Warning: Permanently added '[localhost]:59630' (ECDSA) to the list of known hosts. 2022/10/04 02:30:40 fuzzer started 2022/10/04 02:30:40 dialing manager at localhost:35095 syzkaller login: [ 43.784040] cgroup: Unknown subsys name 'net' [ 43.909914] cgroup: Unknown subsys name 'rlimit' 2022/10/04 02:30:55 syscalls: 212 2022/10/04 02:30:55 code coverage: enabled 2022/10/04 02:30:55 comparison tracing: enabled 2022/10/04 02:30:55 extra coverage: enabled 2022/10/04 02:30:55 setuid sandbox: enabled 2022/10/04 02:30:55 namespace sandbox: enabled 2022/10/04 02:30:55 Android sandbox: enabled 2022/10/04 02:30:55 fault injection: enabled 2022/10/04 02:30:55 leak checking: enabled 2022/10/04 02:30:55 net packet injection: enabled 2022/10/04 02:30:55 net device setup: enabled 2022/10/04 02:30:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 02:30:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 02:30:55 USB emulation: enabled 2022/10/04 02:30:55 hci packet injection: enabled 2022/10/04 02:30:55 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 02:30:55 802.15.4 emulation: enabled 2022/10/04 02:30:55 fetching corpus: 0, signal 0/0 (executing program) 2022/10/04 02:30:57 starting 8 fuzzer processes 02:30:57 executing program 0: sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x4004045) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000140)={0x1, 0x100, 0x1}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) socketpair(0x8, 0xa, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r2, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/171) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3fb, 0x2, 0x70bd2c, 0x8ce, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008005}, 0x4091) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000480)={0x1, 0x1, 0x101, 0x1, 0x5d2, 0x3}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x42000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) socketpair(0x21, 0x3, 0x893f, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xed89, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/133, 0x85}, {&(0x7f00000007c0)=""/18, 0x12}, {&(0x7f0000000800)=""/46, 0x2e}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/201, 0xc9}], 0x5}, 0x2ab8}], 0x1, 0x140, &(0x7f0000000b00)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5d3beb8cdddf927}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x4000) syz_io_uring_setup(0x2f14, &(0x7f0000000c80)={0x0, 0xe9e9, 0x2, 0x2, 0x159, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffc, &(0x7f0000000d00)) syz_io_uring_setup(0x756f, &(0x7f0000000d40)={0x0, 0xbb9b, 0x1, 0x1, 0x3b0, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) 02:30:57 executing program 1: ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="5ea055602fbd4c9a045a98110ac04869f782c85bf6c80d1b3730b1925db77a8a8b1b073a49328011d980f6fbf7e81b46340c1dea14236c0ff74486c74c250fbc82d211d79ba320fb2e678511bb300920be1eca98dde0b82bd3e70cf53575b53ece876606ed803a00c0bc1b22de009b7b5681352f425008") r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f00000000c0)="13ee5a808dd0599d4106eb180605b9fd995387185d3af540ea7ceb9257097ea4fa8272ddc7c986a20e49e40f5b40f5f11bd5f664347f67ca363d5968ae614d6fe2202ca7a469f6be27dd139515b52028b77d029687587f3dd93ec924ef226d769690f7d9ac8befa37f6e6b9784cb517bb9caf35f470018a3f4920e0159b1bd5a58eb34af6788c49cb013aee47418498c79771d565a9f14f6afb88b03b2917ff7c91ab11f4cb9cf35a5c29da6e37ebf9438af54823ee64c6da403172018f05c638833f10a27800125cd6d10e1e24a48454ccaccfe8ecb8d44ada88fb89986ea22") ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f00000001c0)) syz_io_uring_setup(0x284d, &(0x7f0000000200)={0x0, 0x406c, 0x2, 0x2, 0x1cc, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x1ff, 0xc0b00) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000340)=""/59) syz_open_dev$hidraw(&(0x7f0000000380), 0x80000000, 0x78000) r2 = syz_open_dev$hidraw(&(0x7f00000003c0), 0x0, 0x1) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x81, 0x200, 0x3, 0x2}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x840) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000580)={0x1, 0x3, 0x3, 0x7fff, 0x8, 0x8, 0x92a, 0x0, 0x7fff, 0x3f, 0x3, 0x7fff, 0xff, 0x1f}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000600)="49fc942d3e0d250432dac0f86ee188403b67ce3c76fc4c88cadc6a73e2121e62c7d4def283692ab6d1d494d34cf1006509775f2ac47e6752f1e6b668c4f65ebe7f6979d1404338c819f9163a0d672f5f065f9eaf6dd6207a2152c097e55adee2592e9709156786a9e6de037fd0dde7740d3937457d6b574599637a05e7d8297f39baea8dae8af5947fdfc86c109a6ecec3412f2e8de009614b") ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000006c0)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x403, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 02:30:57 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x2, 0xffffffff, 0x54, 0x8000, 0x7, 0xffffffff}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) eventfd2(0xfff, 0x80800) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x12381, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0x200000) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x3, 0xfccdfb93f67b0994, 0x3f8, 0x7fffffff, 0x9, 0x7fffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000001c0)={0x2, 0x1, 0x5, 0x20, 0x1, 0x7fffffff}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x0, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x5800043594ffc32b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3, 0x4, 0x3}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x438, 0x3f4, 0x100, 0x70bd2a, 0x25dfdbff, {0x4, 0x3, 0x15, [0x10000, 0x1, 0x4, 0xe9e8, 0x8, 0x5, 0x9, 0xfff, 0x0, 0xfffff001, 0x2, 0x6, 