syzkaller login: [ 75.006300] sshd (240) used greatest stack depth: 23848 bytes left Warning: Permanently added '[localhost]:8073' (ECDSA) to the list of known hosts. 2025/01/23 23:50:07 fuzzer started 2025/01/23 23:50:08 dialing manager at localhost:45511 [ 76.806948] cgroup: Unknown subsys name 'net' [ 76.881815] cgroup: Unknown subsys name 'cpuset' [ 76.909290] cgroup: Unknown subsys name 'rlimit' [ 83.721206] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 93.381167] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 23:50:25 syscalls: 200 2025/01/23 23:50:25 code coverage: enabled 2025/01/23 23:50:25 comparison tracing: enabled 2025/01/23 23:50:25 extra coverage: enabled 2025/01/23 23:50:25 setuid sandbox: enabled 2025/01/23 23:50:25 namespace sandbox: enabled 2025/01/23 23:50:25 Android sandbox: enabled 2025/01/23 23:50:25 fault injection: enabled 2025/01/23 23:50:25 leak checking: enabled 2025/01/23 23:50:25 net packet injection: enabled 2025/01/23 23:50:25 net device setup: enabled 2025/01/23 23:50:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 23:50:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 23:50:25 USB emulation: enabled 2025/01/23 23:50:25 hci packet injection: enabled 2025/01/23 23:50:25 wifi device emulation: enabled 2025/01/23 23:50:25 802.15.4 emulation: enabled 2025/01/23 23:50:25 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 23:50:27 starting 8 fuzzer processes 23:50:27 executing program 0: rt_sigpending(&(0x7f0000000000), 0x8) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x420200, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200008c0}, 0x8804) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="8b9e40cc4823757333882d4825a54462", 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x224, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x94ab}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x4}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x0, 0x0, 0x401}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x8, 0x1, 0xf19}, {0x1000, 0x6, 0x0, 0x80000000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) epoll_pwait2(r0, &(0x7f0000000680)=[{}, {}, {}], 0x3, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x3]}, 0x8) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x200200, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc080661a, &(0x7f0000000780)={@id={0x2, 0x0, @auto="62d02e6e1066a022df96f92ac4e7e8f8"}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7916}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80000000, 0x8, 0x9, 0x3]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x50) getgroups(0x0, &(0x7f0000000b80)) 23:50:27 executing program 1: timer_gettime(0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_getoverrun(r0) timer_delete(0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {r1, r2+10000000}}, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) timer_create(0x1, &(0x7f00000003c0)={0x0, 0x6, 0x2, @thr={&(0x7f0000000240)="7312bf14f0dbc96319803e9add567fb9a9bc4ce6c779cecba86bf888044150b6f65494d9ccb933cc5fac60865d37b7b120af6fdecc0c1af6c8320fd65a8ab6c8e8acefb247b59ead708398f8d88a45bb654afa692ea8ffe06be175a79879ee", &(0x7f00000002c0)="79d6334f1661c9d364244d9d3aec630cc5d11cdba45adb3c26b743a8f09f9e2c7aa6b92208f4e2eb9e599bb188c50e5bdff0facc83e6e23bdfb668c1e1b1d6146a10fcf25a8f063dcdd9b2d1138fdf09fea03ca32259836db05a18226305ce05e839eb1507de0299e953df8ca3871d3d6d93985c300234a3153f1920563f77c9ce01b95c5895bbca2c75301e06a77b68ab0c5d5896d36cf516d95b3680b391224815ca3a9baeb328d6dfd621d6fa9d86d9fdf2a373edd068bdbdb79d02ada0b586f787b1963099d2f1ecb41f84fc548c3fd0f537016e21225028e1d4f0b79ea6137f73b3b107"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000004c0)={{r4, r5+10000000}, {r6, r7+10000000}}, &(0x7f0000000500)) timer_create(0x3, &(0x7f0000001640)={0x0, 0x25, 0x1, @thr={&(0x7f0000000540)="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", &(0x7f0000001540)="02a6bea75fc160d7ad11ba31321d9222ba985dc28fdcb567ffb326c8cdcb144457b5f557dbae526d2d609e9e05b2192d6c2f57f87cbc574647a2a82fcad9367345f7edefc37de8fab5310a4bf049f0a8c3c156803b9ef68e03ae6ba27bab34a51cc0959d73a47f0fe15ebcadff195e1b27ae30d662a058d20617ebd03d45a0fad4d78ed8266cbad7a11a53462703e5be3982bac854e1da8a8f77841c7f6995fe51bdce8d7c31797829b65c41892b2616fc6ef777ceef99ae0cc4095786c9901a1d9629cea09885551400227ec1b6e5c1"}}, &(0x7f0000001680)=0x0) timer_getoverrun(r8) r9 = timerfd_create(0x2, 0x80800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000016c0)=[r9], 0x1) timer_create(0x2, &(0x7f0000001880)={0x0, 0x6, 0x4, @thr={&(0x7f0000001700)="8d45c0dcd0b9c07c9f4a8c6d12cb385a3b786da6c792a3b957ca952eee0632fc23889f5d6ef7afdd5566405fef51b511759e12324ce856082734ec5c64d40717a31c84986ef33a3cdd3426c8d8197f0d81ca3c1a7a63ca56e8427c9e7ac7cd6a536e64ae5a81f7d0a4f9342e7665b8df3c04c26b01612eebaf3291a67e21a5cd7ed57d07af9472da443a9dc8614838b9adb606b80a8e4eea1e99e9caba0211bb4885d58c14b527b157ed82b7099d0125d2a1", &(0x7f00000017c0)="feff128cd0c4f89145a9669517f1c649ac5515ee91be9ca02b50b854d1dbd4d32cd71620a555e5846d2f8f58d609d40147190d1bee0378694804813f27ae5991902036e5f16679a05058ddf5519882dc917e9c14e2d52999d102387ad7777baf3383b341e27d3f4490bf69c39eac828ff54a1052ce1d577055215667f227a2151b6a2401778601f11bdf383c1c05c4f1aff188f440e484507b5c8839c5a27ac53ef5e0"}}, &(0x7f00000018c0)) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x6012, 0xffffffffffffffff, 0x0) r11 = syz_mount_image$nfs(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x2, 0x4, &(0x7f0000001b40)=[{&(0x7f0000001980)="a9b25110419fd588c14905c026eb0080c1bad2e747f5602737197e60e280a011f5be25ae4262336450634cc0526554376643812ca3c7b82b5778cc6b0b9bf8deba91665ad0e8fa37bf0ffca7147455", 0x4f, 0x9}, {&(0x7f0000001a00)="6a34f2e271bbde81b1da80a78c8f2d5cc056124f5d1ce74dd86212f6af15c5e3826eaeeee5025af9982e6170e20e0cd537bcd85b2b23e80735fa5fc539b0a5bb37e44d1d31c31f8ec5bc14d28fc9c43bb3fcb15722da3f60e4cf78065da60389dfc74d932ee9cdfaa2723385bb942b88f1a5b3610a02093559c4ec5056752d49d9c15f86dfea09307aaa27727d2e13075cc43436f608b6900d565ddb37f6922f04132204db0c64fa46", 0xa9, 0x569}, {&(0x7f0000001ac0)="30697f34001321b373093a52bd3d504f8eb4592e8b9a5b01b88b77e17c23d78df0f8bb64a5eba27324a9d5e0d308b186f631cb95", 0x34, 