684793] cgroup: Unknown subsys name 'rlimit' 2025/09/01 09:37:18 syscalls: 2214 2025/09/01 09:37:18 code coverage: enabled 2025/09/01 09:37:18 comparison tracing: enabled 2025/09/01 09:37:18 extra coverage: enabled 2025/09/01 09:37:18 setuid sandbox: enabled 2025/09/01 09:37:18 namespace sandbox: enabled 2025/09/01 09:37:18 Android sandbox: enabled 2025/09/01 09:37:18 fault injection: enabled 2025/09/01 09:37:18 leak checking: enabled 2025/09/01 09:37:18 net packet injection: enabled 2025/09/01 09:37:18 net device setup: enabled 2025/09/01 09:37:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 09:37:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 09:37:18 USB emulation: enabled 2025/09/01 09:37:18 hci packet injection: enabled 2025/09/01 09:37:18 wifi device emulation: enabled 2025/09/01 09:37:18 802.15.4 emulation: enabled 2025/09/01 09:37:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 09:37:18 fetching corpus: 48, signal 27413/30711 (executing program) 2025/09/01 09:37:18 fetching corpus: 98, signal 38481/43011 (executing program) 2025/09/01 09:37:18 fetching corpus: 148, signal 47355/52867 (executing program) 2025/09/01 09:37:18 fetching corpus: 198, signal 53285/59783 (executing program) 2025/09/01 09:37:18 fetching corpus: 248, signal 57005/64487 (executing program) 2025/09/01 09:37:18 fetching corpus: 298, signal 60845/69233 (executing program) 2025/09/01 09:37:19 fetching corpus: 348, signal 64005/73254 (executing program) 2025/09/01 09:37:19 fetching corpus: 398, signal 66923/76920 (executing program) 2025/09/01 09:37:19 fetching corpus: 448, signal 70280/80936 (executing program) 2025/09/01 09:37:19 fetching corpus: 498, signal 74386/85496 (executing program) 2025/09/01 09:37:19 fetching corpus: 548, signal 77140/88839 (executing program) 2025/09/01 09:37:19 fetching corpus: 598, signal 80920/92979 (executing program) 2025/09/01 09:37:19 fetching corpus: 648, signal 84791/97087 (executing program) 2025/09/01 09:37:20 fetching corpus: 698, signal 86797/99627 (executing program) 2025/09/01 09:37:20 fetching corpus: 748, signal 88593/101874 (executing program) 2025/09/01 09:37:20 fetching corpus: 798, signal 91228/104749 (executing program) 2025/09/01 09:37:20 fetching corpus: 848, signal 92873/106859 (executing program) 2025/09/01 09:37:20 fetching corpus: 898, signal 94255/108687 (executing program) 2025/09/01 09:37:20 fetching corpus: 948, signal 95910/110680 (executing program) 2025/09/01 09:37:20 fetching corpus: 998, signal 97285/112390 (executing program) 2025/09/01 09:37:20 fetching corpus: 1048, signal 99626/114790 (executing program) 2025/09/01 09:37:20 fetching corpus: 1098, signal 101490/116809 (executing program) 2025/09/01 09:37:21 fetching corpus: 1148, signal 104164/119355 (executing program) 2025/09/01 09:37:21 fetching corpus: 1198, signal 105519/120938 (executing program) 2025/09/01 09:37:21 fetching corpus: 1248, signal 106943/122502 (executing program) 2025/09/01 09:37:21 fetching corpus: 1298, signal 108264/123968 (executing program) 2025/09/01 09:37:21 fetching corpus: 1348, signal 109616/125428 (executing program) 2025/09/01 09:37:21 fetching corpus: 1398, signal 111379/127061 (executing program) 2025/09/01 09:37:21 fetching corpus: 1448, signal 113225/128796 (executing program) 2025/09/01 09:37:21 fetching corpus: 1498, signal 114133/129903 (executing program) 2025/09/01 09:37:21 fetching corpus: 1548, signal 115242/131060 (executing program) 2025/09/01 09:37:21 fetching corpus: 1598, signal 116647/132373 (executing program) 2025/09/01 09:37:22 fetching corpus: 1648, signal 118337/133849 (executing program) 2025/09/01 09:37:22 fetching corpus: 1698, signal 118912/134544 (executing program) 2025/09/01 09:37:22 fetching corpus: 1748, signal 120310/135695 (executing program) 2025/09/01 09:37:22 fetching corpus: 1798, signal 121666/136804 (executing program) 2025/09/01 09:37:22 fetching corpus: 1848, signal 122670/137727 (executing program) 2025/09/01 09:37:22 fetching corpus: 1898, signal 123846/138712 (executing program) 2025/09/01 09:37:22 fetching corpus: 1948, signal 124839/139557 (executing program) 2025/09/01 09:37:22 fetching corpus: 1998, signal 125600/140274 (executing program) 2025/09/01 09:37:22 fetching corpus: 2048, signal 126786/141228 (executing program) 2025/09/01 09:37:22 fetching corpus: 2098, signal 127426/141879 (executing program) 2025/09/01 09:37:23 fetching corpus: 2148, signal 128248/142566 (executing program) 2025/09/01 09:37:23 fetching corpus: 2198, signal 129098/143221 (executing program) 2025/09/01 09:37:23 fetching corpus: 2248, signal 129711/143808 (executing program) 2025/09/01 09:37:23 fetching corpus: 2298, signal 130567/144462 (executing program) 2025/09/01 09:37:23 fetching corpus: 2348, signal 131625/145146 (executing program) 2025/09/01 09:37:23 fetching corpus: 2398, signal 132404/145773 (executing program) 2025/09/01 09:37:23 fetching corpus: 2448, signal 133096/146261 (executing program) 2025/09/01 09:37:23 fetching corpus: 2498, signal 133804/146751 (executing program) 2025/09/01 09:37:23 fetching corpus: 2548, signal 134244/147137 (executing program) 2025/09/01 09:37:23 fetching corpus: 2598, signal 135078/147646 (executing program) 2025/09/01 09:37:23 fetching corpus: 2648, signal 135611/148085 (executing program) 2025/09/01 09:37:24 fetching corpus: 2698, signal 136160/148497 (executing program) 2025/09/01 09:37:24 fetching corpus: 2748, signal 136695/148856 (executing program) 2025/09/01 09:37:24 fetching corpus: 2798, signal 137339/149225 (executing program) 2025/09/01 09:37:24 fetching corpus: 2848, signal 138449/149721 (executing program) 2025/09/01 09:37:24 fetching corpus: 2898, signal 139036/150069 (executing program) 2025/09/01 09:37:24 fetching corpus: 2948, signal 139764/150409 (executing program) 2025/09/01 09:37:24 fetching corpus: 2998, signal 140300/150728 (executing program) 2025/09/01 09:37:24 fetching corpus: 3048, signal 140965/151036 (executing program) 2025/09/01 09:37:24 fetching corpus: 3098, signal 141597/151365 (executing program) 2025/09/01 09:37:24 fetching corpus: 3148, signal 143496/151787 (executing program) 2025/09/01 09:37:25 fetching corpus: 3198, signal 144108/151990 (executing program) 2025/09/01 09:37:25 fetching corpus: 3248, signal 144990/152258 (executing program) 2025/09/01 09:37:25 fetching corpus: 3298, signal 145556/152435 (executing program) 2025/09/01 09:37:25 fetching corpus: 3348, signal 146091/152578 (executing program) 2025/09/01 