0x10001, 0x2, 0x401, 0x6, 0x40, 0x2, 0x7fff, 0x3, 0x3f, 0x4, 0x1, 0x6dc, 0xff, 0x9, 0x6, 0x3f, 0x2f8, 0x2, 0x7, 0x3ff, 0x7fff, 0x401, 0x5, 0x2, 0x3, 0x4, 0x20, 0x2, 0x1, 0x7, 0x800, 0xe8e, 0xea2, 0xfffffff7, 0xff, 0x3f, 0x2, 0x7, 0x81, 0x100, 0x6, 0x800, 0x800, 0xfffffff8, 0x5, 0x50, 0xf5f, 0x1, 0x9, 0x6000000, 0x1, 0x4], [0x4, 0x57, 0x40, 0x401, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x6, 0xc15, 0x2, 0x4f, 0x3, 0x4, 0x0, 0x0, 0x50, 0x1, 0x400, 0xe8d9, 0x401, 0x3, 0x2, 0xff, 0x8, 0x5, 0x8001, 0x1, 0x6e, 0xfff, 0x7, 0x9, 0x800, 0x81, 0xfb7, 0x5, 0x0, 0x9, 0x7, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x20, 0x8, 0xfff, 0x401, 0x1de2, 0xffff, 0x6, 0xff, 0x5, 0xa78, 0x7fffffff, 0x89, 0x3a7, 0x7, 0x8, 0x1, 0x3ff, 0x400, 0x23], [0x9, 0x401, 0xfff, 0x10000, 0x4, 0x1, 0xfa, 0x100, 0x0, 0x8, 0x2, 0x3f, 0x3, 0x8000, 0x8, 0x7, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0x3f, 0x9, 0x4, 0x401, 0xff, 0x8000, 0x1, 0x0, 0x7, 0x9, 0x80000000, 0x9449, 0x217, 0x7, 0xfff, 0x5, 0x9, 0x20, 0x7, 0x4, 0x891, 0x776c, 0x2, 0x7fffffff, 0x0, 0x1ff, 0x8, 0x7, 0x3, 0x7f, 0x5, 0x9, 0x8000, 0xd5a5, 0x72f, 0x4, 0x60000000, 0x4, 0x4, 0xeb7, 0xc1, 0x6, 0x5], [0x2, 0xffe6, 0xc42a, 0x81, 0x0, 0xff, 0x1, 0x6, 0x6, 0x1f, 0x400, 0xfc0000, 0x7, 0x7fffffff, 0x50f, 0x4, 0x6, 0x7ff, 0x0, 0x7ff, 0x13473fda, 0x2, 0x261, 0x101, 0x1, 0x3, 0x43de4627, 0x7, 0x100, 0x9, 0x0, 0x401, 0x7106, 0x0, 0x8000, 0x6, 0x1, 0x6, 0x800, 0x9, 0x6, 0x34d, 0x4, 0x6, 0x3f, 0xbd, 0xd7ab, 0x0, 0x7, 0x6, 0x7006, 0xffffffff, 0x0, 0x1, 0x1a6, 0x3, 0x590ae0ab, 0x20, 0x2, 0x4, 0x800, 0x75, 0xfff, 0x3], 0x16, ['!\x00', '/dev/usb/hiddev#\x00', '(\'\x00']}, ["", "", "", ""]}, 0x438}}, 0x40010) r4 = accept4(r2, &(0x7f00000044c0)=@alg, &(0x7f0000004540)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000045c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000004680)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x1c, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd5}, 0x40000) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000046c0)=""/148, &(0x7f0000004780)=0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000004880)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x2c, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 02:30:57 executing program 4: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x464, 0x400, 0x70bd25, 0x25dfdbfc, "99c7de5d33f4f5dcebcdf04320d282eef9fc96e2d31419f7eb07f99503e257edf03b5dbeb6f68690fe550d4927175d0c4c6cb5f910f7a90e06dab5d8af7ddb402b944fdcfc842fb3d49535c302b519c752a87664a26117e4afd20b210162d4c3d1683398e9fbf798cde18387d3929a254fc8d67e0d78e22aedc3be13e0660dd6e3ffe382657aff6e2872fc47e3040b664620719ef579d298", [""]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000200)=0x80) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4050}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000640)) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x24000000) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000001ac0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001600)={0x44c, 0x3f3, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x1, 0x13, [0x10000, 0x1, 0x7fff, 0xfffffa64, 0x9, 0x1, 0x7ff, 0xffffffff, 0x81, 0x70e0957d, 0x7ff, 0xffffffff, 0xe3, 0x3ff800, 0x5, 0x0, 0x8001, 0x1, 0x2, 0xb54, 0x0, 0x6, 0x0, 0x6, 0x7, 0x3, 0x1000, 0xa5, 0x40, 0x4, 0xef, 0x2, 0xd6f2, 0xfffffff7, 0x0, 0xbf, 0x80, 0x80000000, 0x3, 0x7de, 0xfffffff7, 0x200, 0xfffff34e, 0xf8, 0x3, 0x9, 0x7, 0xfffffff9, 0xfff, 0x3ff, 0x7, 0x9, 0x3, 0x2, 0x3, 0x0, 0x5, 0x9, 0x9, 0x20, 0x440, 0x6, 0xfffff001, 0x788], [0x7, 0x4bdd, 0x4, 0x9, 0x1b3e7ee6, 0x0, 0x9, 0x0, 0x2, 0x9, 0x5, 0x401, 0x8, 0x6, 0x1b05, 0x4, 0x1, 0x3ff, 0x42, 0x4, 0x5df, 0x986a, 0x0, 0x8, 0x5, 0x6, 0x1f, 0x5, 0x9, 0x79d, 0x10c, 0x400, 0x0, 0x3e, 0x8, 0x1, 0x1, 0xea, 0x7f, 0x6, 0xffff, 0x4, 0x7, 0xffffffff, 0x6, 0xff, 0x0, 0xffff91b5, 0x3, 0x213, 0x0, 0xe2, 0xffff, 0x40, 0x1, 0x0, 0x6, 0x5, 0x7f, 0x4, 0x1ff, 0x3, 0xfff, 0x1], [0x4, 0x3, 0x10000, 0x3ff, 0x4, 0xaea, 0xfecd, 0x1, 0xfffffffb, 0xfffffffd, 0x3, 0x233, 0x5, 0x3, 0x0, 0xf2e, 0x8, 0x80000000, 0x5, 0x1000, 0x1ff, 0x7, 0x7ff, 0x4, 0x5, 0x8, 0xffff7fff, 0x3ff, 0xc86, 0xfffffff8, 0x9, 0x442, 0x693, 0x0, 0x10001, 0x40, 0x0, 0x8, 0x193, 0x8000, 0x3, 0x0, 0x7, 0x200, 0x9, 0x5, 0x8656, 0xfffffffc, 0x5, 0x1, 0x0, 0x400, 0x4, 0x5, 0xd4, 0x1c4, 0x3, 0xffff, 0x4, 0x3, 0x0, 0x5, 0x1000, 0x7f], [0xfffffffb, 0x20, 0x8, 0x81, 0x1eb88973, 0xafe, 0x1, 0x46d, 0x69, 0x8, 0x3, 0x7, 0x3, 0x401, 0xfffffffe, 0x100, 0x7, 0x40000, 0x5, 0x3, 0xff, 0x4, 0x70bd, 0x101, 0x3, 0x20, 0xa46, 0x401, 0x80000000, 0x81, 0x4, 0x46c6, 0x2, 0x9, 0x35, 0x0, 0x8, 0x1, 0xffffffc0, 0x7, 0x9, 0x7f, 0x8, 0x1, 0x4, 0xff, 0x9c, 0x8f09, 0x5, 0xd707, 0x200, 0x5, 0x20, 0x5, 0x5, 0xff, 0x1, 0x4, 0x9, 0x0, 0x681, 0x8, 0x1, 0x4], 0x29, ['wpan0\x00', ':\\$\x00', 'TIPC\x00', 'wpan3\x00', 'wpan3\x00', '])+$\x00', 'wpan0\x00', '+}\x00']}, ["", "", "", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040080) syz_open_dev$hiddev(&(0x7f0000001c00), 0x6, 0x288000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x90, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004840}, 0x24000000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x40, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x5555555555550181}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x88ddc298481f5e33}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40008c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x400c804) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x48000) 02:30:57 executing program 5: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x2, 0x200, 0x7f, 0x2, 0x7, 