Warning: Permanently added '[localhost]:53879' (ECDSA) to the list of known hosts. 2025/01/28 02:18:18 fuzzer started 2025/01/28 02:18:19 dialing manager at localhost:40883 syzkaller login: [ 62.386659] cgroup: Unknown subsys name 'net' [ 62.489159] cgroup: Unknown subsys name 'cpuset' [ 62.515235] cgroup: Unknown subsys name 'rlimit' [ 68.814689] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 02:18:35 syscalls: 202 2025/01/28 02:18:35 code coverage: enabled 2025/01/28 02:18:35 comparison tracing: enabled 2025/01/28 02:18:35 extra coverage: enabled 2025/01/28 02:18:35 setuid sandbox: enabled 2025/01/28 02:18:35 namespace sandbox: enabled 2025/01/28 02:18:35 Android sandbox: enabled 2025/01/28 02:18:35 fault injection: enabled 2025/01/28 02:18:35 leak checking: enabled 2025/01/28 02:18:35 net packet injection: enabled 2025/01/28 02:18:35 net device setup: enabled 2025/01/28 02:18:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 02:18:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 02:18:35 USB emulation: enabled 2025/01/28 02:18:35 hci packet injection: enabled 2025/01/28 02:18:35 wifi device emulation: enabled 2025/01/28 02:18:35 802.15.4 emulation: enabled 2025/01/28 02:18:35 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 02:18:38 starting 8 fuzzer processes 02:18:38 executing program 0: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf8000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000280)=0x7) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x451d}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x200008a0) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x9, 0x200000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x3f, 0x3, 0x0, @mcast2, @local, 0x87a0, 0x8000, 0x4, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x4, 0x3f, 0x7f, 0x3, 0x22, @local, @mcast2, 0xa, 0x80, 0x8001, 0xb35}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001040)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000700)={0x8f4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0xff, 0x40, 0x3}, {0xfffc, 0x2, 0x1f, 0x2}, {0x8, 0x5, 0x89, 0x8}, {0x7, 0x7, 0x1, 0x7}, {0x3ff, 0x40, 0xc0, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x1, 0xff}, {0xaadc, 0x7, 0x81}, {0x8000, 0x40, 0x69, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$getflags(r2, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000010c0)={{0x1f, 0x6}, {0x1, 0x1}, 0x4, 0x0, 0xf8}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000011c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfd47c4f1a0c7deb5}, 0x20000000) 02:18:38 executing program 1: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x3ff, 0xfffffffffffffff9, 0x9, 0x1, 0x400, 0x3, 0x5, 0x9, 0xffff, 0x4, 0xfffffffffffffff9, 0x9, 0x3, 0x1}, 0x8, [0x0]}) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x2000) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f00000000c0)={0x5, 0x9, 0x9, 0x7, 0x80, 0x7}) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000b40)={0x9}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x101080, 0x0) ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f0000000bc0)={0xc1, 0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x24000004) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000d00)={0x6, 0x6, 0x8, 0x8, 0xfe, 0x1f}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x4000800) syz_genetlink_get_family_id$team(&(0x7f00000018c0), r0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001900)={0xffffffe1, 0xdde9, 0x4, 0x1, 0x5e, 0x89}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c051}, 0x8000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001a40)) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000001a80)=@type=0x3) r3 = syz_open_dev$vcsn(&(0x7f00000022c0), 0xff, 0x10000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xbc309c887b8ff842}, 0x8810) ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f0000002480)={0x4, 0x7f}) [ 81.191438] audit: type=1400 audit(1738030718.249:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:18:38 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) socketpair(0x23, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0xfa, 0x9, 0x2, 0x25, @mcast1, @local, 0x8, 0x700, 0x4, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xff, 0x4, 0x34, @dev={0xfe, 0x80, '\x00', 0x25}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0x1, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x91479126629b899f}, 0xc, &(0x7f0000000b80)={&(0x7f0000000440)={0x70c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6528}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8bd3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x51c, 0x4, 0x5, 0xffff}, {0xfa5, 0x9b, 0x86, 0x3}, {0x1, 0xbc, 0x40, 0x401}, {0x8001, 0x5, 0x0, 0x7ce6}, {0x800, 0x3, 0x4, 0x200}, {0x0, 0x1, 0x80, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008000) r7 = syz_open_dev$vcsn(&(0x7f0000000c00), 0x1c1ee05, 0x101801) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000c40)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000c80)={{0x0, 0x100, 0x47, 0x3, 0x8, 0x4, 0x41, 0x64cc4e99, 0x1f, 0xfffffff8, 0x13a, 0x7, 0x0, 0x80000001, 0x1000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = syz_open_dev$mouse(&(0x7f0000000d40), 0x8, 0x80081) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x44014}, 0xc010) r9 = syz_open_dev$vcsn(&(0x7f0000000e80), 0x7, 