09:37:25 fetching corpus: 3398, signal 146681/152743 (executing program) 2025/09/01 09:37:25 fetching corpus: 3448, signal 147078/152864 (executing program) 2025/09/01 09:37:25 fetching corpus: 3498, signal 147480/152979 (executing program) 2025/09/01 09:37:25 fetching corpus: 3548, signal 148238/153079 (executing program) 2025/09/01 09:37:25 fetching corpus: 3598, signal 148638/153190 (executing program) 2025/09/01 09:37:25 fetching corpus: 3648, signal 149252/153293 (executing program) 2025/09/01 09:37:26 fetching corpus: 3698, signal 149838/153372 (executing program) 2025/09/01 09:37:26 fetching corpus: 3742, signal 150436/153390 (executing program) 2025/09/01 09:37:26 fetching corpus: 3742, signal 150436/153390 (executing program) 2025/09/01 09:37:27 starting 8 fuzzer processes 09:37:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x1c, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 09:37:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000005a00)={'syzkaller0\x00'}) 09:37:28 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002002}, 0xc) 09:37:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)) [ 77.982799] audit: type=1400 audit(1756719448.046:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:37:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="4001e0031973ec8fa390455c6c15df66d7f702b91e015d99b84f9557f27049ab10b87a418abbc14acfdae92c90c1c814065c7e33e4aec8b6de3adf1f031ba7a29165adde3031837374893709ed7ffe1ec303b525423e184b2207393cf245e53aaf2d001156d18ab18c09afaaed5b6343bf94149c8b336c18bdd4784435be1b573160b4369ae761707d49839b62d503f397142ea1415b96b4be4c2103145ea877dad7aeb03d3ba336d85013fc97d57b9abb", 0xb1}, {&(0x7f00000001c0)="649846fa618505366694c16eb22418c25df9f7a42494e7c716dd2dd00d305a33b8f324fd36557e5fa763d441d47611f95de9890b1409d41f970653bc1dbb035a510eedcbb6e92d1bb07fd126e46e2a7fcc453c13e3ab344f28e896ea861d69c95838cb054c552f8c5a90928aeee4e52479aa1632dec52adb4dc067b50656f331a2f592e5be7810f9aa08494d1c168dda664057de458145a2fb829a621ef10b1d41ba23f88edeaaa1d4a013af644b457865d31e3bc4b53145f8ead1dd79ec181a012442566df9fa14cd97b1dec33901c4c4984f6b46b522f21ebeec06da986698f772d8f6d5093244138e", 0xea}, {&(0x7f00000002c0)="ad97871d7d6883a435d627b04ac4542a8fcbbed6bd08f1ec98910eea40e3b5b56fce17205fa4cacd3e42c5e6a88fe005e18213023cc5155061469d754a27943a07a5bf856cb7bed999045c85f9c34c29414ce42ed7dfc6470425864ee029d3286f5b", 0x62}, {&(0x7f00000003c0)="00101c335c1e02c17f1fc1e90c5caeaa1eceab7654cc668c2490dff92c2307e252821c4cc1daa990842e3462154ad753fd3d222605a8d44005c243e6e11eb8c549a9ecc3d30a0751f2e6bcbf98c2ff781cd7fd3c2a2ca9de34da64fff425902e49c688d43a16b6b407eba767056379c36cd78b5a0d23b54196e295f32da3d6c26f113056258bd596abb83a416de5738c4f2ea526d5260ec6607e6c8876", 0x9d}, {&(0x7f0000000480)="e64c800c131fc412ad4bd817d3dac636c98a8bdd71c86d968473822ba0218f606f94fb9c437e6a4d84a249ca0b594a8c78629e468377830100c040b9181cfb64ac435fd4fca872783ebfa969a8e71a1b21760bfb9d19ba2d709d24d7f28a1fd20db7175b00bd5cc97ae4970259bf8b93976295216ac3b2c3303144", 0x7b}, {&(0x7f0000000500)="55a54f4363923e6baa945c31c03a2ce4162ce089d89bac683e7dd258a4465c7333605e1146f6459daf27fd227e4641332da69000931adf838ad878d654e73e64083b8c0083318c521440c9bbf7cec84d5e5b33961bb76095a7493ff5cf8d8b7e0d90f54b9cb5355ae31d", 0x6a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="c06043ed0e260a3777d7fef3df38d1a8b424f1d030b0de50e3dd920a262b777357e5d762d10acd1772a25e0a9ae9df3a821aa6dd95e21294f15d", 0x3a}, {&(0x7f0000000780)="85059f87678b1b4c42a268d1d91672afdd828d7e639e35e69ab3fb496541649bc7", 0x21}, {&(0x7f00000007c0)="9c8009fc1bbcfce74cdfd8ac492108f28d3e1c64b5e3e733b38186a7c1d466884a30025c41c89de5ece7476897ee7563cf3d1c8b751fdc8e60b1dd23e44525b8401bb7fc2e0c2aa41daa90e4e8f204c6cd112529b7bdbf969427d43882e2c8fa5fbf64069792fbab244f6a526c03e5ef2be3e814525d1a73", 0x78}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="cab643a8873b6a92e2e00908fc1039b6eb8f45d188f8831cbab3590bc3301c140db73f0d32970b5d80c34dd48325e2a5afd1e1d6309a5c5a87c5cb9457d843269a5d2c2bb378987a5b47b1fc911a31cfb3aafbe8addabd93f6041a8e9af16659b21da7c3f5a3e65a91175dd6850c", 0x6e}, {&(0x7f0000000a00)="838414a58a88a32fa41d56cdc7d57788adbd90ef90165eee08888e09feea49073b4771b6e5f5db4249", 0x29}, {&(0x7f0000000a40)="6dbc4ce6c6875ecf57e7529e0d6f57f7e0944bb647a53df064cabf13892fb1fefe56a9bce4c685db5b465b8c413c72bb6fd4abab8cb1889d7995fe12f2a7b3966c3af0d7d90e5b31e16dcdde6855c37220511be76b012718db2811f84365b7f37ecd3023b5ee1f2d4aab4f04021c71b44efd0e18fb6af87aafd3a2f9dc925bd7e7ca5c93e3c1a7d352f31e0de43ea31eebd632808a4bbde62dbd9c37", 0x9c}, {&(0x7f0000000b00)="0139d21695e8b226e029d41cbacab3dabb610fbafd98500c6484204c9e", 0x1d}], 0x4, &(0x7f0000003cc0)=ANY=[], 0x1e8}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e40)="953533e8d5db39ba871b71", 0xb}], 0x1}}], 0x4, 0x8000) 09:37:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x2) 09:37:28 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) 09:37:28 executing program 6: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x25, 0x0, 0x0, @u32}]}]}, 0x2c}], 0x1}, 0x0) [ 79.129405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.135395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.137442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.144430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.150497] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.198063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.199810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.202064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.203260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.205897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.207156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.222145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.223508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.229278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.230964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.328787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.347298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.351610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.353694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.355851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.358571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.360499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.360861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.363628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.366153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.378507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.379685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.393098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.394759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.396424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.407807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.410166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.447754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.448916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.451077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.452761] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.459824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.467744] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.480681] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.487661] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.225885] Bluetooth: hci0: command tx timeout [ 81.288465] Bluetooth: hci2: command tx timeout [ 81.288614] Bluetooth: hci1: command tx timeout [ 81.416560] Bluetooth: hci4: command tx timeout [ 81.480679] Bluetooth: hci3: command tx timeout [ 81.544448] Bluetooth: hci6: command tx timeout [ 81.544628] Bluetooth: hci5: command tx timeout [ 81.545752] Bluetooth: hci7: command tx timeout [ 83.272377] Bluetooth: hci0: command tx timeout [ 83.337191] Bluetooth: hci1: command tx timeout [ 83.337661] Bluetooth: hci2: command tx timeout [ 83.464417] Bluetooth: hci4: command tx timeout [ 83.528562] Bluetooth: hci3: command tx timeout [ 83.592568] Bluetooth: hci5: command tx timeout [ 83.593005] Bluetooth: hci7: command tx timeout [ 83.594041] Bluetooth: hci6: command tx timeout [ 85.321514] Bluetooth: hci0: command tx timeout [ 85.385526] Bluetooth: hci1: command tx timeout [ 85.385970] Bluetooth: hci2: command tx timeout [ 85.513572] Bluetooth: hci4: command tx timeout [ 85.576417] Bluetooth: hci3: command tx timeout [ 85.640600] Bluetooth: hci7: command tx timeout [ 85.642467] Bluetooth: hci5: command tx timeout [ 85.642542] Bluetooth: hci6: command tx timeout [ 87.368926] Bluetooth: hci0: command tx timeout [ 87.434383] Bluetooth: hci2: command tx timeout [ 87.434619] Bluetooth: hci1: command tx timeout [ 87.560472] Bluetooth: hci4: command tx timeout [ 87.625971] Bluetooth: hci3: command tx timeout [ 87.688426] Bluetooth: hci7: command tx timeout [ 87.688476] Bluetooth: hci6: command tx timeout [ 87.688966] Bluetooth: hci5: command tx timeout [ 120.176489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.177167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.346885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.347992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.504008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.504665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.777136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.778131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.780236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.780812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:38:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="4001e0031973ec8fa390455c6c15df66d7f702b91e015d99b84f9557f27049ab10b87a418abbc14acfdae92c90c1c814065c7e33e4aec8b6de3adf1f031ba7a29165adde3031837374893709ed7ffe1ec303b525423e184b2207393cf245e53aaf2d001156d18ab18c09afaaed5b6343bf94149c8b336c18bdd4784435be1b573160b4369ae761707d49839b62d503f397142ea1415b96b4be4c2103145ea877dad7aeb03d3ba336d85013fc97d57b9abb", 0xb1}, {&(0x7f00000001c0)="649846fa618505366694c16eb22418c25df9f7a42494e7c716dd2dd00d305a33b8f324fd36557e5fa763d441d47611f95de9890b1409d41f970653bc1dbb035a510eedcbb6e92d1bb07fd126e46e2a7fcc453c13e3ab344f28e896ea861d69c95838cb054c552f8c5a90928aeee4e52479aa1632dec52adb4dc067b50656f331a2f592e5be7810f9aa08494d1c168dda664057de458145a2fb829a621ef10b1d41ba23f88edeaaa1d4a013af644b457865d31e3bc4b53145f8ead1dd79ec181a012442566df9fa14cd97b1dec33901c4c4984f6b46b522f21ebeec06da986698f772d8f6d5093244138e", 0xea}, {&(0x7f00000002c0)="ad97871d7d6883a435d627b04ac4542a8fcbbed6bd08f1ec98910eea40e3b5b56fce17205fa4cacd3e42c5e6a88fe005e18213023cc5155061469d754a27943a07a5bf856cb7bed999045c85f9c34c29414ce42ed7dfc6470425864ee029d3286f5b", 0x62}, {&(0x7f00000003c0)="00101c335c1e02c17f1fc1e90c5caeaa1eceab7654cc668c2490dff92c2307e252821c4cc1daa990842e3462154ad753fd3d222605a8d44005c243e6e11eb8c549a9ecc3d30a0751f2e6bcbf98c2ff781cd7fd3c2a2ca9de34da64fff425902e49c688d43a16b6b407eba767056379c36cd78b5a0d23b54196e295f32da3d6c26f113056258bd596abb83a416de5738c4f2ea526d5260ec6607e6c8876", 0x9d}, {&(0x7f0000000480)="e64c800c131fc412ad4bd817d3dac636c98a8bdd71c86d968473822ba0218f606f94fb9c437e6a4d84a249ca0b594a8c78629e468377830100c040b9181cfb64ac435fd4fca872783ebfa969a8e71a1b21760bfb9d19ba2d709d24d7f28a1fd20db7175b00bd5cc97ae4970259bf8b93976295216ac3b2c3303144", 0x7b}, {&(0x7f0000000500)="55a54f4363923e6baa945c31c03a2ce4162ce089d89bac683e7dd258a4465c7333605e1146f6459daf27fd227e4641332da69000931adf838ad878d654e73e64083b8c0083318c521440c9bbf7cec84d5e5b33961bb76095a7493ff5cf8d8b7e0d90f54b9cb5355ae31d", 0x6a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="c06043ed0e260a3777d7fef3df38d1a8b424f1d030b0de50e3dd920a262b777357e5d762d10acd1772a25e0a9ae9df3a821aa6dd95e21294f15d", 0x3a}, {&(0x7f0000000780)="85059f87678b1b4c42a268d1d91672afdd828d7e639e35e69ab3fb496541649bc7", 0x21}, {&(0x7f00000007c0)="9c8009fc1bbcfce74cdfd8ac492108f28d3e1c64b5e3e733b38186a7c1d466884a30025c41c89de5ece7476897ee7563cf3d1c8b751fdc8e60b1dd23e44525b8401bb7fc2e0c2aa41daa90e4e8f204c6cd112529b7bdbf969427d43882e2c8fa5fbf64069792fbab244f6a526c03e5ef2be3e814525d1a73", 0x78}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="cab643a8873b6a92e2e00908fc1039b6eb8f45d188f8831cbab3590bc3301c140db73f0d32970b5d80c34dd48325e2a5afd1e1d6309a5c5a87c5cb9457d843269a5d2c2bb378987a5b47b1fc911a31cfb3aafbe8addabd93f6041a8e9af16659b21da7c3f5a3e65a91175dd6850c", 0x6e}, {&(0x7f0000000a00)="838414a58a88a32fa41d56cdc7d57788adbd90ef90165eee08888e09feea49073b4771b6e5f5db4249", 0x29}, {&(0x7f0000000a40)="6dbc4ce6c6875ecf57e7529e0d6f57f7e0944bb647a53df064cabf13892fb1fefe56a9bce4c685db5b465b8c413c72bb6fd4abab8cb1889d7995fe12f2a7b3966c3af0d7d90e5b31e16dcdde6855c37220511be76b012718db2811f84365b7f37ecd3023b5ee1f2d4aab4f04021c71b44efd0e18fb6af87aafd3a2f9dc925bd7e7ca5c93e3c1a7d352f31e0de43ea31eebd632808a4bbde62dbd9c37", 0x9c}, {&(0x7f0000000b00)="0139d21695e8b226e029d41cbacab3dabb610fbafd98500c6484204c9e", 0x1d}], 