0x458c}, {&(0x7f0000001b00), 0x0, 0x6}], 0x1000002, &(0x7f0000001bc0)={[{'\x00'}], [{@uid_lt}]}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000001c00)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4007, @fd=r11, 0x9, 0x4, 0x7f, 0x5, 0x0, {0x2, r12}}, 0x6) 23:50:27 executing program 2: connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xff, 0x40, 0x9, 0x800}, {0x7, 0x7f, 0x20, 0x6}, {0xc5, 0x9, 0x7, 0x1}, {0x59, 0x5, 0x6, 0x9}, {0xcdbb, 0x0, 0x4, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x5}, 0x40084) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0xa, &(0x7f0000000380)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r7}}, 0xffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x10000000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000804d) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x5c}}, 0x20040000) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 23:50:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/223) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'erspan0\x00', @random}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000200)) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/190) r3 = io_uring_setup(0x2557, &(0x7f0000000300)={0x0, 0x17c2, 0x4, 0x0, 0x40, 0x0, r0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x20b01, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000400)={0x7ff, 0x0, &(0x7f00000003c0)=[r0, r4, r2]}, 0x3) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000480)=r0, 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000500)=""/67) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1336) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x10010, r3, 0x8000000) syz_open_dev$evdev(&(0x7f0000000580), 0x5, 0x101800) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000005c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r5) [ 95.722746] audit: type=1400 audit(1737676227.257:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:50:27 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x80000001, 0x488000) ioctl$RTC_UIE_OFF(r0, 0x7004) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, 0xd77, &(0x7f0000000080)={[0xff]}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x29e400, 0x0) connect$802154_dgram(r1, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2496, &(0x7f0000000140)={0x0, 0x57f0, 0x8, 0x1, 0x356}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x5, 0x0, &(0x7f00000001c0)=[r2, r3, r1, r1, r0, 0xffffffffffffffff, r0, r1]}, 0x8) pselect6(0x40, &(0x7f0000000240)={0x5, 0x1, 0x10001, 0x5, 0x9, 0xff, 0x9, 0x8}, &(0x7f0000000280)={0x4, 0x6, 0x3ff, 0x5, 0xfffffffffffffffc, 0x9, 0x5, 0xff}, &(0x7f00000002c0)={0x67a, 0x2, 0x4, 0x4, 0x3f, 0x2, 0x1, 0x5}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x1]}, 0x8}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1e7bb4753cd7f672}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20044884) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4363b791aa1c918c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x54e68ba8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) timer_create(0x0, &(0x7f0000000980)={0x0, 0x14, 0x2}, &(0x7f00000009c0)=0x0) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000a40)={{}, {r7, r8+10000000}}, &(0x7f0000000a80)) timer_gettime(r6, &(0x7f0000000ac0)) 23:50:27 executing program 5: ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000)) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x2, 0x301080) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0xd, 0x14, 0xb, 0xa, 0x6, 0x4, 0x3, 0x11f, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c2, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000140)={0x2, 0x4, 0x9, 0x4, 0x6, 0x7, 0x7fffffff}) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000180)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000200)) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000240)=""/249) ioctl$RTC_AIE_OFF(r0, 0x7002) r3 = syz_open_dev$rtc(&(0x7f0000000340), 0xc000000000000000, 0x100) ioctl$RTC_UIE_OFF(r3, 0x7004) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000380)) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1301) shmctl$SHM_LOCK(r2, 0xb) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000480)={{0x3, r5, 0xee01, 0xffffffffffffffff, 0x0, 0x2}, 0x6, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x1ff}) 23:50:27 executing program 6: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) r0 = syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x40, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ac0e25b316"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x1f, 0x9, 0x81}, {0x6, 0x24, 0x1a, 0x4, 0xb}}, {{0x9, 0x5, 0x81, 0x3, 0x1ed20dff05228b31, 0x1, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x7df, 0xdc, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf8, 0x40, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xf9, 0x9, 0x7f, 0x20, 0x1}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x6, 0x32, 0x5, 0x80}, @ssp_cap={0x10, 0x10, 0xa, 0x72, 0x1, 0x6, 0xf00, 0x8000, [0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0xfb, 0xffff}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x200a}}, {0x41, &(0x7f0000000140)=@string={0x41, 0x3, "b07e88df66335ac177d5d268a651d0a42f5afb691f60b2de6adecbfe9beb7a8dd80aae685e1e36b8e0cf2cc0fad4ed77b29536babd2284127934f3577d132c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x223}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x437}}]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2004, @fd, 0x3, 0x4, 0x4, 0x8, 0x1, {0x3}}, 0x40) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0x5, 0xf3, {0xf3, 0x22, "67eec53717325f01f4870a93715f321349e35c4111bf68287010eb324bbd980651f271bff6ad750cf3b8567fc5b28dc9699f2bd12dd3c940e1dae3d0d3f00d989adb68201c358fb3b8e0ef0652fd1dc1e2c5fcd4760055ffa045c696375ef89abe84fdd09ce7af9a8ed01576abd77746bad21fd847cefb74031b1e11a4939187ece5caf601a7a68ad71ee3750ad7859b232a2e13c5a258e2f9c91e80cb8c3a3cc7b5d63683522a1e096bcf94417f8ad4c77ae673dff1fa3de2006f41aa54d338e4ae4df3f3d3526086076af91a371731890444a74a5e6287cc8e05e483aaf17656c70dd68fbe8f99c24018481ff9f0610b"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000640)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x80}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x1, 