0x880) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r9, 0xc0a85352, &(0x7f0000000ec0)={{0x1, 0xff}, 'port0\x00', 0x9c, 0x40000, 0x7, 0x5, 0x81, 0xfffffffd, 0x0, 0x0, 0x0, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000f80)={{0x1f, 0x5}, 'port0\x00', 0x3c, 0x800, 0xb203, 0x8, 0x0, 0xfffffe00, 0x100, 0x0, 0x2, 0x2d}) 02:18:38 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x2a1000, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x70, 0x4e, [{{0x9, 0x4, 0x0, 0xca, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xfff8, 0x4, 0x1, {0x22, 0xabb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x20, 0x1b}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x40, 0x4, 0xff, 0x8}, 0x57, &(0x7f0000000140)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0x20, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x20, 0xfff}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x0, 0xf000, 0x2, [0xff0f, 0x0, 0xff00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "07142fe991cde8f839cfd2a317943d71"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x2, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3f, 0x2, 0x89c, 0xea}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc1a}}, {0x8c, &(0x7f0000000240)=@string={0x8c, 0x3, "5a41144f8327c4da2bfcc1adcaad2611df96217fd1d84c4c4fd8013a2e68ca65be20b2e2a74b457bdca9516711a3de1c5420b1a55ff7c9b97052fed0ab241dc7d172a327faa2750535a269fcb2d94442f9359d05a7ec274e3ac45b4b84d56b57732e4d39c4e06e7958d457f73d7e018a488d7d014d42083d704a2c2826d8a80fa2fb65d82448d6c16934"}}, {0x46, &(0x7f0000000300)=@string={0x46, 0x3, "fb3bb3cb12ed2fc43896284328b7ac65bd73684f221ceed8c0f91584a44842b7c2f040cd89a35a46b96ff624beacd3cd7b5d6420fa9908d2aa35adda114d3162e6e2b700"}}, {0x6, &(0x7f0000000380)=@string={0x6, 0x3, "f394ffb9"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x0, 0xf, 0x47, {0x47, 0x1a, "45fb4b74dd1c4da141d2dedb958e2dd3b18f720f114266e90beef96168d5875cd67e7b212acc0c1642cf82b1a6d494966eeaa8293ec397bec884634d10c33f2f307a233df4"}}, &(0x7f00000004c0)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "fd455d99df37108febd6b1fe7212e332b1d68e13051211c128fb836dbb4a4177f0044009408e1201517192c876bc61705a39a2cf6a0823e71422aee75739b1bfa7efc07ccdf36553c59a71b4f00839df7b54badf2ec999df6136994a1e9eb3c3a8f35dff4d727b887a899fe5da9e4c0268cbbf123f8654bb14c0d5cc188ee669201a7d73529593e35251489d7a7e8edfab909dbb3c84872628ede4233aef2125c00409dc3e56c3b747ecc3f206"}}, &(0x7f0000000580)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0x8, "3d4abb15"}, @main=@item_012={0x2, 0x0, 0x8, "d238"}, @local=@item_012={0x2, 0x2, 0x3, "7699"}, @local=@item_4={0x3, 0x2, 0x9, "e124e95f"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xdcd}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x40, 0x16, 0x2f, "0945d04d1e66b23eee1fc62bc1f38796e06cdbdc476bd10025352636ec0e2f738458c12c23f0574a7b554607979050"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)={0x20, 0x1, 0x49, "3d1aaba1b47248247807c6c80dde20f22211a6c06ca0eabb37c668c16c56660e6f81e5506db9730c9315ff3c403745eded87043fe1d4b8caefb7c8c364c64918a5d6c0c2fd9040109d"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x14}}) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x20bc, 0x5500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x6, 0x0, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x61b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1f, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x300, 0x1, 0x4, 0x40, 0x8, 0x5b}, 0x7e, &(0x7f0000000880)={0x5, 0xf, 0x7e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "7ae3428c1e3124e66f97490bb497aa9e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x0, 0x40, 0x8000, 0x5}, @ptm_cap={0x3}, @generic={0x50, 0x10, 0x2, "0d7766337e3a98c0450ff9567fcb34358e996df78b79bddef2c80d7f6fe7ba1b614a90392127ba72de798f2d05b42824c0f779185bc0e0734675c80f97b24e69cf516b1a761f2fbb4cce5efdcd"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0xc, 0x3ff}]}, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x422}}]}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f00000009c0)={0x40, 0x5, 0x2e, {0x2e, 0x7072f7aa68b7999, "7207022f2c36e788d3252d572ba6b69653cd1b786098229ab4f9a7e543f839e77438ea44dca5b36ce85177c4"}}, &(0x7f0000000a00)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "280e7ca14b7816c43bfc790ab50bb8fcd8e9d2d5099eaa4fdd5d7835bc31d6c218956f402d020a7587a41ac79f4eadb38647dc1a7ceb1c4ca733ac8d696b49c733ca68ba82a2bb8c7f09eeb3fe23090dd032387f8a64b8dd1f"}}, &(0x7f0000000a80)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, 'v*-/'}, @global=@item_4={0x3, 0x1, 0xa, "06e169fa"}, @main=@item_4={0x3, 0x0, 0x9, "8eb1a09d"}, @main=@item_012={0x1, 0x0, 0x9, 'u'}, @local=@item_4={0x3, 0x2, 0x2, "fdf4e257"}, @main=@item_012={0x2, 0x0, 0xb, "1db8"}, @local=@item_012={0x2, 0x2, 0x1, '!r'}, @main=@item_4={0x3, 0x0, 0xb, "e4ad910e"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff9, 0x7, 0x1, {0x22, 0xaf2}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b40)={0x20, 0x3e, 0x76, "c030f1e6b98141820d43fc5fe974c5e3539cf623090466454789e9ded0947e242b71adb8d3b34c56f0d7d596d9133abefa54c7a0791c919f997843d298fa55b55a5956756ce605e2e0dbd09ded7bd0ab551ca7e9a59730eabfcbbe8e52b85f7dd51c512c41ce0e9691593cd53d4c0596063d5f7f00b2"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000c40)={0x20, 0x1, 