0x1ff}) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x8629, 0x80080) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000080)=0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000100)) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x470, 0x3f3, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x29, [0x8, 0xffff0000, 0x7, 0xc6, 0x9, 0x80000001, 0x0, 0x2, 0x8, 0x3, 0x4, 0x75, 0x1aa1, 0x0, 0x3, 0xfffff001, 0x101, 0x902, 0x20, 0x4, 0x8, 0x9, 0x8, 0xa6f7, 0x5, 0xd6f8, 0xe3, 0x1, 0x7, 0x7, 0x8, 0x3f, 0x3ff, 0xffffffa2, 0x9, 0xff, 0x3, 0x8, 0x6, 0x8001, 0xb6, 0x8, 0x1ff, 0x0, 0x1, 0x7, 0xfffffffb, 0x5, 0x1000, 0x9, 0x4, 0xffffffff, 0x0, 0x4, 0x53, 0x3, 0x1bc9, 0x7fffffff, 0xffffff00, 0xbceb, 0x800, 0x1, 0x0, 0x8], [0x4, 0x10000, 0x100, 0x9, 0x7ff, 0x1, 0x4, 0x7, 0x8001, 0x5, 0x7, 0x25, 0x100, 0x8, 0x2076, 0x3f, 0x0, 0xfffffff8, 0x1, 0x800, 0x3ff, 0x7442, 0x1, 0xfffff801, 0x3, 0xcb9, 0x2, 0x401, 0x0, 0xfffffffa, 0x6, 0x8, 0x8001, 0x4, 0x5, 0x4, 0x80000001, 0xda21664, 0xed5b, 0x0, 0x4, 0xa83, 0x6, 0x2, 0x6, 0xcd65dd7, 0x0, 0x1ff, 0x7fffffff, 0x6, 0x8, 0x5, 0x5, 0x80, 0xb6, 0x6, 0xff, 0x80000001, 0x0, 0x3ff, 0x272, 0x6, 0x1], [0x4, 0x3, 0x1, 0x6, 0x8, 0x1000, 0x2, 0x4363, 0x2, 0xa3, 0x0, 0x200, 0x9, 0x7, 0xffff0ffb, 0x1b, 0x40, 0x1, 0x3, 0x7, 0x0, 0x3, 0x7, 0x101, 0x80, 0x148, 0xffffffff, 0x0, 0x38, 0x5, 0xfffffff7, 0xa3, 0x4, 0x8, 0x101, 0x2, 0xfffffff8, 0x2, 0x0, 0x6, 0xffffffff, 0x8, 0x7, 0x1, 0x0, 0x9, 0x8000, 0xfffc0000, 0xfee, 0x9, 0x6d, 0x0, 0x7fff, 0x1000, 0x6, 0x8, 0x4, 0x0, 0xf511, 0xc1d, 0xb9c, 0x0, 0x3, 0x3], [0x8, 0x7f, 0x5, 0x6, 0x3, 0xfff, 0x0, 0x7fffffff, 0x2, 0x9, 0x85e, 0x1, 0x20, 0x0, 0x8, 0x8, 0xe4e, 0x1, 0x0, 0x7, 0xed, 0x8, 0x5, 0xff, 0x3ff, 0x3, 0x689, 0x4, 0x518, 0x3, 0x1, 0x6, 0x878d, 0x40, 0x8000, 0x8, 0x3ff, 0x51a3, 0x1, 0x8, 0x9, 0x101, 0x2, 0x5, 0x45, 0x800, 0xd0a3, 0x101, 0x0, 0x600, 0x2, 0x7e, 0x4, 0x7ff, 0x1f, 0x1, 0x7fff, 0x5, 0x0, 0x1, 0x2, 0x7fff, 0x158, 0x1000], 0x4d, [')/\x00', '/dev/usb/hiddev#\x00', '/dev/usb/hiddev#\x00', '/dev/hpet\x00', '/dev/hpet\x00', '/dev/hpet\x00', '/dev/hpet\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x470}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r1, 0x8000000) r2 = syz_open_dev$hiddev(&(0x7f0000000680), 0x2, 0x500) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f00000006c0)={0x2, 0x1, 0x2, 0xffff6415, 0x9, 0x5}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x100400, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000740)={0x3, 0x0, 0x3, 0x8032, 0x8, 0xfffff800, 0x7, 0x5, 0xa5d, 0x401, 0x8, 0xff, 0x5, 0x9}) socketpair(0x9, 0x80004, 0x3f, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c084) recvmmsg(r5, &(0x7f0000003fc0)=[{{&(0x7f00000008c0)=@phonet, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/72, 0x48}, {&(0x7f00000009c0)=""/90, 0x5a}, {&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/236, 0xec}, {&(0x7f0000000bc0)=""/33, 0x21}, {&(0x7f0000000c00)=""/141, 0x8d}, {&(0x7f0000000cc0)}], 0x7, &(0x7f0000000d80)=""/119, 0x77}, 0xfffffffc}, {{&(0x7f0000000e00)=@tipc=@id, 0x80, &(0x7f0000001140)=[{&(0x7f0000000e80)=""/83, 0x53}, {&(0x7f0000000f00)=""/91, 0x5b}, {&(0x7f0000000f80)=""/215, 0xd7}, {&(0x7f0000001080)=""/179, 0xb3}], 0x4, &(0x7f0000001180)=""/67, 0x43}, 0x6}, {{&(0x7f0000001200)=@xdp, 0x80, &(0x7f0000001280)}, 0x8}, {{&(0x7f00000012c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/42, 0x2a}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/191, 0xbf}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4, 0x4}, {&(0x7f0000002540)=""/31, 0x1f}, {&(0x7f0000002580)=""/107, 0x6b}], 0x8}, 0x5}, {{&(0x7f0000002680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002700)=""/220, 0xdc}, {&(0x7f0000002800)=""/140, 0x8c}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/249, 0xf9}, {&(0x7f0000002ac0)=""/139, 0x8b}, {&(0x7f0000002b80)=""/172, 0xac}], 0x6}, 0x7d}, {{&(0x7f0000002cc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/130, 0x82}], 0x3, &(0x7f0000003f00)=""/143, 0x8f}, 0x8}], 0x6, 0x0, &(0x7f0000004140)={0x77359400}) sendmsg$AUDIT_USER(r1, &(0x7f0000004340)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004300)={&(0x7f00000041c0)={0x110, 0x3ed, 0x100, 0x70bd29, 0x25dfdbfb, "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", ["", "", "", ""]}, 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x4008081) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044048}, 0x20044000) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000004480), 0x10000, 0x0) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f00000044c0)={0x2, 0x2, 0x7}) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000004500)=""/193) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 02:30:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000004}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c040}, 0x4000054) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x44801) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x58}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000054}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x8001) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4881) [ 59.918306] audit: type=1400 audit(1664850657.108:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:30:57 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000100)={0xfffffffffffffffa, 0x1}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe24efa50f709dd02}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008880) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x76ec41264b67b816, r2, 0x8000000) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$CDROMSTOP(r3, 