0x4, &(0x7f0000003cc0)=ANY=[], 0x1e8}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e40)="953533e8d5db39ba871b71", 0xb}], 0x1}}], 0x4, 0x8000) [ 120.991009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.991643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:38:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="4001e0031973ec8fa390455c6c15df66d7f702b91e015d99b84f9557f27049ab10b87a418abbc14acfdae92c90c1c814065c7e33e4aec8b6de3adf1f031ba7a29165adde3031837374893709ed7ffe1ec303b525423e184b2207393cf245e53aaf2d001156d18ab18c09afaaed5b6343bf94149c8b336c18bdd4784435be1b573160b4369ae761707d49839b62d503f397142ea1415b96b4be4c2103145ea877dad7aeb03d3ba336d85013fc97d57b9abb", 0xb1}, {&(0x7f00000001c0)="649846fa618505366694c16eb22418c25df9f7a42494e7c716dd2dd00d305a33b8f324fd36557e5fa763d441d47611f95de9890b1409d41f970653bc1dbb035a510eedcbb6e92d1bb07fd126e46e2a7fcc453c13e3ab344f28e896ea861d69c95838cb054c552f8c5a90928aeee4e52479aa1632dec52adb4dc067b50656f331a2f592e5be7810f9aa08494d1c168dda664057de458145a2fb829a621ef10b1d41ba23f88edeaaa1d4a013af644b457865d31e3bc4b53145f8ead1dd79ec181a012442566df9fa14cd97b1dec33901c4c4984f6b46b522f21ebeec06da986698f772d8f6d5093244138e", 0xea}, {&(0x7f00000002c0)="ad97871d7d6883a435d627b04ac4542a8fcbbed6bd08f1ec98910eea40e3b5b56fce17205fa4cacd3e42c5e6a88fe005e18213023cc5155061469d754a27943a07a5bf856cb7bed999045c85f9c34c29414ce42ed7dfc6470425864ee029d3286f5b", 0x62}, {&(0x7f00000003c0)="00101c335c1e02c17f1fc1e90c5caeaa1eceab7654cc668c2490dff92c2307e252821c4cc1daa990842e3462154ad753fd3d222605a8d44005c243e6e11eb8c549a9ecc3d30a0751f2e6bcbf98c2ff781cd7fd3c2a2ca9de34da64fff425902e49c688d43a16b6b407eba767056379c36cd78b5a0d23b54196e295f32da3d6c26f113056258bd596abb83a416de5738c4f2ea526d5260ec6607e6c8876", 0x9d}, {&(0x7f0000000480)="e64c800c131fc412ad4bd817d3dac636c98a8bdd71c86d968473822ba0218f606f94fb9c437e6a4d84a249ca0b594a8c78629e468377830100c040b9181cfb64ac435fd4fca872783ebfa969a8e71a1b21760bfb9d19ba2d709d24d7f28a1fd20db7175b00bd5cc97ae4970259bf8b93976295216ac3b2c3303144", 0x7b}, {&(0x7f0000000500)="55a54f4363923e6baa945c31c03a2ce4162ce089d89bac683e7dd258a4465c7333605e1146f6459daf27fd227e4641332da69000931adf838ad878d654e73e64083b8c0083318c521440c9bbf7cec84d5e5b33961bb76095a7493ff5cf8d8b7e0d90f54b9cb5355ae31d", 0x6a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="c06043ed0e260a3777d7fef3df38d1a8b424f1d030b0de50e3dd920a262b777357e5d762d10acd1772a25e0a9ae9df3a821aa6dd95e21294f15d", 0x3a}, {&(0x7f0000000780)="85059f87678b1b4c42a268d1d91672afdd828d7e639e35e69ab3fb496541649bc7", 0x21}, {&(0x7f00000007c0)="9c8009fc1bbcfce74cdfd8ac492108f28d3e1c64b5e3e733b38186a7c1d466884a30025c41c89de5ece7476897ee7563cf3d1c8b751fdc8e60b1dd23e44525b8401bb7fc2e0c2aa41daa90e4e8f204c6cd112529b7bdbf969427d43882e2c8fa5fbf64069792fbab244f6a526c03e5ef2be3e814525d1a73", 0x78}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="cab643a8873b6a92e2e00908fc1039b6eb8f45d188f8831cbab3590bc3301c140db73f0d32970b5d80c34dd48325e2a5afd1e1d6309a5c5a87c5cb9457d843269a5d2c2bb378987a5b47b1fc911a31cfb3aafbe8addabd93f6041a8e9af16659b21da7c3f5a3e65a91175dd6850c", 0x6e}, {&(0x7f0000000a00)="838414a58a88a32fa41d56cdc7d57788adbd90ef90165eee08888e09feea49073b4771b6e5f5db4249", 0x29}, {&(0x7f0000000a40)="6dbc4ce6c6875ecf57e7529e0d6f57f7e0944bb647a53df064cabf13892fb1fefe56a9bce4c685db5b465b8c413c72bb6fd4abab8cb1889d7995fe12f2a7b3966c3af0d7d90e5b31e16dcdde6855c37220511be76b012718db2811f84365b7f37ecd3023b5ee1f2d4aab4f04021c71b44efd0e18fb6af87aafd3a2f9dc925bd7e7ca5c93e3c1a7d352f31e0de43ea31eebd632808a4bbde62dbd9c37", 0x9c}, {&(0x7f0000000b00)="0139d21695e8b226e029d41cbacab3dabb610fbafd98500c6484204c9e", 0x1d}], 0x4, &(0x7f0000003cc0)=ANY=[], 0x1e8}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e40)="953533e8d5db39ba871b71", 0xb}], 0x1}}], 0x4, 0x8000) [ 121.069579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.070217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:38:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="4001e0031973ec8fa390455c6c15df66d7f702b91e015d99b84f9557f27049ab10b87a418abbc14acfdae92c90c1c814065c7e33e4aec8b6de3adf1f031ba7a29165adde3031837374893709ed7ffe1ec303b525423e184b2207393cf245e53aaf2d001156d18ab18c09afaaed5b6343bf94149c8b336c18bdd4784435be1b573160b4369ae761707d49839b62d503f397142ea1415b96b4be4c2103145ea877dad7aeb03d3ba336d85013fc97d57b9abb", 0xb1}, {&(0x7f00000001c0)="649846fa618505366694c16eb22418c25df9f7a42494e7c716dd2dd00d305a33b8f324fd36557e5fa763d441d47611f95de9890b1409d41f970653bc1dbb035a510eedcbb6e92d1bb07fd126e46e2a7fcc453c13e3ab344f28e896ea861d69c95838cb054c552f8c5a90928aeee4e52479aa1632dec52adb4dc067b50656f331a2f592e5be7810f9aa08494d1c168dda664057de458145a2fb829a621ef10b1d41ba23f88edeaaa1d4a013af644b457865d31e3bc4b53145f8ead1dd79ec181a012442566df9fa14cd97b1dec33901c4c4984f6b46b522f21ebeec06da986698f772d8f6d5093244138e", 0xea}, {&(0x7f00000002c0)="ad97871d7d6883a435d627b04ac4542a8fcbbed6bd08f1ec98910eea40e3b5b56fce17205fa4cacd3e42c5e6a88fe005e18213023cc5155061469d754a27943a07a5bf856cb7bed999045c85f9c34c29414ce42ed7dfc6470425864ee029d3286f5b", 0x62}, {&(0x7f00000003c0)="00101c335c1e02c17f1fc1e90c5caeaa1eceab7654cc668c2490dff92c2307e252821c4cc1daa990842e3462154ad753fd3d222605a8d44005c243e6e11eb8c549a9ecc3d30a0751f2e6bcbf98c2ff781cd7fd3c2a2ca9de34da64fff425902e49c688d43a16b6b407eba767056379c36cd78b5a0d23b54196e295f32da3d6c26f113056258bd596abb83a416de5738c4f2ea526d5260ec6607e6c8876", 0x9d}, {&(0x7f0000000480)="e64c800c131fc412ad4bd817d3dac636c98a8bdd71c86d968473822ba0218f606f94fb9c437e6a4d84a249ca0b594a8c78629e468377830100c040b9181cfb64ac435fd4fca872783ebfa969a8e71a1b21760bfb9d19ba2d709d24d7f28a1fd20db7175b00bd5cc97ae4970259bf8b93976295216ac3b2c3303144", 0x7b}, {&(0x7f0000000500)="55a54f4363923e6baa945c31c03a2ce4162ce089d89bac683e7dd258a4465c7333605e1146f6459daf27fd227e4641332da69000931adf838ad878d654e73e64083b8c0083318c521440c9bbf7cec84d5e5b33961bb76095a7493ff5cf8d8b7e0d90f54b9cb5355ae31d", 0x6a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="c06043ed0e260a3777d7fef3df38d1a8b424f1d030b0de50e3dd920a262b777357e5d762d10acd1772a25e0a9ae9df3a821aa6dd95e21294f15d", 0x3a}, {&(0x7f0000000780)="85059f87678b1b4c42a268d1d91672afdd828d7e639e35e69ab3fb496541649bc7", 0x21}, {&(0x7f00000007c0)="9c8009fc1bbcfce74cdfd8ac492108f28d3e1c64b5e3e733b38186a7c1d466884a30025c41c89de5ece7476897ee7563cf3d1c8b751fdc8e60b1dd23e44525b8401bb7fc2e0c2aa41daa90e4e8f204c6cd112529b7bdbf969427d43882e2c8fa5fbf64069792fbab244f6a526c03e5ef2be3e814525d1a73", 