0x86, "2bebfd9112653f4a6059a6851b75faf68c38c43dfc1844d4c199f3bbe3a40ff3d04f2c40ef213be513e26afbbfee19552ce8bd456aeb0ab032be2d226d86aae7fa07ef2aa8ee2df542599238d3c14851a5c32c143084de307bf00bfb154c509c8ed862bef8efb7489f3000f8150817b0a4ca3dc087e3b08598af0268eee61a520ab7e67a1ff4"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x80}}) fsetxattr$security_evm(r2, &(0x7f0000000d80), &(0x7f0000000dc0)=@ng={0x4, 0x2, "73066e9008279a065d9e"}, 0xc, 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9f79) syz_usb_control_io$hid(r1, &(0x7f0000001080)={0x24, &(0x7f0000000e00)={0x40, 0x3, 0xdb, {0xdb, 0x2, "354957607ac7db1f219568f17ccb87a14664f4d21535d76c10dc09cede0fb61c5daf57f70d866dcd8d14b0affa8746b39cdfbf18c6913c74237038c2a12939c62ea845e0789e2953765e9e318ffcbe032b63f82f0b174b61f45f78cc390bb18cb29ed0bf29305fc1a34c9ab59570fe5f29788bdf47fb24c38c8abdd51ae26386ad98bf367ecdb7087bd6798432d1434ec61ceb3a8b332b0734f60aea6e33c80d6f58599cdf84b66860ee15e9a829d89ff433cec2a09eb2abded9fdbadeb4507cda1413430336cc16f4b11f526390d0f9a0ed0b8536ac5f183a"}}, &(0x7f0000000f00)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "5422796bf66391c509ce164f78af5398d6b0a50b0befda59d6fe07da36726ce89b2e2238fd2cd709bab17d1dda19383c557e3a1419ecde9ef34dcdd9691b3dd3bc5f76dd3d080cd32f2c33b056255f7da92f5f2f48514dc3e1c724038096b5dc6821833acd3be971e6591b0d16cff28ce90484bdfafe40f57446a5a39f6d3f268e183f01a14434a11d89c073602a0a20ab2f0ce793c1beb6907166ddbf7ee1816d90718eb7d540a0a2a9de0285b46253a7a083c5dd93f718c173eb20e56c5481fe833de857d04d6d9d26c7220f5f1656f10e785a620ace9eb1d8d5e699fce3"}}, &(0x7f0000001000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "7f9f224e"}]}}, &(0x7f0000001040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x1, 0x1, {0x22, 0x2a9}}}}, &(0x7f0000001300)={0x2c, &(0x7f00000010c0)={0x0, 0xf, 0x91, "3ec9f985ac14aa5c1b7bfb40c871bcfc69cab90b7e50d09a1b270263c5d27a6d61d824d86e8d5db8aa26caaad4fc2db5e7279a3fb05ceccb1c4086e5fc91773e47832e054be70d62e61e1f76be60688424f56f4848e95e3955ae671cd9d443152de625a00242363b4df4a1fdf8e02930df0ddee7dd1e4edb1e75c61b1595dc0d941c39c6c8d47d34d3b67a0c0d2d65ca42"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001200)={0x20, 0x1, 0xaf, "0528340a7031a77d667d15c61916c426de9b19d649c9a65532216b38d18a517569138429e7361863e799cf91863fee486ac8e3a3ad481a8b3b2e5f5525709c2f6ce210427bd2c2a7bf29bdbd763c743c31c3298efd6b94711176fbbd9ea4c5348d258abaabddcb3087506ee04e382dadfdc2921b6c04f8fb00b1a92860d1e512f492aa72849e5cbbc5b50ea3ac7828408c755548a170fcae5d97c0c8ad4d084bb86a385049f85052ede6fd37b89093"}, &(0x7f00000012c0)={0x20, 0x3, 0x1, 0x1c}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001340)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000014c0)={0x14, &(0x7f0000001380)={0x40, 0x31, 0xbd, {0xbd, 0x0, "fe0349184a3466183267c8fd13b968e26f4528d2eff5253fb2bb3ce08aa93941debcf0a2bce3f19c3827b52d6429f3a92106ad41966e49b8443e6c90ef4dd630d330e6b7b3c7a09d9344c8e64ba76810db71f8909bf72bc42b887a4d0405229005e66af96916f7f08b400ad842cb9fc632e5ee7eb0da7382d133a7034862d29cbffbf0d68fd864ac54daff8c89d3e9e7dd84111ab68ba9c7a202ad189e247735035d984403eed00a76cf0fc699b28a7f0ffacdc9c30d95f255e461"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000001780)={0x44, &(0x7f0000001500)={0x20, 0xc, 0x92, "af08e987abf92ae1ee4d76b9993e2b79f65a8d879e97d2206e7fc1b8ab9a00d118abed830b95c88811912b93cc10954f1052ad733d4d2bde255b32cfd257dc2be52ae357fa9053e34fa84ee2104bdf20b6c856d73bdd33a198d95b564909a1c502b15fea04cd50d68ed51d493efd36be4fedd2e199b080f491320d8de82eff60b33ec49f91e5ee79b2b98e02603c451e6f8d"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0xaa}, &(0x7f0000001640)={0x20, 0x81, 0x1, "d6"}, &(0x7f0000001680)={0x20, 0x82, 0x2, "04c7"}, &(0x7f00000016c0)={0x20, 0x83, 0x3, "9ff4a6"}, &(0x7f0000001700)={0x20, 0x84, 0x4, "78b00e80"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "8422ce"}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001840), 0x48000, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000001880), 0xc7fa, 0x801) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x80080, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001900), 0x101040, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001a80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0xac, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1a7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xac}, 0x1, 0x0, 0x0, 0x4c890}, 0x4) 02:18:38 executing program 4: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x89851622798421ed}, 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x1010, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "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", ["", "", "", "", "", ""]}, 0x1010}}, 0x8040) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001100), 0xc, &(0x7f0000001580)={&(0x7f0000001140)={0x428, 0x3f4, 0x4, 0x70bd2b, 0x25dfdbfb, {0x2, 0x2, 0x1d, [0x0, 0x8, 0x3, 0x1, 0x202, 0x6, 0x2, 0x1, 0x3ff, 0x7fffffff, 0x7, 0x200, 0x80, 0x3, 0x5, 0x2, 0x10000, 0x6, 0x800, 0x0, 0x144, 0x1, 0x9, 0x40, 0x8000, 0x7, 0x67, 0x9ff1, 0x7, 0x840, 0x1785, 0x8, 0xc53f, 0x3f, 0x2, 0x5d, 0x5, 0x35, 0x0, 0x101, 0x8001, 0x101, 0x0, 0x0, 0x7, 0x101, 0xa2bb, 0x4, 0x9, 0x7ff, 0x0, 0xffff, 0xb81, 0x63f, 0xc49, 0x1, 0x4, 0x4b3, 0xffff, 0x6, 0x1, 0x10, 0x3, 0x4], [0x9, 0x2, 0xfffffffa, 0x7f, 0x1, 0x1f, 0x81, 0x57, 0x7bb1, 0x3, 0x8, 0x9, 0x0, 0x401, 0x1, 0x1, 0x6, 0x20, 0x10001, 0x80d2, 0x9, 0xffffffff, 0x0, 0x0, 0x200, 0x7, 0x27, 0x40, 0x7fff, 0x2, 0x3f, 0x4, 0x4, 0xfd, 0x9, 0x401, 0x6, 0xfe99, 