0xf00, 0x40}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x20, 0x8, 0xfe8, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x70, "892fbc1e6ba2d40019d35709a4caff21"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x1, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9e, 0x8}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x1, 0x1, "590865a4", "4ca76d1f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x1f, 0x4, 0x2, 0x4, 0x8219}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000780)={0x3daffcf1f76b43e6, 0x18, 0x27, "4e2c4b9ae9a98695e14c7158169de7e9def92ffd42e4f04a4423ec3ab4c30e5b5a1e9e1224e1e5"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x120, 0x4, [0x1e0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000940)={0x40, 0xb, 0x2, "d4fa"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @random="ea54a7c916e2"}, &(0x7f0000000a40)={0x40, 0x19, 0x2, 'LZ'}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x281}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000b00)={0x40, 0x1e, 0x1}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000cc0)={0x14, &(0x7f0000000c40)={0x0, 0x21, 0x2c, {0x2c, 0x22, "8d87fbfb7f78bcc0774c53c271d0cd0c7a08a2f37468726d241fb4d9fb69d552c1eab83331fbb4d69624"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000d00)={0x20, 0xe, 0xe4, "d26b3bf3de2fb4d430f551be35504e2115e221d06dfcb1b4eab741ed581c72bda574157021d5ea8726235b7b5e17e1933fcceb0618b437843ad80bf715a3ffbdd9a8fd91dc9033acfe184b1a4704611b8bb64dfab1889166d8a1fd5a6a74a9066ded3e6016b0669f6b4bb6d6def00071f6f60ce0cebfc18763b5f631f9459cd698950e4a4c730e729924d3be3be5f3c2ed03da2f9f68eadd067bba0ef297179d8638de6467b97cf4365623a9c93fbf84e0b51f48a7a981f2d5ebda24952d98622328a528fac314f4767f7a87648de8211a483d76fd133252fa1dda843a9da3784989c67d"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000e80)={0x20, 0x80, 0x1c, {0x4, 0x4, 0xc2f1, 0x40, 0x5, 0x1, 0x4, 0x80, 0x4, 0x6, 0xffff, 0xde}}, &(0x7f0000000ec0)={0x20, 0x85, 0x4, 0x62d0}, &(0x7f0000000f00)={0x20, 0x83, 0x2}, &(0x7f0000000f40)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000f80)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001180)={0x14, &(0x7f0000001040)={0x0, 0x24, 0xdf, {0xdf, 0x21, "69ddd831b89a425452a2356a2f225061f58a8ca5ff79e43a4a1e0f091aedc5f274922861b062198596408f8126401b71a498b8cfe72d2fe11ae2021025a4316c7e4cc218c635c797f8011e462fef38ed1c29d444a9a4f0e60f8909fce66828e08d820673ceb6e7626fe24300b5c6394c1efe8a9053751653be9da84c896808bd45462ce571814d507f2096b10f12d872068d3e4d4d71dc55ca630d6a308c48b8d7c2aa2fae0d768656a1825b742e43971d66739941bbcbab8e6dba7e4a0856add5856dfe123fe25f4017acc3e15d30321854ca705ae7b2b47915967078"}}, &(0x7f0000001140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x44, &(0x7f00000011c0)={0x20, 0x5, 0xea, "3cfece86443dca793e5a56b7e1e226aa06aca0b9a2a2f85430fbb7607d4d687088f60ef331fc5495191e10b6b411f8174bda51f83ae91bade8215e90c6cd89ebfa1032a1fc77af6b3458c50618436fe88d1203d04e1da3b103ea2f3290fca599500ad62cc2d356eebf7330a9709e66ee5ca7469f9f8c88748a1b8895f158067f16ddb528e968f038fca5c8fb83380878514b013947beb7225e4f8f5a0a15aba0827b29d1f39b4bc2e7f4641864ee0659751577cc54663de461f617b19cd9aa182cb2d835c9abadad8554433b0ee87ac928846ef2578c94e6ed21a548b4cda9b5f8f5481b88ffcfa24882"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0xbf}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001340)={0x20, 0x80, 0x1c, {0x6, 0x20, 0x0, 0x3f, 0x1, 0x34, 0x101, 0x5, 0x0, 0x5, 0x6, 0x101}}, &(0x7f0000001380)={0x20, 0x85, 0x4, 0x100}, &(0x7f00000013c0)={0x20, 0x83, 0x2}, &(0x7f0000001400)={0x20, 0x87, 0x2, 0xf1}, &(0x7f0000001440)={0x20, 0x89, 0x2, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f00000015c0)={0x5cc, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x4, 0x7f, 0x7fff}, {0x0, 0x8, 0x0, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x61}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xea9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x200, 0x5, 0x6, 0x6}, {0x7f, 0x5, 0x6, 0x6}, {0x1f, 0x40, 0x2, 0x1}, {0x5, 0x6, 0x85, 0x31c}, {0x1, 0x0, 0x8, 0xfffffc00}, {0x7, 0x49, 0x4, 0x6ef}, {0x0, 0x6, 0x0, 0x8}, {0x5, 0xff, 0x2, 0x3}]}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c40), 0x4000, 0x0) epoll_pwait(r4, &(0x7f0000001c80)=[{}, {}], 0x2, 0xd4b0, &(0x7f0000001cc0)={[0x80000001]}, 0x8) r5 = syz_usb_connect$cdc_ncm(0x3, 0xca, &(0x7f0000001d00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x2, 0x1, 0x91, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d48b87f7d5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x8d, 0x6}, {0x6, 0x24, 0x1a, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x97a}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x3, 0x80, 0x8, 0x401, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x5a}, @acm={0x4, 0x24, 0x2, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x0, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x23, 0xd8, 0xd2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x90, 0x84}}}}}}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x310, 0x6, 0x80, 0x3, 0x10, 0x2}, 0x10c, &(0x7f0000001e40)={0x5, 0xf, 0x10c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6b, "442b8fe88e8ce097a967507282693a84"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfd, 0x40, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "713261cb7d9a62f973bcac82310f695a"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xa, 0x3, 0x5}, @generic={0xce, 0x10, 0xa, "a78a4b44e961abb8d42cdb3dff674fe4f1cb81b12eb8df13205ecc0abcb424e0d2a6f44e62c0377ae37af1098b5da9435304ed26ece66ee7486f5d34e1a1d4efb8d7b35abdf29633500acebb6d9ccfc9c2b48aa768c9735aa4457e48909ad5435de03e5dda1bd69e75c6c34b45b5215b31510cc987e43621f54d9580ef91ccd73405a1feba8522cf238fc2e2c5b5952ae0163a8c7ec20128ef77466b7dedbff4e93eff462ee6964b9974e1ed3f9fd17d2da444a822ca78b91f2612667a81bc3bbce882b2c60deef79452c0"}]}, 0x1, [{0xc6, &(0x7f0000001f80)=@string={0xc6, 