0x78}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="cab643a8873b6a92e2e00908fc1039b6eb8f45d188f8831cbab3590bc3301c140db73f0d32970b5d80c34dd48325e2a5afd1e1d6309a5c5a87c5cb9457d843269a5d2c2bb378987a5b47b1fc911a31cfb3aafbe8addabd93f6041a8e9af16659b21da7c3f5a3e65a91175dd6850c", 0x6e}, {&(0x7f0000000a00)="838414a58a88a32fa41d56cdc7d57788adbd90ef90165eee08888e09feea49073b4771b6e5f5db4249", 0x29}, {&(0x7f0000000a40)="6dbc4ce6c6875ecf57e7529e0d6f57f7e0944bb647a53df064cabf13892fb1fefe56a9bce4c685db5b465b8c413c72bb6fd4abab8cb1889d7995fe12f2a7b3966c3af0d7d90e5b31e16dcdde6855c37220511be76b012718db2811f84365b7f37ecd3023b5ee1f2d4aab4f04021c71b44efd0e18fb6af87aafd3a2f9dc925bd7e7ca5c93e3c1a7d352f31e0de43ea31eebd632808a4bbde62dbd9c37", 0x9c}, {&(0x7f0000000b00)="0139d21695e8b226e029d41cbacab3dabb610fbafd98500c6484204c9e", 0x1d}], 0x4, &(0x7f0000003cc0)=ANY=[], 0x1e8}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e40)="953533e8d5db39ba871b71", 0xb}], 0x1}}], 0x4, 0x8000) [ 121.181899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.182606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:38:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)) 09:38:11 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x44802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x3ffffe00}]) 09:38:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)) [ 121.336140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.336768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.370590] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.371384] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.371972] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.372605] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 40 00 [ 121.373221] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.384485] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.385230] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.385821] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.386439] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 40 00 00 40 00 [ 121.387018] critical target error, dev sr0, sector 256 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.398121] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.398883] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.399475] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.400060] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 80 00 00 40 00 [ 121.400664] critical target error, dev sr0, sector 512 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 09:38:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)) 09:38:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x2) [ 121.422653] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.423451] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.424031] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.424641] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 c0 00 00 40 00 [ 121.425227] critical target error, dev sr0, sector 768 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.438075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.439012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.439410] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.440264] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.440857] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.441466] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 00 00 00 40 00 [ 121.442064] critical target error, dev sr0, sector 1024 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.455748] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.456738] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.457316] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.457950] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 40 00 00 40 00 [ 121.458552] critical target error, dev sr0, sector 1280 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.475567] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.476298] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.476881] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.477508] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 80 00 00 40 00 [ 121.478102] critical target error, dev sr0, sector 1536 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.493630] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.494388] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.494951] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.495565] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 c0 00 00 40 00 [ 121.496150] critical target error, dev sr0, sector 1792 op 0x1:(WRITE) flags 0x8800 phys_seg 32 prio class 2 [ 121.518136] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.518881] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.520071] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.521114] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 02 00 00 00 40 00 [ 121.521724] critical target error, dev sr0, sector 2048 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.537079] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.537940] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 121.538641] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 121.539229] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 02 40 00 00 40 00 [ 121.539859] critical target error, dev sr0, sector 2304 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 121.613261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.613883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.704115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.704829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.083564] audit: type=1400 audit(1756719492.146:8): avc: denied { open } for pid=3901 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.083727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.087082] audit: type=1400 audit(1756719492.147:9): avc: denied { kernel } for pid=3901 