0x5, 0xde, 0x9, 0x7, 0x7fff, 0x6bb, 0xffff0001, 0x5ac, 0x200, 0x4, 0x1, 0x5, 0x9, 0xffff8000, 0x7fffffff, 0x5, 0x2, 0x2, 0x8, 0x39e2, 0x2, 0x1, 0x60000000, 0x0, 0x3, 0x1], [0x0, 0x9, 0xfffffffa, 0xcc30, 0x2e, 0xb83, 0x8, 0x0, 0x7, 0x400, 0x706dacc4, 0x8, 0x10001, 0x4, 0xffffffff, 0x1, 0x10000, 0x4, 0x4cb, 0x9, 0x8, 0x4, 0x1f, 0x100, 0x7, 0xffffffff, 0x0, 0x9d2, 0x0, 0x3, 0x7ff, 0x7d, 0x101, 0x20, 0x0, 0x10000, 0x8, 0x401, 0x6, 0xfffffffa, 0x80000000, 0x0, 0x2, 0x8000, 0xfffffffc, 0x3, 0x8, 0x1, 0x8000, 0x3, 0x800, 0x630, 0x746, 0x2, 0x8, 0x8563, 0x8, 0x0, 0x0, 0xfffff78b, 0x2, 0x7fffffff, 0x7fffffff], [0xf5f6, 0xeb, 0x4, 0x9, 0x401, 0xc3, 0x3, 0x3, 0xb35, 0xffffff46, 0x10001, 0xff7, 0x2c7f, 0x6, 0x6, 0x7, 0xfffffffd, 0x7fffffff, 0x8000, 0xff, 0x6, 0x0, 0x2, 0xef, 0x9, 0x4, 0x7b5e, 0xfffffffb, 0x7, 0x1, 0x4, 0x2, 0x4, 0x80000001, 0x0, 0xecb, 0x7f, 0x9, 0x79b, 0x9, 0x74ce, 0x1, 0x80000000, 0x9, 0x0, 0xf3, 0x6, 0x1, 0x1f, 0x6, 0x5, 0x10000, 0x5, 0x6cd, 0x4, 0x1, 0x1, 0x80, 0x3f, 0x7fff, 0x8, 0x8000, 0x7ff, 0x80000001], 0x6, ['@\x00', '\x11\\,\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, 0x0, 0xb23, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x511}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044801}, 0x4) read$hidraw(0xffffffffffffffff, &(0x7f0000001800)=""/15, 0xf) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001840), r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0xa000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x814) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000d805}, 0x40045) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xa0, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:klogd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001d80), 0x20000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000001dc0)={{0x1, 0x0, 0x4, 0x2, 0x7f}, 0x0, 0x81}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000001e40)={0x3, 0x1, 'client0\x00', 0xffffffff80000004, "3610fe6d897175ca", "f33c8e480d12d5b841e802c2990d50f8dafcd780369dbeb22a8c619dba3b57f0", 0x3, 0x6}) 02:18:38 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:dhcpc_state_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:textrel_shlib_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x6c8a8a100e96f3e) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80080200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000380)) r2 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x5f, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)={0x490, 0x3f4, 0x200, 0x70bd29, 0x25dfdbff, {0x4, 0x2, 0x40, [0x6f9, 0x2, 0x99, 0xff, 0x1000, 0x4, 0xfd2, 0x101, 0x8, 0x8, 0x0, 0xa4, 0x2, 0x1000, 0xdab, 0x2, 0x6, 0x80000000, 0xfa3, 0xffffffff, 0x3, 0x3, 0xfffffff9, 0x8, 0x7, 0xfffffffb, 0x0, 0x1, 0x7, 0x6, 0x80000000, 0x8, 0xf7a0, 0x4, 0xa1eb, 0x8d, 0x8, 0x0, 0x52, 0x9, 0x8, 0x3, 0xe4f, 0x1, 0x101, 0x8, 0x101, 0x9, 0x100, 0x8001, 0x5, 0x6f53166b, 0x6a, 0x6, 0x1f, 0x9, 0x59e, 0x0, 0x6, 0x4, 0x6, 0xeeb, 0x0, 0x6], [0x3, 0x3f, 0x6, 0x7f, 0x7, 0x7f, 0xffff, 0x1ff, 0x3a, 0x1, 0x1000, 0x4, 0xffff, 0x1000, 0x80, 0xc2fc, 0x0, 0x5, 0x7f, 0x1000, 0x8bc, 0x6, 0xc4c8, 0x7ff, 0xffff8001, 0xa0000, 0x7, 0x40, 0x400, 0x9651, 0x7, 0x10b, 0x3, 0x0, 0x10000, 0x10001, 0x0, 0x5, 0x7fffffff, 0x7, 0x3b1, 0xaf79, 0x400, 0x7, 0x6, 0x2, 0x23, 0xf588, 0xfc9e, 0x10000, 0xd5, 0x6, 0x7fff, 0x0, 0x44, 0xdaa, 0x10000, 0x9, 0x3f, 0x82, 0xd4cf, 0x0, 0xb96, 0x3], [0x3, 0xccf4, 0x8, 0x9, 0x5, 0x1, 0x6, 0x1, 0xfff, 0x101, 0x3f, 0x7f, 0x0, 0x5, 0x3749, 0x0, 0xd46, 0x6, 0x6, 0x3, 0xe2, 0x1, 0xfffffbe9, 0x0, 0x6, 0xfffffffe, 0x3, 0x3d1, 0x9, 0x80000000, 0x6, 0x7, 0x80, 0x8, 0xfffffc01, 0x721c21c, 0x5, 0xafb, 0x1000, 0x3f0, 0xa4ee, 0x6, 0x2, 0x2, 0xc3fb, 0x9, 0x0, 0x6, 0x101, 0x401, 0xb2, 0x7f, 0xab, 0x38a1326f, 0x9588, 0x8, 0x4, 0x8001, 0xb, 0x80000000, 0x0, 0x3, 0x8, 0x6], [0x1, 0x2, 0x800, 0x466f, 0xa3, 0x4, 0x4, 0x101, 0x7, 0x6, 0x7, 0x8b6, 0x7f, 0x5, 0x200, 0x46aa8889, 0xff, 0x7fffffff, 0xb85de28f, 0x7, 0x200, 0x9, 0x0, 0x9, 0x169, 0x81, 0x1, 0x1, 0x10000, 0xffff0000, 0x1, 0x401, 0x4, 0x1000, 0x200, 0xad7, 0x0, 0x7, 0x1, 0x8, 0x4, 0x401, 0x5, 0x206e, 0x2f84, 0x81, 0x7a7, 0x6, 0xd8, 0x4, 0x9, 0x4, 0x1e, 0x800, 0x7ff, 0xffff, 0x2, 0xffff, 0xffff, 0x0, 0x0, 0x1, 0x8, 0xffff], 0x6e, ['system_u:object_r:textrel_shlib_t:s0\x00', '\x00', 'system_u:object_r:textrel_shlib_t:s0\x00', 'system_u:object_r:dhcpc_state_t:s0\x00']}, ["", "", ""]}, 0x490}, 0x1, 0x0, 0x0, 0x4000}, 0x1) getsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4ec}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4101}, 0x20008004) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x90, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) 02:18:38 executing program 6: ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x5) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x40]) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000080)=""/66) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x281c2, 0x0) fcntl$getflags(r0, 0x401) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000140)=""/149) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x8, 0x200000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000280)={{0x0, 0x7fff, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x6, 0xff, 0x94, 0x5, 0x3ff, 0xffffffff, 0xfffffffffffffffa, 0x7}, 0x10, [0x0, 0x0]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x1010c0, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000340)={0xf49, 