0x3, "6975d8d7d94f46767c3a3fd60c22af1751ad56483ae8b975be78f625a4b605f6aad021effe6f8f36e833d77a3296e02ce5572bbf1b6fe76b3f0dab4649afd9319696397d48c5159eba4dd24ba12ecb8b1b4530cda21404de4f59a6b52e96ab664a14b60c23c0ddc6970c275cfdec126cb221d7f9e1797e543771008d3030549c97f7772cf9dd05384e0d0eadf64ce74505d4bdf4b2682beaa6f307786b878ae727410c5b22cf2821c63301f505d726363e0f8cc37a920dcfa0e595c7a35e4a63d222827b"}}]}) syz_usb_control_io(r5, &(0x7f0000002280)={0x2c, &(0x7f00000020c0)={0x40, 0x21, 0x93, {0x93, 0xd, "17e48855fa06e5f9b5d8118da8d9fdfce741a32c66ab6b5578b3761bb094f81412a181b544d469433d27572942fa96ef1219d91de4fbb360dffea89cd1c88b60ae01c55c17dd1eca3840167a8a9a74cad048029e0f9f8df429875fe554443228e0b4d3f31c5f4db3e9d124709d59d8a5216db16d1186521f3cc11162eaa6ee7a26e11b55b0cbbe5edb4ebd2aae8b0dd79f"}}, &(0x7f0000002180)={0x0, 0x3, 0xa, @string={0xa, 0x3, "d49adbbf4c891004"}}, &(0x7f00000021c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000002200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0xff, 0x4, "5e17d7df", "d9d7b2b2"}}, &(0x7f0000002240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x0, 0x40, 0x81}}}, &(0x7f00000026c0)={0x84, &(0x7f00000022c0)={0x0, 0x5, 0x39, "61da7c2cd5c7369b921721172de07412e3ce2cb15c9e108c8f7c8cd128d5ee9b56745d63d1e695dc295795166e67c3af9c72ae05ef721bcdc6"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002380)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000023c0)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf]}}, &(0x7f0000002400)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000002440)={0x40, 0x9, 0x1, 0xfd}, &(0x7f0000002480)={0x40, 0xb, 0x2, "1ebc"}, &(0x7f00000024c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002540)={0x40, 0x17, 0x6, @random="36aa47d03974"}, &(0x7f0000002580)={0x40, 0x19, 0x2, "cd5c"}, &(0x7f00000025c0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000002600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000002640)={0x40, 0x1e, 0x1}, &(0x7f0000002680)={0x40, 0x21, 0x1, 0x4a}}) r6 = socket(0x8, 0x5, 0x2a) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x89080298}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001011}, 0x8881) syz_usb_control_io(r5, &(0x7f0000002b80)={0x2c, &(0x7f00000028c0)={0x40, 0xc, 0xe2, {0xe2, 0xa, "a76d190207728f9a4804e9be99e87d9cff33cf8dc9bc0b0fd7e159b0c7fc96d1cd9a5ae9129212957807ad5b4a4208b2c523a436b60033394a8626ae8ca686aee8b3450f50fc5069865afc61f16be5b1ab3754a232c9a32ed436301ca9e184487d76e060b4fb1c3d34c47cf95ad05fc847a3c5cd6cc12fb1960d7f172384a784927e2aa277aba47a3b792e08fe2e5697e1ef7bc35b5600eb9615d6427ac3014c6a7439aec1ad48bec10f3ecf178af968308c034930a9463606709b279d376405f14ddf50f8cb0027e69e7698edf57bef5d26457bd108a06584c11e1e222ad6be"}}, &(0x7f00000029c0)={0x0, 0x3, 0xea, @string={0xea, 0x3, "800d0464db4d0dbc7745bfe477146cfa1072600539d0f6f6eb374cf86ed73ffbaa61d713e956e701346cabe543dfc707f6e4ab680f8bb37ed98b12681a3d2fc4ca62e2b017589c791de05fef33adfcc5ce75ac265649a2947f5d9c7d7873cb7ee7da38d55d3b9dede950f7dfa8168b393fd9ffdb907dc92ef972046e967f5b686c37404a5da6027080172e904eaf548e4ec0c30b91672230440a23be7c9468e9c8edeb9f0383ac1337f790f959cb87e341a40a4d150ab4986ca7640bcf4e524b2bdd8331e19a47296968d10b5d77c7b9788eedfef959ac4538e322061ddc70c81680f5dbced6f520"}}, &(0x7f0000002ac0)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@generic={0x19, 0x10, 0x3, "df7a2f501bde8077427dce8a902a0c345eaf3676fc6a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0xf2, 0x3, 0xa0d, 0x2}]}}, &(0x7f0000002b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0xce, 0x1f, "5c0c518d", "3a4004e8"}}, &(0x7f0000002b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x6, 0xb4, 0x3f, 0xffff, 0x2}}}, &(0x7f0000003000)={0x84, &(0x7f0000002bc0)={0x40, 0x16, 0x4f, "da2204c44f16b2ab9672373e234817747b0e21a40e6efe0752e4c8eb37c2e7a0e439cab8ecb16438f7cf4663b24a681c013772c6b10f529ae5e0433f691c8433ab2a644a76fb1f7e1e529b6071801c"}, &(0x7f0000002c40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002c80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002cc0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002d00)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000002d40)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000002d80)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000002dc0)={0x40, 0xb, 0x2, "e6e6"}, &(0x7f0000002e00)={0x40, 0xf, 0x2, 0x2164}, &(0x7f0000002e40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002e80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002ec0)={0x40, 0x19, 0x2, "15a9"}, &(0x7f0000002f00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000002f40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000002f80)={0x40, 0x1e, 0x1}, &(0x7f0000002fc0)={0x40, 0x21, 0x1, 0xfc}}) write$tcp_congestion(r4, &(0x7f00000030c0)='westwood\x00', 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x200000) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/138) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000200)={0x10}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9ab}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r0, &(0x7f0000000380)={r2, r4, 0xff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'team_slave_0\x00'}) r5 = eventfd2(0xffffffff, 0x800) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000400)={0x90000000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x1010, r2, 0x8000000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)) r8 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r8, &(0x7f0000000600)={r4, 0xffffffffffffffff, 0x4}) [ 97.206023] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.208395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.213927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.220101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.225625] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.227823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.275072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.276665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.281666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.292781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.295308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.297730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.330929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.336526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.338130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.350445