0x5307) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f00000002c0)={0x20, 0x9, 0x9, 0x2, 0x1f, 0xff}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d40), 0x2800, 0x0) ioctl$DVD_WRITE_STRUCT(r4, 0x5390, &(0x7f0000000d80)=@copyright={0x1, 0x1, 0x5c, 0xef}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000015c0)={0x0, 0x2, r3, 0xe57, 0x80000}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001680), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r6, 0x504, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000004) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, 0x3f7, 0x100, 0x70bd26, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}}, 0x810) read$hidraw(r1, &(0x7f0000001880)=""/10, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001900)={0x3, &(0x7f00000018c0)=[{0x9, 0x6, 0x20, 0x9}, {0x20, 0x6c, 0x59, 0x6}, {0x26, 0x9, 0xb4, 0x6}]}) 02:30:57 executing program 7: socketpair(0x8, 0x3, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x18, 0x80000001, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4004094}, 0x8000) socketpair(0x3, 0xa, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x48010) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4041) r3 = socket(0x1a, 0x4, 0x7dbb) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x40001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20010000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x7114e9a05da4f491}, 0x4004000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r4) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40890) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r2) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r6, 0x2, 0x80000001, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000000) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000940)) sendmsg$AUDIT_SET(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x3e9, 0x4, 0x70bd2c, 0x25dfdbfd, {0x20, 0x0, 0x2, 0xffffffffffffffff, 0x2, 0x200, 0x1, 0x1f}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r2) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r8, 0x4, 0x70bd25, 0x7fffffff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8040) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f5, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) [ 61.182713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.184771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.185837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.188415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.193426] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.195787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.207145] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.299391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.300427] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.302745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.306753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.309135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.311859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.314562] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.319709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.322506] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.324717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.329844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.332533] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.333515] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.336156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.338080] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.339110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.339939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.342676] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.343914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.345908] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.350336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.352492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.353434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.354389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.355478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.357912] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.361571] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.366571] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.368268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.370410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.372882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.372903] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.377511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.377956] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.381619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.382473] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.382636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.385635] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.386911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.388607] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.401635] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.409530] Bluetooth: hci6: HCI_REQ-0x0c1a [ 63.245627] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 63.245648] Bluetooth: hci0: command 0x0409 tx timeout [ 63.437438] Bluetooth: hci3: command 0x0409 tx timeout [ 63.437476] Bluetooth: hci2: command 0x0409 tx timeout [ 63.438388] Bluetooth: hci7: command 0x0409 tx timeout [ 63.439059] Bluetooth: hci5: command 0x0409 tx timeout [ 63.439588] Bluetooth: hci6: command 0x0409 tx timeout [ 63.440341] Bluetooth: hci4: command 0x0409 