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.088098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.110776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.111900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.263016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.264052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.326170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.327197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.502586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.504186] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.514125] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.521772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.523874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.531195] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.538586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.541512] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.548706] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.555639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.557206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.561968] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.575952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.580208] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.586466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.590282] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 123.597002] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 123.602167] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 123.608069] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 123.613011] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 123.618167] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 123.623067] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 123.627886] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 123.633679] Bluetooth: hci7: Opcode 0x0406 failed: -4 09:38:13 executing program 6: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x25, 0x0, 0x0, @u32}]}]}, 0x2c}], 0x1}, 0x0) 09:38:13 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x44802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x3ffffe00}]) 09:38:13 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 09:38:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x1c, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 09:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000005a00)={'syzkaller0\x00'}) 09:38:13 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002002}, 0xc) 09:38:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x2) 09:38:13 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002002}, 0xc) 09:38:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f00000000c0)=""/194, 0xc2, 0x2) 09:38:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x1c, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 09:38:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000005a00)={'syzkaller0\x00'}) 09:38:13 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 124.002273] kmemleak: Found object by alias at 0x607f1a63df04 [ 124.002299] CPU: 1 UID: 0 PID: 3940 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 124.002334] Tainted: [W]=WARN [ 124.002340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.002352] Call Trace: [ 124.002358] [ 124.002370] dump_stack_lvl+0xca/0x120 [ 124.002413] __lookup_object+0x94/0xb0 [ 124.002440] delete_object_full+0x27/0x70 [ 124.002467] free_percpu+0x30/0x1160 [ 124.002493] ? arch_uprobe_clear_state+0x16/0x140 [ 124.002525] futex_hash_free+0x38/0xc0 [ 124.002548] mmput+0x2d3/0x390 [ 124.002578] do_exit+0x79d/0x2970 [ 124.002600] ? signal_wake_up_state+0x85/0x120 [ 124.002626] ? zap_other_threads+0x2b9/0x3a0 [ 124.002652] ? __pfx_do_exit+0x10/0x10 [ 124.002672] ? do_group_exit+0x1c3/0x2a0 [ 124.002695] ? lock_release+0xc8/0x290 [ 124.002722] do_group_exit+0xd3/0x2a0 [ 124.002747] __x64_sys_exit_group+0x3e/0x50 [ 124.002769] x64_sys_call+0x18c5/0x18d0 [ 124.002794] do_syscall_64+0xbf/0x360 [ 124.002815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.002833] RIP: 0033:0x7f8c6c4e7b19 [ 124.002847] Code: Unable to access opcode bytes at 0x7f8c6c4e7aef. [ 124.002855] RSP: 002b:00007ffea7c92ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 124.002874] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f8c6c4e7b19 [ 124.002886] RDX: 00007f8c6c49a72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 124.002898] RBP: 0000000000000000 R08: 0000001b2ce23b0c R09: 0000000000000000 [ 124.002909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.002920] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffea7c92fc0 [ 124.002945] [ 124.002952] kmemleak: Object (percpu) 0x607f1a63df00 (size 8): [ 124.002962] kmemleak: comm "syz-executor.7", pid 3947, jiffies 4294790808 [ 124.002974] kmemleak: min_count = 1 [ 124.002980] kmemleak: count = 0 [ 124.002986] kmemleak: flags = 0x21 [ 124.002992] kmemleak: checksum = 0 [ 124.002998] kmemleak: backtrace: [ 124.003003] pcpu_alloc_noprof+0x87a/0x1170 [ 124.003028] perf_trace_event_init+0x366/0xa10 [ 124.003050] perf_trace_init+0x1a4/0x2f0 [ 124.003070] perf_tp_event_init+0xa6/0x120 [ 124.003095] perf_try_init_event+0x140/0x9f0 [ 124.003117] perf_event_alloc.part.0+0x118e/0x45f0 [ 124.003144] __do_sys_perf_event_open+0x719/0x2c20 [ 124.003165] do_syscall_64+0xbf/0x360 [ 124.003180] entry_SYSCALL_64_after_hwframe+0x77/0x7f 09:38:14 executing program 6: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x25, 0x0, 0x0, @u32}]}]}, 0x2c}], 0x1}, 0x0) 09:38:14 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002002}, 0xc) 09:38:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000005a00)={'syzkaller0\x00'}) 09:38:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x1c, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='R']}, 0x14}], 0x1}, 0x0) 09:38:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:38:14 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x44802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x3ffffe00}]) [ 124.681494] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.577485] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.577590] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.578117] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.578968] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.643402] Bluetooth: hci7: command 0x0c1a tx timeout [ 125.643446] Bluetooth: hci6: command 0x0c1a tx timeout [ 125.643997] Bluetooth: hci5: command 0x0c1a tx timeout 09:38:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000100)="f7527af9b4d9e0fdb070c0160a959265eb49", 0x12) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6628, 0x0) 09:38:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:15 executing program 6: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x25, 0x0, 0x0, @u32}]}]}, 0x2c}], 0x1}, 0x0) 09:38:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:15 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:15 