0x4, 0x10001, 0x1, 0x9, 0x3}) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000380)) r3 = syz_open_dev$hidraw(&(0x7f00000003c0), 0x1, 0x200) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000400)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40084}, 0x4000001) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f00000005c0)=""/176) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000680)=@ready={0x0, 0x0, 0x8, "15651439", {0x1, 0x1, 0x400, 0x0, 0x2}}) 02:18:38 executing program 7: rt_sigaction(0x1a, &(0x7f00000000c0)={&(0x7f0000000000)="c4027146adf6a200003e3ef24199c4c269074208653e410f2eb10c000000c4c14961780a2665f046f790f65741c044d2b2f8ffffff66450f0fccb745dae967f20f1bce", 0x88000006, &(0x7f0000000080)="66420f3a62f002660f3805a503000000660fdc5ce20f6e66470fd930c4a2212f1500000100c4037917c8044183e2fe0f860000000067450ff14800", {[0x8000]}}, &(0x7f0000000180)={&(0x7f0000000100)="c4c1e972d56966400f38333b3e36f20f7c6300660fc6549f0000c40191de89feefffff0ffe7c7577f26f0f484a12c4613572e5140fc6c015", 0x0, &(0x7f0000000140)="c422f921d70fa0c441b568c7646745d009c403790560c104c461fc77c4623d0d308f8808959d35000000318faac012cbbfc40609f2410f5c7102"}, 0x8, &(0x7f00000001c0)) rt_sigsuspend(&(0x7f0000000200)={[0x3ff]}, 0x8) rt_sigaction(0x4, &(0x7f00000002c0)={&(0x7f0000000240)="660f7c0c322e2e36410f1b250c0000000fee33c462b5067610c4211f7ddb450fe15575c482219e08f78def000000ffff0000f2400f2dfbc4c14c146d0f", 0x10000001, &(0x7f0000000280)="c4e1fd11bf00000100dd37430f01d7f3d0dbc462793126c4e1a960a500000000f30f2d2c65001000020f95e4c4427d313ff246ad", {[0x7]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigsuspend(&(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8) rt_sigsuspend(&(0x7f0000000380)={[0x5]}, 0x8) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000003c0)={0x81, 0x1}) rt_sigsuspend(&(0x7f0000000400)={[0x8]}, 0x8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) rt_sigaction(0x39, &(0x7f0000000580)={&(0x7f0000000480)="470f01ee8fa978c7910910c0fe8f697893e967646566440fdaac8900000080f2470f78f4b906c46299a9a39a000000d8c1c483ad7cb4462f4f000087362621481146d218", 0x1, &(0x7f0000000500)="66440fd12db4d80ac7c4c29d3895a79b1509c44201a67cc72ac461fe105a10c4e105d4e6c4e279596df9c4018a5dabeb0000003e660f64a7e39a8837c422fd337c2800660f38dd609d", {[0x7]}}, &(0x7f0000000640)={&(0x7f00000005c0)="c4e1b5e3ebc461f5fbdac441b5fb990e000000c7f8f3ffffffc4617b10f68fc978c16c460dc403555ed000f24a0f2cbe2ffb0000f3440f523c43c4017be6cd", 0x0, &(0x7f0000000600)="c4a22d9254deb2f2440faef5f08104757400000004800000f3afc42261920cfb660f2d70b1440f69cc0fae050000008041e3d8f33e47332500000000"}, 0x8, &(0x7f0000000680)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x2080c1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000700), 0x4) rt_sigsuspend(&(0x7f0000000740)={[0xfffffffffffffff7]}, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)=0x8, 0x12) rt_sigaction(0xb, &(0x7f0000000880)={&(0x7f00000007c0)="c4a2690c710745d9f3410fc7f13e2e66420f381441fec4639169a70010c0fe00460f1c03c4a2419eb212c2000065660f57b0f690000067c16b4e06c483614ace6a", 0x90000007, &(0x7f0000000840)="c4417ff061002a9d0251000066450f72f5888f297c81810010c0fe67f3460f1ed6c44151eb3764abf2e0fd460fae0a65438c690d", {[0x3]}}, &(0x7f0000000940)={&(0x7f00000008c0)="d1e4c4621d3f963b0000000f574a02400f00e3f2a5c4413015140ec4c269ba4c7c992e3666ded926416800800000c441a95f7109", 0x0, &(0x7f0000000900)="c4a2fd083bf2476f3e410f72f50066440f383c23c4c2459816dbd6400f8bf2dfe84726420f0db8000000003666f3400b49cec4030122750ebd"}, 0x8, &(0x7f0000000980)) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c001}, 0x4) rt_sigsuspend(&(0x7f0000000ac0)={[0x2]}, 0x8) timerfd_create(0x7, 0x80800) rt_sigsuspend(&(0x7f0000000b00)={[0x8]}, 0x8) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000b40)=""/248) rt_sigaction(0x39, &(0x7f0000000cc0)={&(0x7f0000000c40)="f26667d9f866470f38220c82daddc4427d20f5f22e430113c442792cae0f000000c4217a1618c461b95721dde7c401f97e6ff0", 0x80000000, &(0x7f0000000c80)="c4c2a13c3d000000000f81000000800fa0edf20f10610065f2e09ef30f1ec5c441fc5b4100c4a3e9cf14b800c4a2f1ae17", {[0xf5cc]}}, &(0x7f0000000d80)={&(0x7f0000000d00)="66470f1558124a0f38f9942602000000c482fd24f3f22e44c1e8596726450f0001c402159dd880be000000006b470ff1ecd1d8660f381025d77c41ec", 0x0, &(0x7f0000000d40)="c4c2f99703235d0d400f0f97b1c2fff4a08f497880e020f9c4817ff05b0ad0eb66450f3840df260fb6a20f000000400fadda"}, 0x8, &(0x7f0000000dc0)) [ 82.529171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.535897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.538237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.543955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.549877] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.552278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.654156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.659953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.662446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.667881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.671602] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.674024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.678152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.681568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.684412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.701822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