tx timeout [ 65.293247] Bluetooth: hci0: command 0x041b tx timeout [ 65.485924] Bluetooth: hci4: command 0x041b tx timeout [ 65.486569] Bluetooth: hci6: command 0x041b tx timeout [ 65.487071] Bluetooth: hci5: command 0x041b tx timeout [ 65.487760] Bluetooth: hci7: command 0x041b tx timeout [ 65.488323] Bluetooth: hci2: command 0x041b tx timeout [ 65.488807] Bluetooth: hci3: command 0x041b tx timeout [ 66.215778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.218434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.226053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.237963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.248548] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.251039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.279383] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.341338] Bluetooth: hci0: command 0x040f tx timeout [ 67.533386] Bluetooth: hci3: command 0x040f tx timeout [ 67.535153] Bluetooth: hci2: command 0x040f tx timeout [ 67.536704] Bluetooth: hci7: command 0x040f tx timeout [ 67.538138] Bluetooth: hci5: command 0x040f tx timeout [ 67.539800] Bluetooth: hci6: command 0x040f tx timeout [ 67.541577] Bluetooth: hci4: command 0x040f tx timeout [ 68.365374] Bluetooth: hci1: command 0x0409 tx timeout [ 69.389381] Bluetooth: hci0: command 0x0419 tx timeout [ 69.581291] Bluetooth: hci6: command 0x0419 tx timeout [ 69.581367] Bluetooth: hci5: command 0x0419 tx timeout [ 69.581879] Bluetooth: hci4: command 0x0419 tx timeout [ 69.582428] Bluetooth: hci7: command 0x0419 tx timeout [ 69.582916] Bluetooth: hci2: command 0x0419 tx timeout [ 69.583441] Bluetooth: hci3: command 0x0419 tx timeout [ 70.413262] Bluetooth: hci1: command 0x041b tx timeout [ 72.462837] Bluetooth: hci1: command 0x040f tx timeout [ 74.509309] Bluetooth: hci1: command 0x0419 tx timeout [ 123.103797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.105582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.107874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.111533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.114911] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.116786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.128368] Bluetooth: hci2: HCI_REQ-0x0c1a [ 123.155826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.157603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.167009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.171407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.176446] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.178970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.184504] Bluetooth: hci3: HCI_REQ-0x0c1a [ 123.301950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.305256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.306089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.309656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.310661] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.312572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.317352] Bluetooth: hci4: HCI_REQ-0x0c1a [ 123.382908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.384109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.392501] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.394691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.403124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.404027] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.422465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.423349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.427490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 123.428431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.439286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.444098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.452441] Bluetooth: hci6: HCI_REQ-0x0c1a [ 123.453058] Bluetooth: hci7: HCI_REQ-0x0c1a [ 125.005256] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 125.197295] Bluetooth: hci3: command 0x0409 tx timeout [ 125.197360] Bluetooth: hci2: command 0x0409 tx timeout [ 125.325328] Bluetooth: hci4: command 0x0409 tx timeout [ 125.389293] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 125.517341] Bluetooth: hci6: command 0x0409 tx timeout [ 125.518134] Bluetooth: hci7: command 0x0409 tx timeout [ 127.245304] Bluetooth: hci2: command 0x041b tx timeout [ 127.245876] Bluetooth: hci3: command 0x041b tx timeout [ 127.373383] Bluetooth: hci4: command 0x041b tx timeout [ 127.565340] Bluetooth: hci7: command 0x041b tx timeout [ 127.565938] Bluetooth: hci6: command 0x041b tx timeout [ 128.158345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.173285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.180660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.206153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.222641] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.226917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.239938] Bluetooth: hci5: HCI_REQ-0x0c1a [ 129.293353] Bluetooth: hci3: command 0x040f tx timeout [ 129.293377] Bluetooth: hci2: command 0x040f tx timeout [ 129.421269] Bluetooth: hci4: command 0x040f tx timeout [ 129.613292] Bluetooth: hci6: command 0x040f tx timeout [ 129.613928] Bluetooth: hci7: command 0x040f tx timeout [ 129.805402] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 130.125373] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 130.253415] Bluetooth: hci5: command 0x0409 tx timeout [ 131.341251] Bluetooth: hci3: command 0x0419 tx timeout [ 131.342943] Bluetooth: hci2: command 0x0419 tx timeout [ 131.469332] Bluetooth: hci4: command 0x0419 tx timeout [ 