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.352325] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.353858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.414089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.415341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.417020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.420542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.426968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.431133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.432159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.437747] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.445290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.454259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.467866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.472811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.536892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.551793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.578910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.594389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.597100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.598094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.612882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.619874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.623221] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.630777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.633399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.637791] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.638044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.640990] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.647932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.663359] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.674082] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.676916] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.241113] Bluetooth: hci0: command tx timeout [ 99.369064] Bluetooth: hci1: command tx timeout [ 99.435090] Bluetooth: hci2: command tx timeout [ 99.497629] Bluetooth: hci4: command tx timeout [ 99.560605] Bluetooth: hci3: command tx timeout [ 99.688809] Bluetooth: hci6: command tx timeout [ 99.689710] Bluetooth: hci5: command tx timeout [ 99.752606] Bluetooth: hci7: command tx timeout [ 101.288638] Bluetooth: hci0: command tx timeout [ 101.417827] Bluetooth: hci1: command tx timeout [ 101.481562] Bluetooth: hci2: command tx timeout [ 101.545493] Bluetooth: hci4: command tx timeout [ 101.609162] Bluetooth: hci3: command tx timeout [ 101.736712] Bluetooth: hci6: command tx timeout [ 101.736804] Bluetooth: hci5: command tx timeout [ 101.803551] Bluetooth: hci7: command tx timeout [ 103.337549] Bluetooth: hci0: command tx timeout [ 103.465575] Bluetooth: hci1: command tx timeout [ 103.528609] Bluetooth: hci2: command tx timeout [ 103.592623] Bluetooth: hci4: command tx timeout [ 103.657614] Bluetooth: hci3: command tx timeout [ 103.784614] Bluetooth: hci5: command tx timeout [ 103.786575] Bluetooth: hci6: command tx timeout [ 103.848670] Bluetooth: hci7: command tx timeout [ 105.384842] Bluetooth: hci0: command tx timeout [ 105.512579] Bluetooth: hci1: command tx timeout [ 105.576731] Bluetooth: hci2: command tx timeout [ 105.640939] Bluetooth: hci4: command tx timeout [ 105.704693] Bluetooth: hci3: command tx timeout [ 105.832673] Bluetooth: hci6: command tx timeout [ 105.833440] Bluetooth: hci5: command tx timeout [ 105.896632] Bluetooth: hci7: command tx timeout [ 157.076652] syz-executor.6 (287) used greatest stack depth: 23296 bytes left [ 159.348298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.356824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.358422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.369628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.379119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.381219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.421007] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.423950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.430705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.431681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.432338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.434379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.435595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.436862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.437831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.456430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.464401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.468364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.539001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.542813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.546094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.551674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.556340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.559731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.698327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.711679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.719744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.733526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.743429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.747840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.748540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.750146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.753854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.757234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.760055] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 159.762860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.772781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 159.789836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 159.793936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.801266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 159.813087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.815640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 159.821917] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 