.713164] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.715172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.728530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.742063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.751214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.767213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.776180] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.782917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.785952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.794078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.798983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.807078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.810869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.817631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.827709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.842989] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.843298] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.850028] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.851560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.854911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.859872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.872679] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.885291] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.891901] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.934717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.939400] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.941773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.946180] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.948121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.949916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.960948] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.963100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.615053] Bluetooth: hci0: command tx timeout [ 84.741996] Bluetooth: hci2: command tx timeout [ 84.742662] Bluetooth: hci1: command tx timeout [ 84.805580] Bluetooth: hci3: command tx timeout [ 84.934593] Bluetooth: hci4: command tx timeout [ 84.934618] Bluetooth: hci5: command tx timeout [ 84.997709] Bluetooth: hci6: command tx timeout [ 85.061605] Bluetooth: hci7: command tx timeout [ 86.662770] Bluetooth: hci0: command tx timeout [ 86.789585] Bluetooth: hci1: command tx timeout [ 86.790091] Bluetooth: hci2: command tx timeout [ 86.853659] Bluetooth: hci3: command tx timeout [ 86.981634] Bluetooth: hci4: command tx timeout [ 86.981655] Bluetooth: hci5: command tx timeout [ 87.045732] Bluetooth: hci6: command tx timeout [ 87.110585] Bluetooth: hci7: command tx timeout [ 88.710767] Bluetooth: hci0: command tx timeout [ 88.838555] Bluetooth: hci2: command tx timeout [ 88.839045] Bluetooth: hci1: command tx timeout [ 88.901580] Bluetooth: hci3: command tx timeout [ 89.029647] Bluetooth: hci5: command tx timeout [ 89.030160] Bluetooth: hci4: command tx timeout [ 89.093691] Bluetooth: hci6: command tx timeout [ 89.157565] Bluetooth: hci7: command tx timeout [ 90.757648] Bluetooth: hci0: command tx timeout [ 90.885724] Bluetooth: hci2: command tx timeout [ 90.886219] Bluetooth: hci1: command tx timeout [ 90.950593] Bluetooth: hci3: command tx timeout [ 91.077673] Bluetooth: hci4: command tx timeout [ 91.077800] Bluetooth: hci5: command tx timeout [ 91.143520] Bluetooth: hci6: command tx timeout [ 91.205595] Bluetooth: hci7: command tx timeout [ 140.010774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.011576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.527707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.528323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.710576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.711255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.027168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.028039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.463520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.464199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.711921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.712645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.081856] [ 142.082086] ====================================================== [ 142.082598] WARNING: possible circular locking dependency detected [ 142.083106] 6.13.0-next-20250124 #1 Not tainted [ 142.083497] ------------------------------------------------------ [ 142.084314] kworker/u8:0/11 is trying to acquire lock: [ 142.085549] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.087451] [ 142.087451] but task is already holding lock: [ 142.089007] ffff88800d9e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.090843] [ 142.090843] which lock already depends on the new lock. [ 142.090843] [ 142.092188] [ 142.092188] the existing dependency chain (in reverse order) is: [ 142.092806] [ 142.092806] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 142.093368] __mutex_lock+0x13d/0xb50 [ 142.093767] wiphy_register+0x1b2e/0x25d0 [ 142.094190] ieee80211_register_hw+0x23a4/0x3d60 [ 142.094654] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 142.095140] init_mac80211_hwsim+0x389/0x870 [ 142.095590] do_one_initcall+0xf9/0x640 [ 142.096004] kernel_init_freeable+0x53d/0x7a0 [ 142.096463] kernel_init+0x1e/0x2d0 [ 142.096826] ret_from_fork+0x48/0x80 [ 142.097196] ret_from_fork_asm+0x1a/0x30 [ 142.097621] [ 142.097621] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 142.098142] __lock_acquire+0x29fd/0x4580 [ 142.098559] lock_acquire+0x19b/0x520 [ 142.098944] __mutex_lock+0x13d/0xb50 [ 142.099339] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.099869] unregister_netdevice_queue+0x224/0x2e0 [ 142.100344] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.100828] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.101299] ieee80211_unregister_hw+0x55/0x3a0 [ 142.101757] hwsim_exit_net+0x3a0/0x730 [ 142.102160] ops_exit_list+0xb3/0x180 [ 142.102551] cleanup_net+0x546/0xad0 [ 142.102936] process_one_work+0x8ee/0x1a10 [ 142.103374] worker_thread+0x674/0xe70 [ 142.103790] kthread+0x3ab/0x720 [ 142.104158] ret_from_fork+0x48/0x80 [ 142.104536] ret_from_fork_asm+0x1a/0x30 [ 142.104960] [ 142.104960] other info that might help us debug this: [ 142.104960] [ 142.105604] Possible unsafe locking scenario: [ 142.105604] [ 142.106091] CPU0 CPU1 [ 142.106480] ---- ---- [ 142.106867] lock(&rdev->wiphy.mtx); [ 142.107213] lock(rtnl_mutex); [ 142.107708] lock(&rdev->wiphy.mtx); [ 142.108241] lock(rtnl_mutex); [ 142.108557] [ 142.108557] *** DEADLOCK *** [ 142.108557] [ 142.109052] 4 locks held by kworker/u8:0/11: [ 142.109426] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 142.110290] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 142.111120] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 142.111892] #3: ffff88800d9e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.112767] [ 142.112767] stack backtrace: [ 142.113139] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 142.113176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.113198] Workqueue: netns cleanup_net [ 142.113239] Call Trace: [ 142.113249] [ 142.113260] dump_stack_lvl+0xca/0x120 [ 142.113319] print_circular_bug+0x47b/0x750 [ 142.113366] check_noncircular+0x2e9/0x3c0 [ 142.113408] ? __pfx_check_noncircular+0x10/0x10 [ 142.113452] ? srso_return_thunk+0x5/0x5f [ 142.113508] ? find_held_lock+0x2c/0x110 [ 142.113568] ? lockdep_lock+0xba/0x1b0 [ 142.113625] ? __pfx_lockdep_lock+0x10/0x10 [ 142.113687] __lock_acquire+0x29fd/0x4580 [ 142.113741] ? __pfx___lock_acquire+0x10/0x10 [ 142.113785] ? __pfx_try_to_wake_up+0x10/0x10 [ 142.113834] lock_acquire+0x19b/0x520 [ 142.113877] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.113926] ? __pfx_lock_acquire+0x10/0x10 [ 142.113971] ? srso_return_thunk+0x5/0x5f [ 142.114026] ? lock_release+0x20f/0x6f0 [ 142.114069] ? srso_return_thunk+0x5/0x5f [ 142.114124] ? lock_is_held_type+0x9e/0x120 [ 142.114179] ? srso_return_thunk+0x5/0x5f [ 142.114238] __mutex_lock+0x13d/0xb50 [ 142.114290] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.114335] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.114381] ? srso_return_thunk+0x5/0x5f [ 142.114436] ? synchronize_rcu_expedited+0x38a/0x420 [ 142.114481] ? __pfx___mutex_lock+0x10/0x10 [ 142.114534] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.114589] ? srso_return_thunk+0x5/0x5f [ 142.114644] ? kasan_quarantine_put+0x84/0x1e0 [ 142.114705] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.114740] ? srso_return_thunk+0x5/0x5f [ 142.114800] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.114845] ? __virt_addr_valid+0x2e8/0x5d0 [ 142.114898] ? __pfx_lock_release+0x10/0x10 [ 142.114943] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 142.114989] ? find_held_lock+0x2c/0x110 [ 142.115050] ? srso_return_thunk+0x5/0x5f [ 142.115109] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 142.115170] ? srso_return_thunk+0x5/0x5f [ 142.115225] ? lock_release+0x20f/0x6f0 [ 142.115269] ? __pfx_lock_release+0x10/0x10 [ 142.115312] ? srso_return_thunk+0x5/0x5f [ 142.115367] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.115414] ? srso_return_thunk+0x5/0x5f [ 142.115475] unregister_netdevice_queue+0x224/0x2e0 [ 142.115518] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 142.115562] ? up_write+0x195/0x520 [ 142.115617] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.115669] ? srso_return_thunk+0x5/0x5f [ 142.115728] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.115766] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 142.115805] ? srso_return_thunk+0x5/0x5f [ 142.115860] ? srso_return_thunk+0x5/0x5f [ 142.115915] ? synchronize_rcu+0x1ff/0x260 [ 142.115958] ieee80211_unregister_hw+0x55/0x3a0 [ 142.116002] hwsim_exit_net+0x3a0/0x730 [ 142.116044] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.116085] ? srso_return_thunk+0x5/0x5f [ 142.116140] ? netdev_run_todo+0x788/0x1040 [ 142.116189] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.116232] ops_exit_list+0xb3/0x180 [ 142.116274] cleanup_net+0x546/0xad0 [ 142.116319] ? __pfx_cleanup_net+0x10/0x10 [ 142.116373] process_one_work+0x8ee/0x1a10 [ 142.116446] ? __pfx_lock_acquire+0x10/0x10 [ 142.116491] ? __pfx_process_one_work+0x10/0x10 [ 142.116550] ? srso_return_thunk+0x5/0x5f [ 142.116605] ? move_linked_works+0x172/0x270 [ 142.116649] ? srso_return_thunk+0x5/0x5f [ 142.116704] ? assign_work+0x196/0x240 [ 142.116762] worker_thread+0x674/0xe70 [ 142.116820] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.116872] ? __pfx_worker_thread+0x10/0x10 [ 142.116932] kthread+0x3ab/0x720 [ 142.116984] ? __pfx_kthread+0x10/0x10 [ 142.117036] ? srso_return_thunk+0x5/0x5f [ 