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x44802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x3ffffe00}]) 09:38:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:38:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x0, 0xfffff801}}) 09:38:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x0, 0xfffff801}}) 09:38:15 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 09:38:15 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 09:38:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x0, 0x0, 0xfffff801}}) [ 125.835195] kmemleak: Found object by alias at 0x607f1a63df04 [ 125.835231] CPU: 0 UID: 0 PID: 3974 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 125.835270] Tainted: [W]=WARN [ 125.835278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 125.835293] Call Trace: [ 125.835301] [ 125.835311] dump_stack_lvl+0xca/0x120 [ 125.835368] __lookup_object+0x94/0xb0 [ 125.835404] delete_object_full+0x27/0x70 [ 125.835441] free_percpu+0x30/0x1160 [ 125.835476] ? arch_uprobe_clear_state+0x16/0x140 [ 125.835520] futex_hash_free+0x38/0xc0 [ 125.835550] mmput+0x2d3/0x390 [ 125.835592] do_exit+0x79d/0x2970 [ 125.835624] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.835656] ? __pfx_do_exit+0x10/0x10 [ 125.835698] do_group_exit+0xd3/0x2a0 [ 125.835731] get_signal+0x2315/0x2340 [ 125.835772] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 125.835808] ? __pfx_get_signal+0x10/0x10 [ 125.835845] ? __schedule+0xe91/0x3590 [ 125.835890] arch_do_signal_or_restart+0x80/0x790 [ 125.835929] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.835965] ? __x64_sys_futex+0x1c9/0x4d0 [ 125.835993] ? __x64_sys_futex+0x1d2/0x4d0 [ 125.836027] ? __x64_sys_creat+0xcc/0x120 [ 125.836065] ? __pfx___x64_sys_creat+0x10/0x10 [ 125.836113] exit_to_user_mode_loop+0x8b/0x110 [ 125.836141] do_syscall_64+0x2f7/0x360 [ 125.836169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.836195] RIP: 0033:0x7f8c6c4e7b19 [ 125.836214] Code: Unable to access opcode bytes at 0x7f8c6c4e7aef. [ 125.836225] RSP: 002b:00007f8c69a5d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 125.836250] RAX: 0000000000000003 RBX: 00007f8c6c5faf60 RCX: 00007f8c6c4e7b19 [ 125.836266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 125.836281] RBP: 00007f8c6c541f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.836297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.836311] R13: 00007ffea7c92caf R14: 00007f8c69a5d300 R15: 0000000000022000 [ 125.836347] [ 125.836355] kmemleak: Object (percpu) 0x607f1a63df00 (size 8): [ 125.836370] kmemleak: comm "syz-executor.3", pid 3983, jiffies 4294792543 [ 125.836385] kmemleak: min_count = 1 [ 125.836394] kmemleak: count = 0 [ 125.836402] kmemleak: flags = 0x21 [ 125.836410] kmemleak: checksum = 0 [ 125.836418] kmemleak: backtrace: [ 125.836425] pcpu_alloc_noprof+0x87a/0x1170 [ 125.836460] percpu_ref_init+0x37/0x400 [ 125.836482] ioctx_alloc+0x27f/0x1e10 [ 125.836509] __x64_sys_io_setup+0xc8/0x1f0 [ 125.836537] do_syscall_64+0xbf/0x360 [ 125.836558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.372747] scsi_io_completion_action: 303 callbacks suppressed [ 126.372838] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.374967] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.375557] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.376173] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0e 40 00 00 40 00 [ 126.376785] blk_print_req_error: 303 callbacks suppressed [ 126.376794] critical target error, dev sr0, sector 14592 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.387253] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.388785] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.389961] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.391145] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0e 80 00 00 40 00 [ 126.392368] critical target error, dev sr0, sector 14848 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.404206] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.405799] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.406989] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.408197] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0e c0 00 00 40 00 [ 126.409504] critical target error, dev sr0, sector 15104 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.421033] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.422599] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.424104] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.425568] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0f 00 00 00 40 00 [ 126.426872] critical target error, dev sr0, sector 15360 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.439592] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.441164] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.442483] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.443723] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0f 40 00 00 40 00 [ 126.444961] critical target error, dev sr0, sector 15616 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.461454] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.462848] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.464073] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.465306] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0f 80 00 00 40 00 [ 126.466472] critical target error, dev sr0, sector 15872 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.476952] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.478429] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.479509] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.480645] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 0f c0 00 00 40 00 [ 126.481756] critical target error, dev sr0, sector 16128 op 0x1:(WRITE) flags 0x8800 phys_seg 32 prio class 2 [ 126.496449] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.497837] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.498930] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.500073] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 10 00 00 00 40 00 [ 126.501194] critical target error, dev sr0, sector 16384 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.511466] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.512845] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.513927] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.515055] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 10 40 00 00 40 00 [ 126.516168] critical target error, dev sr0, sector 