131.662357] Bluetooth: hci7: command 0x0419 tx timeout [ 131.663938] Bluetooth: hci6: command 0x0419 tx timeout [ 132.301286] Bluetooth: hci5: command 0x041b tx timeout [ 132.483140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.492689] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.502990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.520878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.525133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.527760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.543516] Bluetooth: hci0: HCI_REQ-0x0c1a [ 132.787755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.817510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.837257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.856611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.874785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.876153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.916335] Bluetooth: hci1: HCI_REQ-0x0c1a [ 134.349258] Bluetooth: hci5: command 0x040f tx timeout [ 134.605353] Bluetooth: hci0: command 0x0409 tx timeout [ 134.989384] Bluetooth: hci1: command 0x0409 tx timeout [ 136.397422] Bluetooth: hci5: command 0x0419 tx timeout [ 136.653269] Bluetooth: hci0: command 0x041b tx timeout [ 137.037258] Bluetooth: hci1: command 0x041b tx timeout [ 138.701283] Bluetooth: hci0: command 0x040f tx timeout [ 139.085429] Bluetooth: hci1: command 0x040f tx timeout [ 140.749336] Bluetooth: hci0: command 0x0419 tx timeout [ 141.133275] Bluetooth: hci1: command 0x0419 tx timeout [ 185.189897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.216024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.222987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.254475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.262318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.264621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.277327] Bluetooth: hci2: HCI_REQ-0x0c1a [ 185.333268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.345780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.349031] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.355601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.364585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.368599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.387260] Bluetooth: hci3: HCI_REQ-0x0c1a [ 185.783079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.790973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.794088] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.803800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.817849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 185.823067] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.840298] Bluetooth: hci7: HCI_REQ-0x0c1a [ 186.701239] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 186.702048] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.702582] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.703719] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 186.704643] Call Trace: [ 186.704940] [ 186.705247] __schedule+0x893/0x2470 [ 186.705646] ? io_schedule_timeout+0x150/0x150 [ 186.706090] ? do_raw_spin_lock+0x121/0x260 [ 186.706553] ? rwlock_bug.part.0+0x90/0x90 [ 186.706995] schedule+0xda/0x1b0 [ 186.707370] rescuer_thread+0x851/0xdb0 [ 186.707948] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.708497] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.709593] ? lockdep_hardirqs_on+0x79/0x100 [ 186.710795] ? worker_thread+0x1260/0x1260 [ 186.711320] kthread+0x2ed/0x3a0 [ 186.711700] ? kthread_complete_and_exit+0x40/0x40 [ 186.712256] ret_from_fork+0x22/0x30 [ 186.712682] [ 186.712929] INFO: task rcu_par_gp:4 blocked for more than 142 seconds. [ 186.713696] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.714339] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.715105] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 186.715945] Call Trace: [ 186.716294] [ 186.716557] __schedule+0x893/0x2470 [ 186.716980] ? io_schedule_timeout+0x150/0x150 [ 186.717502] ? do_raw_spin_lock+0x121/0x260 [ 186.717953] ? rwlock_bug.part.0+0x90/0x90 [ 186.718415] schedule+0xda/0x1b0 [ 186.718763] rescuer_thread+0x851/0xdb0 [ 186.719166] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.719690] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.720215] ? lockdep_hardirqs_on+0x79/0x100 [ 186.720669] ? worker_thread+0x1260/0x1260 [ 186.721105] kthread+0x2ed/0x3a0 [ 186.721528] ? kthread_complete_and_exit+0x40/0x40 [ 186.722009] ret_from_fork+0x22/0x30 [ 186.722430] [ 186.722676] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 186.723366] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.723872] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.724633] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 186.725473] Call Trace: [ 186.725750] [ 186.725983] __schedule+0x893/0x2470 [ 186.726400] ? io_schedule_timeout+0x150/0x150 [ 186.726858] ? do_raw_spin_lock+0x121/0x260 [ 186.727328] ? rwlock_bug.part.0+0x90/0x90 [ 186.727765] schedule+0xda/0x1b0 [ 186.728124] rescuer_thread+0x851/0xdb0 [ 186.728574] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.729087] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.729633] ? lockdep_hardirqs_on+0x79/0x100 [ 186.730077] ? worker_thread+0x1260/0x1260 [ 186.730535] kthread+0x2ed/0x3a0 [ 186.730883] ? kthread_complete_and_exit+0x40/0x40 [ 186.731417] ret_from_fork+0x22/0x30 [ 186.731810] [ 186.732055] INFO: task netns:6 blocked for more than 143 seconds. [ 186.732678] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.733213] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.733963] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 