142.117091] ? finish_task_switch.isra.0+0x206/0x840 [ 142.117142] ? __pfx_kthread+0x10/0x10 [ 142.117196] ret_from_fork+0x48/0x80 [ 142.117227] ? __pfx_kthread+0x10/0x10 [ 142.117279] ret_from_fork_asm+0x1a/0x30 [ 142.117346] [ 144.300200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.302229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.305234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.310249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.314914] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.317074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.357040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.360600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.367876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.376035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.381960] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.385766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.411770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.415593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.423264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.427586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.435133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.436787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.478162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.483981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.505406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.506915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.508490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.512246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.513688] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.515212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.522787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.524830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.543727] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.546223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.549601] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.555116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.563824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.568561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.571953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.574246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.579298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.584780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.586283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.605157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.623766] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.627193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.637683] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.638873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.648347] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.655943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.657165] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.672049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.374653] Bluetooth: hci0: command tx timeout [ 146.437554] Bluetooth: hci1: command tx timeout [ 146.502625] Bluetooth: hci2: command tx timeout [ 146.630584] Bluetooth: hci3: command tx timeout [ 146.694157] Bluetooth: hci4: command tx timeout [ 146.694813] Bluetooth: hci5: command tx timeout [ 146.757555] Bluetooth: hci7: command tx timeout [ 146.758139] Bluetooth: hci6: command tx timeout [ 148.421660] Bluetooth: hci0: command tx timeout [ 148.485877] Bluetooth: hci1: command tx timeout [ 148.551486] Bluetooth: hci2: command tx timeout [ 148.677505] Bluetooth: hci3: command tx timeout [ 148.741610] Bluetooth: hci5: command tx timeout [ 148.742046] Bluetooth: hci4: command tx timeout [ 148.805659] Bluetooth: hci7: command tx timeout [ 148.806077] Bluetooth: hci6: command tx timeout [ 150.469678] Bluetooth: hci0: command tx timeout [ 150.535493] Bluetooth: hci1: command tx timeout [ 150.597502] Bluetooth: hci2: command tx timeout [ 150.725661] Bluetooth: hci3: command tx timeout [ 150.789591] Bluetooth: hci5: command tx timeout [ 150.790028] Bluetooth: hci4: command tx timeout [ 150.854264] Bluetooth: hci6: command tx timeout [ 150.854781] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 02:19:39 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001ce9046 R10=0000000000000061 R11=3a6b636f6c206762 R12=0000000000000061 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffecd090a28 CR3=0000000015e70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004136f91000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f9eb2067000 RCX=ffffffff81209c92 RDX=ffff8880164bd340 RSI=00007f9eb2067000 RDI=ffffffffff600000 RBP=0000000000000001 RSP=ffff88801b1074a8 R8 =ffffffff86772d82 R9 =ffff88801b107568 R10=0000000000000001 R11=0000000000000003 R12=ffff88801b1075f0 R13=0000000000000000 R14=ffff8880164bd340 R15=0000000000082cc0 RIP=ffffffff81719e60 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9eb1ace8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b09f8d0090 CR3=000000001b0c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=4145525f4b434f4c425f57485f4c4c49 XMM05=46520068746f6f7465756c623d455059 XMM06=414e5f4c4c494b4652006c6c696b6672 XMM07=66722f306963682f68746f6f7465756c XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000