16640 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.528462] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 126.529834] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 126.530931] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 126.532040] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 10 80 00 00 40 00 [ 126.533156] critical target error, dev sr0, sector 16896 op 0x1:(WRITE) flags 0xc800 phys_seg 32 prio class 2 [ 126.572410] ------------[ cut here ]------------ [ 126.573263] percpu ref (free_ioctx_users) <= 0 (0) after switching to atomic [ 126.573574] WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#0: kmemleak/67 [ 126.576110] Modules linked in: [ 126.576683] CPU: 0 UID: 0 PID: 67 Comm: kmemleak Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 126.580395] Tainted: [W]=WARN [ 126.581510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.584627] RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 [ 126.586925] Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 c0 99 e2 84 e8 25 ac e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 56 de 5f ff e9 9e fe ff ff e8 dc de [ 126.589574] RSP: 0018:ffff88806ce08e20 EFLAGS: 00010286 [ 126.590406] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 [ 126.591470] RDX: ffff88800ecdd280 RSI: ffffffff8139de7e RDI: 0000000000000001 [ 126.592520] RBP: 7fffffffffffffff R08: 0000000000000001 R09: ffffed100d9c4801 [ 126.593582] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801e5f5d00 [ 126.594651] R13: ffff88801e5f5d20 R14: 0000000000000002 R15: 0000000000000003 [ 126.595711] FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 126.596920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.597801] CR2: 00007f0266bae440 CR3: 00000000437b7000 CR4: 0000000000350ef0 [ 126.598868] Call Trace: [ 126.599252] [ 126.599619] ? rcu_core+0x7c3/0x1800 [ 126.600188] rcu_core+0x7c8/0x1800 [ 126.600772] ? __pfx_rcu_core+0x10/0x10 [ 126.601401] ? clockevents_program_event+0x135/0x360 [ 126.602166] ? mark_held_locks+0x49/0x80 [ 126.602810] handle_softirqs+0x1b1/0x770 [ 126.603525] __irq_exit_rcu+0xc4/0x100 [ 126.604203] irq_exit_rcu+0x9/0x20 [ 126.604864] sysvec_apic_timer_interrupt+0x70/0x80 [ 126.605758] [ 126.606172] [ 126.606619] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.607541] RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 [ 126.608539] Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 a5 93 fc 48 89 ef e8 4e f0 93 fc 80 e7 02 74 06 e8 e4 07 be fc fb 65 ff 0d 6c 4c c6 02 <74> 07 5b 5d e9 33 23 00 00 0f 1f 44 00 00 5b 5d e9 27 23 00 00 0f [ 126.611610] RSP: 0018:ffff88800f507df0 EFLAGS: 00000286 [ 126.612557] RAX: 0000000000182533 RBX: 0000000000000246 RCX: 0000000000000040 [ 126.613798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84be33bc [ 126.615044] RBP: ffff88800de936f0 R08: 0000000000000001 R09: 0000000000000001 [ 126.616282] R10: ffffffff8643b457 R11: 0000000000000001 R12: ffff88800ecdd280 [ 126.617521] R13: ffff888045ae1000 R14: 0000000000000246 R15: ffff888045af8000 [ 126.618778] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 126.619702] scan_gray_list+0x213/0x290 [ 126.620449] kmemleak_scan+0x574/0xe00 [ 126.621125] ? __pfx_kmemleak_scan_thread+0x10/0x10 [ 126.622045] kmemleak_scan_thread+0x78/0xc0 [ 126.622830] kthread+0x3c8/0x740 [ 126.623471] ? __pfx_kthread+0x10/0x10 [ 126.624143] ? ret_from_fork+0x23/0x430 [ 126.624888] ? lock_release+0xc8/0x290 [ 126.625614] ? __pfx_kthread+0x10/0x10 [ 126.626296] ret_from_fork+0x34b/0x430 [ 126.627024] ? __pfx_kthread+0x10/0x10 [ 126.627742] ret_from_fork_asm+0x1a/0x30 [ 126.628504] [ 126.628908] irq event stamp: 1582950 [ 126.629579] hardirqs last enabled at (1582960): [] __up_console_sem+0x78/0x80 [ 126.631095] hardirqs last disabled at (1582969): [] __up_console_sem+0x5d/0x80 [ 126.632611] softirqs last enabled at (1582344): [] handle_softirqs+0x50c/0x770 [ 126.634144] softirqs last disabled at (1582389): [] __irq_exit_rcu+0xc4/0x100 [ 126.635654] ---[ end trace 0000000000000000 ]--- [ 126.636487] percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff88801e5f5d00 pointer offset 0 size 64 [ 126.728437] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.624420] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.625434] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.625749] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.626322] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.688624] Bluetooth: hci6: command 0x0c1a tx timeout [ 127.688806] Bluetooth: hci7: command 0x0c1a tx timeout [ 127.689559] Bluetooth: hci5: command 0x0c1a tx timeout [ 128.776419] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.672493] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.673516] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.674399] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.675169] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.736500] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.736544] Bluetooth: hci7: command 0x0c1a tx timeout [ 129.737457] Bluetooth: hci6: command 0x0c1a tx timeout VM DIAGNOSIS: 09:38:16 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88806ce08798 R8 =0000000000000000 R9 =ffffed1001737046 R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0266bae440 CR3=00000000437b7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=3020706f20363938363120726f746365 XMM04=4552502031232031303930353230322d XMM05=20202020202020202020572020202020 XMM06=726f7475636578652d7a7973203a6d6d XMM07=00000000000000000000000000000000 XMM08=65737365727070757320736b63616200 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff81b5f20a RDX=000000000000b5f2 RSI=000000000000b5f2 RDI=ffffffff86cc7db4 RBP=ffff888015dcfa90 RSP=ffff888015dcf9c8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003bea3 R11=0000000000000001 R12=ffff888015dcfa98 R13=ffff888015dcfa80 R14=ffff888015dcfa79 R15=ffff888015dcfa38 RIP=ffffffff81358542 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f026774a900 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0266cb2000 CR3=000000000e40d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000416d000000000000000c XMM02=00000000000000000000000000000000 XMM03=00000000000010000000000000000000 XMM04=0000000068b569290000000000000000 XMM05=0000000068b56929000000003b7eff33 XMM06=0000000068b56929000000003b7eff33 XMM07=0000000000000000000000003b7eff33 XMM08=00373100303a303a303a313a69736373 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000