159.824000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.829256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.878637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.912127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 159.921879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.448568] Bluetooth: hci0: command tx timeout [ 161.512558] Bluetooth: hci2: command tx timeout [ 161.513641] Bluetooth: hci1: command tx timeout [ 161.641549] Bluetooth: hci3: command tx timeout [ 161.832609] Bluetooth: hci6: command tx timeout [ 161.833691] Bluetooth: hci4: command tx timeout [ 161.896599] Bluetooth: hci7: command tx timeout [ 162.024563] Bluetooth: hci5: command tx timeout [ 163.497484] Bluetooth: hci0: command tx timeout [ 163.563580] Bluetooth: hci1: command tx timeout [ 163.563667] Bluetooth: hci2: command tx timeout [ 163.691514] Bluetooth: hci3: command tx timeout [ 163.881514] Bluetooth: hci6: command tx timeout [ 163.881556] Bluetooth: hci4: command tx timeout [ 163.945626] Bluetooth: hci7: command tx timeout [ 164.074056] Bluetooth: hci5: command tx timeout [ 165.545556] Bluetooth: hci0: command tx timeout [ 165.609547] Bluetooth: hci2: command tx timeout [ 165.610069] Bluetooth: hci1: command tx timeout [ 165.736614] Bluetooth: hci3: command tx timeout [ 165.928689] Bluetooth: hci6: command tx timeout [ 165.929737] Bluetooth: hci4: command tx timeout [ 165.992609] Bluetooth: hci7: command tx timeout [ 166.122525] Bluetooth: hci5: command tx timeout [ 167.592521] Bluetooth: hci0: command tx timeout [ 167.656743] Bluetooth: hci1: command tx timeout [ 167.657227] Bluetooth: hci2: command tx timeout [ 167.784601] Bluetooth: hci3: command tx timeout [ 167.976528] Bluetooth: hci4: command tx timeout [ 167.976986] Bluetooth: hci6: command tx timeout [ 168.040546] Bluetooth: hci7: command tx timeout [ 168.169210] Bluetooth: hci5: command tx timeout [ 221.369377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.372207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.373364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.375771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.377132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.378139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.492861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.495679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.496788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.499924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.501659] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.504538] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.697051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.701820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.703739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.709287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.711741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.717058] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.718818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.719941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.729884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.739800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.741624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.742697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.810660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.826119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.827688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.833038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.835565] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.836989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.892556] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.898172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.909780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.919635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.942629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.944495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.955504] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.956790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.957714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.967602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.971096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.972957] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.974185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.982242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 222.066198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 222.116828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 222.128887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 222.148851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.400857] Bluetooth: hci0: command tx timeout [ 223.528613] Bluetooth: hci1: command tx timeout [ 223.784641] Bluetooth: hci3: command tx timeout [ 223.785925] Bluetooth: hci2: command tx timeout [ 223.912601] Bluetooth: hci4: command tx timeout [ 224.040576] Bluetooth: hci6: command tx timeout [ 224.104981] Bluetooth: hci5: command tx timeout [ 224.232576] Bluetooth: hci7: command tx timeout [ 225.450549] Bluetooth: hci0: command tx timeout [ 225.577525] Bluetooth: hci1: command tx timeout [ 225.832569] Bluetooth: hci2: command tx timeout [ 225.833511] Bluetooth: hci3: command tx timeout [ 225.960622] Bluetooth: hci4: command tx timeout [ 226.088776] Bluetooth: hci6: command tx timeout [ 226.152661] Bluetooth: hci5: command tx timeout [ 226.280744] Bluetooth: hci7: command tx timeout [ 227.496583] Bluetooth: hci0: command tx timeout [ 227.624572] Bluetooth: hci1: command tx timeout [ 227.880695] Bluetooth: hci3: command tx timeout [ 227.880716] Bluetooth: hci2: command tx timeout [ 228.008546] Bluetooth: hci4: command tx timeout [ 228.136571] Bluetooth: hci6: command tx timeout [ 228.200583] Bluetooth: hci5: command tx timeout [ 228.328638] Bluetooth: hci7: command tx timeout [ 229.544578] Bluetooth: hci0: command tx timeout [ 229.672553] Bluetooth: hci1: command tx timeout [ 229.928567] Bluetooth: hci2: command tx timeout [ 229.928648] Bluetooth: hci3: command tx