186.734790] Call Trace: [ 186.735050] [ 186.735322] __schedule+0x893/0x2470 [ 186.735722] ? io_schedule_timeout+0x150/0x150 [ 186.736217] ? do_raw_spin_lock+0x121/0x260 [ 186.736647] ? rwlock_bug.part.0+0x90/0x90 [ 186.737080] schedule+0xda/0x1b0 [ 186.737474] rescuer_thread+0x851/0xdb0 [ 186.737908] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.738435] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.738939] ? lockdep_hardirqs_on+0x79/0x100 [ 186.739432] ? worker_thread+0x1260/0x1260 [ 186.739872] kthread+0x2ed/0x3a0 [ 186.740258] ? kthread_complete_and_exit+0x40/0x40 [ 186.740746] ret_from_fork+0x22/0x30 [ 186.741148] [ 186.741428] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 186.742104] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.742639] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.743425] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 186.744252] Workqueue: 0x0 (kblockd) [ 186.744652] Call Trace: [ 186.744916] [ 186.745156] __schedule+0x893/0x2470 [ 186.745618] ? io_schedule_timeout+0x150/0x150 [ 186.746094] schedule+0xda/0x1b0 [ 186.746479] worker_thread+0x15f/0x1260 [ 186.746897] ? process_one_work+0x16a0/0x16a0 [ 186.747378] kthread+0x2ed/0x3a0 [ 186.747731] ? kthread_complete_and_exit+0x40/0x40 [ 186.748261] ret_from_fork+0x22/0x30 [ 186.748665] [ 186.748907] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 186.749600] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.750114] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.750855] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 186.751682] Call Trace: [ 186.751939] [ 186.752205] __schedule+0x893/0x2470 [ 186.752592] ? io_schedule_timeout+0x150/0x150 [ 186.753043] ? do_raw_spin_lock+0x121/0x260 [ 186.753520] ? rwlock_bug.part.0+0x90/0x90 [ 186.753963] schedule+0xda/0x1b0 [ 186.754345] rescuer_thread+0x851/0xdb0 [ 186.754758] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.755295] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.755793] ? lockdep_hardirqs_on+0x79/0x100 [ 186.756296] ? worker_thread+0x1260/0x1260 [ 186.756725] kthread+0x2ed/0x3a0 [ 186.757073] ? kthread_complete_and_exit+0x40/0x40 [ 186.757608] ret_from_fork+0x22/0x30 [ 186.757997] [ 186.758269] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 186.758927] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.759457] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.760203] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 186.760985] Call Trace: [ 186.761314] [ 186.761578] __schedule+0x893/0x2470 [ 186.761965] ? io_schedule_timeout+0x150/0x150 [ 186.762462] ? mark_held_locks+0x9e/0xe0 [ 186.762877] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.763454] schedule+0xda/0x1b0 [ 186.763804] rcu_tasks_one_gp+0x3db/0xc10 [ 186.764288] rcu_tasks_kthread+0x80/0xa0 [ 186.764698] ? rcu_tasks_postscan+0x10/0x10 [ 186.765134] kthread+0x2ed/0x3a0 [ 186.765534] ? kthread_complete_and_exit+0x40/0x40 [ 186.766017] ret_from_fork+0x22/0x30 [ 186.766496] [ 186.766745] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 186.767416] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.767925] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.768720] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 186.769566] Workqueue: 0x0 (events_highpri) [ 186.770023] Call Trace: [ 186.770321] [ 186.770563] __schedule+0x893/0x2470 [ 186.770954] ? io_schedule_timeout+0x150/0x150 [ 186.771466] schedule+0xda/0x1b0 [ 186.771827] worker_thread+0x15f/0x1260 [ 186.772299] ? process_one_work+0x16a0/0x16a0 [ 186.772753] kthread+0x2ed/0x3a0 [ 186.773103] ? kthread_complete_and_exit+0x40/0x40 [ 186.773644] ret_from_fork+0x22/0x30 [ 186.774044] [ 186.774321] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 186.774897] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.775389] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.776023] task:inet_frag_wq state:I stack:30296 pid:23 ppid:2 flags:0x00004000 [ 186.776778] Call Trace: [ 186.777000] [ 186.777238] __schedule+0x893/0x2470 [ 186.777670] ? io_schedule_timeout+0x150/0x150 [ 186.778115] ? do_raw_spin_lock+0x121/0x260 [ 186.778578] ? rwlock_bug.part.0+0x90/0x90 [ 186.779012] schedule+0xda/0x1b0 [ 186.779402] rescuer_thread+0x851/0xdb0 [ 186.779796] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.780322] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.780821] ? lockdep_hardirqs_on+0x79/0x100 [ 186.781423] ? worker_thread+0x1260/0x1260 [ 186.781901] kthread+0x2ed/0x3a0 [ 186.782290] ? kthread_complete_and_exit+0x40/0x40 [ 186.782777] ret_from_fork+0x22/0x30 [ 186.783217] [ 186.783473] INFO: task writeback:28 blocked for more than 143 seconds. [ 186.784158] Not tainted 6.0.0-rc7-next-20220930 #1 [ 186.784828] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.785742] task:writeback state:I stack:30176 pid:28 ppid:2 flags:0x00004000 [ 186.786655] Call Trace: [ 186.786974] [ 186.787294] __schedule+0x893/0x2470 [ 186.787762] ? io_schedule_timeout+0x150/0x150 [ 186.788358] ? do_raw_spin_lock+0x121/0x260 [ 186.788879] ? rwlock_bug.part.0+0x90/0x90 [ 186.789368] schedule+0xda/0x1b0 [ 186.789742] rescuer_thread+0x851/0xdb0 [ 186.790140] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.790688] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 186.791294] ? lockdep_hardirqs_on+0x79/0x100 [ 186.791741] ? worker_thread+0x1260/0x1260 [ 186.792286] kthread+0x2ed/0x3a0 [ 186.792693] ? kthread_complete_and_exit+0x40/0x40 [ 186.793296] ret_from_fork+0x22/0x30 [ 186.793756] [ 186.794082] [ 186.794082] Showing all locks held in the system: [ 186.794800] 2 locks held by kworker/u4:0/9: [ 186.795336] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 186.796580] #1: ffff88800861fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 186.797797] 1 lock held by rcu_tasks_kthre/11: [ 186.798242] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 186.799133] 1 lock held by khungtaskd/25: [ 186.799550] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 186.800558] 1 lock held by kmemleak/55: [ 186.800928] 1 lock held by in:imklog/189: [ 186.801350] 3 locks held by kworker/u5:2/306: [ 186.801788] #0: ffff8880379a0938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 186.802677] #1: ffff88803607fdb0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 186.803654] #2: ffff88801d839028 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0xd0/0x620 [ 186.804499] 3 locks held by kworker/u5:4/314: [ 186.804939] #0: ffff88803670e938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 186.805935] #1: ffff8880363f7db0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 186.807145] #2: ffff88801d83d028 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0xd0/0x620 [ 186.807966] 2 locks held by kworker/u4:4/331: [ 186.808435] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 186.809392] #1: ffff88803672fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 186.810347] 2 locks held by kworker/u4:5/333: [ 186.810774] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 186.813150] #1: ffff88803683fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 186.814218] 2 locks held by kworker/u4:6/336: [ 186.814669] 2 locks held by kworker/u4:10/676: [ 186.815121] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 186.816165] #1: ffff888037397db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 186.817745] 1 lock held by modprobe/6070: [ 186.818152] 1 lock held by modprobe/6076: [ 186.818563] 1 lock held by modprobe/6077: [ 186.819025] 1 lock held by modprobe/6078: [ 186.819514] [ 186.819710] ============================================= [ 186.819710] [ 187.341319] Bluetooth: hci2: command 0x0409 tx timeout [ 187.405285] Bluetooth: hci3: command 0x0409 tx timeout [ 187.469290] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 187.727809] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 187.854338] Bluetooth: hci7: command 0x0409 tx timeout [ 189.389301] Bluetooth: hci2: command 0x041b tx timeout [ 189.394134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.396039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.397317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.401483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.402916] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 189.405302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.414671] Bluetooth: hci4: HCI_REQ-0x0c1a [ 189.454231] Bluetooth: hci3: command 0x041b tx timeout [ 189.901339] Bluetooth: hci7: command 0x041b tx timeout [ 191.438595] Bluetooth: hci2: command 0x040f tx timeout [ 191.438648] Bluetooth: hci4: command 0x0409 tx timeout [ 191.501308] Bluetooth: hci3: command 0x040f tx timeout [ 191.949308] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 191.950280] Bluetooth: hci7: command 0x040f tx timeout [ 192.269338] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 193.485315] Bluetooth: hci2: command 0x0419 tx timeout [ 193.485347] Bluetooth: hci4: command 0x041b tx timeout [ 193.549273] Bluetooth: hci3: command 0x0419 tx timeout [ 193.688930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.692435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.694731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.699021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.702061] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.704717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.727274] Bluetooth: hci0: HCI_REQ-0x0c1a [ 193.998280] Bluetooth: hci7: command 0x0419 tx timeout [ 194.066713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.069515] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.071001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.073991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.075465] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.077977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.082617] Bluetooth: hci1: HCI_REQ-0x0c1a [ 194.724830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.727120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.728097] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.731027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.732501] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 194.733668] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.745305] Bluetooth: hci6: HCI_REQ-0x0c1a [ 195.533245] Bluetooth: hci4: command 0x040f tx timeout [ 195.789459] Bluetooth: hci0: command 0x0409 tx timeout [ 196.109285] Bluetooth: hci1: command 0x0409 tx timeout [ 196.430320] Bluetooth: hci5: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 02:33:04 Registers: info registers vcpu 0 RAX=ffffffff81359ebc RBX=ffff88802bd577c8 RCX=ffff88802bd57868 RDX=1ffff110057aaf04 RSI=ffff88802bd57860 RDI=ffffffff81359ebc RBP=ffff88802bd57820 RSP=ffff88802bd577b0 R8 =ffffffff85e3411e R9 =ffffffff85e34122 R10=ffffed10057aaf06 R11=ffff88802bd57808 R12=ffff88802bd57890 R13=0000000000000000 R14=ffff88801006b580 R15=0000000000000dc0 RIP=ffffffff81119fc4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f1c0bbd4c8 CR3=0000000026190000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc2a3548368 CR3=0000000031704000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000