timeout [ 230.056534] Bluetooth: hci4: command tx timeout [ 230.184585] Bluetooth: hci6: command tx timeout [ 230.248661] Bluetooth: hci5: command tx timeout [ 230.376513] Bluetooth: hci7: command tx timeout [ 280.187667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.188587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.727125] [ 281.727568] ====================================================== [ 281.728652] WARNING: possible circular locking dependency detected [ 281.729555] 6.13.0-next-20250123 #1 Not tainted [ 281.730408] ------------------------------------------------------ [ 281.735077] kworker/u8:0/11 is trying to acquire lock: [ 281.737709] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 281.739331] [ 281.739331] but task is already holding lock: [ 281.740251] ffff88802c850768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 281.741844] [ 281.741844] which lock already depends on the new lock. [ 281.741844] [ 281.743191] [ 281.743191] the existing dependency chain (in reverse order) is: [ 281.744314] [ 281.744314] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 281.745363] __mutex_lock+0x13d/0xb50 [ 281.746115] wiphy_register+0x1b2e/0x25d0 [ 281.746908] ieee80211_register_hw+0x23a4/0x3d60 [ 281.747821] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 281.748841] init_mac80211_hwsim+0x389/0x870 [ 281.749784] do_one_initcall+0xf9/0x640 [ 281.750614] kernel_init_freeable+0x53d/0x7a0 [ 281.751459] kernel_init+0x1e/0x2d0 [ 281.752148] ret_from_fork+0x48/0x80 [ 281.752839] ret_from_fork_asm+0x1a/0x30 [ 281.753636] [ 281.753636] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 281.754628] __lock_acquire+0x29fd/0x4580 [ 281.755370] lock_acquire+0x19b/0x520 [ 281.756067] __mutex_lock+0x13d/0xb50 [ 281.756773] unregister_netdevice_many_notify+0x1612/0x1c80 [ 281.757729] unregister_netdevice_queue+0x224/0x2e0 [ 281.758595] _cfg80211_unregister_wdev+0x57b/0x700 [ 281.759598] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 281.760606] ieee80211_unregister_hw+0x55/0x3a0 [ 281.761562] hwsim_exit_net+0x3a0/0x730 [ 281.762417] ops_exit_list+0xb3/0x180 [ 281.763222] cleanup_net+0x546/0xad0 [ 281.764021] process_one_work+0x8ee/0x1a10 [ 281.764819] worker_thread+0x674/0xe70 [ 281.765559] kthread+0x3ab/0x720 [ 281.766254] ret_from_fork+0x48/0x80 [ 281.766935] ret_from_fork_asm+0x1a/0x30 [ 281.767706] [ 281.767706] other info that might help us debug this: [ 281.767706] [ 281.768938] Possible unsafe locking scenario: [ 281.768938] [ 281.769889] CPU0 CPU1 [ 281.770643] ---- ---- [ 281.771373] lock(&rdev->wiphy.mtx); [ 281.772034] lock(rtnl_mutex); [ 281.772979] lock(&rdev->wiphy.mtx); [ 281.774008] lock(rtnl_mutex); [ 281.774557] [ 281.774557] *** DEADLOCK *** [ 281.774557] [ 281.775450] 4 locks held by kworker/u8:0/11: [ 281.776134] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 281.777816] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 281.779401] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 281.780905] #3: ffff88802c850768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 281.782477] [ 281.782477] stack backtrace: [ 281.783161] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250123 #1 [ 281.783229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 281.783270] Workqueue: netns cleanup_net [ 281.783347] Call Trace: [ 281.783365] [ 281.783386] dump_stack_lvl+0xca/0x120 [ 281.783493] print_circular_bug+0x47b/0x750 [ 281.783578] check_noncircular+0x2e9/0x3c0 [ 281.783654] ? lock_repin_lock+0x207/0x320 [ 281.783764] ? __pfx_check_noncircular+0x10/0x10 [ 281.783841] ? hlock_class+0x4e/0x130 [ 281.783897] ? mark_lock+0xac/0xed0 [ 281.783971] ? __pfx_lock_repin_lock+0x10/0x10 [ 281.784081] ? timerqueue_del+0x83/0x150 [ 281.784162] ? lockdep_lock+0xba/0x1b0 [ 281.784268] ? __pfx_lockdep_lock+0x10/0x10 [ 281.784384] __lock_acquire+0x29fd/0x4580 [ 281.784484] ? __pfx___lock_acquire+0x10/0x10 [ 281.784564] ? lock_release+0x20f/0x6f0 [ 281.784646] ? __pfx_lock_release+0x10/0x10 [ 281.784736] lock_acquire+0x19b/0x520 [ 281.784816] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 281.784908] ? __pfx_lock_acquire+0x10/0x10 [ 281.784991] ? srso_return_thunk+0x5/0x5f [ 281.785096] ? lock_release+0x20f/0x6f0 [ 281.785177] ? srso_return_thunk+0x5/0x5f [ 281.785281] ? lock_is_held_type+0x9e/0x120 [ 281.785385] ? srso_return_thunk+0x5/0x5f [ 281.785505] __mutex_lock+0x13d/0xb50 [ 281.785618] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 281.785719] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 281.785822] ? srso_return_thunk+0x5/0x5f [ 281.785942] ? synchronize_rcu_expedited+0x38a/0x420 [ 281.786052] ? __pfx___mutex_lock+0x10/0x10 [ 281.786169] ? __pfx_autoremove_wake_function+0x10/0x10 [ 281.786272] ? srso_return_thunk+0x5/0x5f [ 281.786376] ? kasan_quarantine_put+0x84/0x1e0 [ 281.786489] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 281.786563] unregister_netdevice_many_notify+0x1612/0x1c80 [ 281.786650] ? __virt_addr_valid+0x2e8/0x5d0 [ 281.786747] ? __pfx_lock_release+0x10/0x10 [ 281.786830] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 281.786918] ? find_held_lock+0x2c/0x110 [ 281.787025] ? srso_return_thunk+0x5/0x5f [ 281.787134] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 281.787250] ? srso_return_thunk+0x5/0x5f [ 281.787360] ? lock_release+0x20f/0x6f0 [ 281.787442] ? __pfx_lock_release+0x10/0x10 [ 281.787522] ? srso_return_thunk+0x5/0x5f [ 281.787626] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 281.787715] ? srso_return_thunk+0x5/0x5f [ 281.787829] unregister_netdevice_queue+0x224/0x2e0 [ 281.787912] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 281.787994] ? up_write+0x195/0x520 [ 281.788096] _cfg80211_unregister_wdev+0x57b/0x700 [ 281.788200] ? srso_return_thunk+0x5/0x5f [ 281.788312] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 281.788387] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 281.788463] ? srso_return_thunk+0x5/0x5f [ 281.788567] ? srso_return_thunk+0x5/0x5f [ 281.788671] ? synchronize_rcu+0x1ff/0x260 [ 281.788751] ieee80211_unregister_hw+0x55/0x3a0 [ 281.788835] hwsim_exit_net+0x3a0/0x730 [ 281.788915] ? __pfx_hwsim_exit_net+0x10/0x10 [ 281.788992] ? srso_return_thunk+0x5/0x5f [ 281.789096] ? netdev_run_todo+0x788/0x1040 [ 281.789189] ? __pfx_hwsim_exit_net+0x10/0x10 [ 281.789276] ops_exit_list+0xb3/0x180 [ 281.789356] cleanup_net+0x546/0xad0 [ 281.789441] ? __pfx_cleanup_net+0x10/0x10 [ 281.789543] process_one_work+0x8ee/0x1a10 [ 281.789664] ? __pfx_lock_acquire+0x10/0x10 [ 281.789747] ? __pfx_process_one_work+0x10/0x10 [ 281.789856] ? srso_return_thunk+0x5/0x5f [ 281.789960] ? move_linked_works+0x172/0x270 [ 281.790058] ? srso_return_thunk+0x5/0x5f [ 281.790162] ? assign_work+0x196/0x240 [ 281.790268] worker_thread+0x674/0xe70 [ 281.790383] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 281.790484] ? __pfx_worker_thread+0x10/0x10 [ 281.790595] kthread+0x3ab/0x720 [ 281.790692] ? __pfx_kthread+0x10/0x10 [ 281.790788] ? srso_return_thunk+0x5/0x5f [ 281.790892] ? finish_task_switch.isra.0+0x206/0x840 [ 281.790987] ? __pfx_kthread+0x10/0x10 [ 281.791087] ret_from_fork+0x48/0x80 [ 281.791145] ? __pfx_kthread+0x10/0x10 [ 281.791243] ret_from_fork_asm+0x1a/0x30 [ 281.791367] [ 283.443249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.445377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.448848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.457321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.461826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.463945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.574252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.575942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.577798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.583141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.585272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.586920] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.638311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.646788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.665596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.674763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.677775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.679783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.709948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.723853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.725970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.729821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.736686] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.746611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.748610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.752647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.756817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.769223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.773687] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.776794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.795823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.799785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.805009] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.825811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.838008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.839958] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.873008] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.875455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.877050] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.882056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.891957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.900800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.927936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.931027] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.933904] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.936807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 283.961357] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.971935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.545542] Bluetooth: hci0: command tx timeout [ 285.609578] Bluetooth: hci1: command tx timeout [ 285.737455] Bluetooth: hci2: command tx timeout [ 285.865513] Bluetooth: hci3: command tx timeout [ 285.866014] Bluetooth: hci4: command tx timeout [ 285.992647] Bluetooth: hci7: command tx timeout [ 285.993451] Bluetooth: hci5: command tx timeout [ 286.057476] Bluetooth: hci6: command tx timeout [ 287.593486] Bluetooth: hci0: command tx timeout [ 287.656732] Bluetooth: hci1: command tx timeout [ 287.787499] Bluetooth: hci2: command tx timeout [ 287.912696] Bluetooth: hci4: command tx timeout [ 287.913145] Bluetooth: hci3: command tx timeout [ 288.040587] Bluetooth: hci5: command tx timeout [ 288.040601] Bluetooth: hci7: command tx timeout [ 288.107453] Bluetooth: hci6: command tx timeout [ 289.640479] Bluetooth: hci0: command tx timeout [ 289.707444] Bluetooth: hci1: command tx timeout [ 289.834456] Bluetooth: hci2: command tx timeout [ 289.960718] Bluetooth: hci3: command tx timeout [ 289.961171] Bluetooth: hci4: command tx timeout [ 290.088591] Bluetooth: hci7: command tx timeout [ 290.088614] Bluetooth: hci5: command tx timeout [ 290.152607] Bluetooth: hci6: command tx timeout [ 291.688548] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 23:53:33 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=ffffed100d9c6c4b RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056050bd50518 CR3=0000000015b56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000001f701164100000001db710641 XMM01=0000000000000000f1343c7500000000 XMM02=000000000000000043cf73fc98329b10 XMM03=000000000000000000000000ffffffff XMM04=000000009f856253c55af0dcb7b9b094 XMM05=0000000000000000361a679e5ba3f11a XMM06=00000000bda3a377b858d4e17352d4e0 XMM07=00000000bda3a377b2f0cce236efc67a XMM08=0000000000000000000003876953fdc4 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000002000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001d64046 R10=0000000000000020 R11=2f72656b726f776b R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564e0c8da182 CR3=000000000d004000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=000056050bd63af0000056050bd878b0 XMM05=02010302020101000000000000000000 XMM06=697665640031006563697665642e3169 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000