Warning: Permanently added '[localhost]:63558' (ECDSA) to the list of known hosts. 2025/01/30 04:10:19 fuzzer started 2025/01/30 04:10:20 dialing manager at localhost:36977 syzkaller login: [ 77.749037] cgroup: Unknown subsys name 'net' [ 77.867006] cgroup: Unknown subsys name 'cpuset' [ 77.902287] cgroup: Unknown subsys name 'rlimit' 2025/01/30 04:10:38 syscalls: 205 2025/01/30 04:10:38 code coverage: enabled 2025/01/30 04:10:38 comparison tracing: enabled 2025/01/30 04:10:38 extra coverage: enabled 2025/01/30 04:10:38 setuid sandbox: enabled 2025/01/30 04:10:38 namespace sandbox: enabled 2025/01/30 04:10:38 Android sandbox: enabled 2025/01/30 04:10:38 fault injection: enabled 2025/01/30 04:10:38 leak checking: enabled 2025/01/30 04:10:38 net packet injection: enabled 2025/01/30 04:10:38 net device setup: enabled 2025/01/30 04:10:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 04:10:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 04:10:38 USB emulation: enabled 2025/01/30 04:10:38 hci packet injection: enabled 2025/01/30 04:10:38 wifi device emulation: enabled 2025/01/30 04:10:38 802.15.4 emulation: enabled 2025/01/30 04:10:38 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 04:10:39 starting 8 fuzzer processes 04:10:39 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x4c442) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4004000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x138, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x17}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x24022008}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r1, 0x3, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000600), 0x9, 0x2) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000a00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ac0)={0x678, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6644}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x90}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6e1}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf0f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x8, 0x3, 0x6}, {0x3, 0xe6, 0x8f, 0x7}, {0x7, 0x8, 0x20, 0x7}, {0x8, 0x1, 0x0, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x31}}, {0x8}}}]}}]}, 0x678}, 0x1, 0x0, 0x0, 0xc000}, 0x8c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001200)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x1b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8e67}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40008009}, 0x4840) 04:10:39 executing program 1: r0 = fork() mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1a, 0x4, @tid=r0}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21100802}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x40010) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="7bc2821da996d53fdb2d5a1f01890fe9b1ce33ad01de2d5c5cc9ede07c4c468c1f56f29b750058295aefeb4c5fbac07a4d69ea0c893344710cacc537e80979c3f6cb5b9c3fa5dbb7d7d3abab3800b3e27aafc7c6543591b4aacfa5fc36f62c500155c3df8f644da80d4eec53312192852d7d0eb1599816235ec0118e0e967afb1a43d6a9a3144891b4bb671d5f3181f5255e0db3482f419caddc0c15dc9a2a0f99c353c536fc9a1e0ba7f1db992269ddc9d40fbcad7bbaf8a9bea425c788629bee0715189770138b5b666fc70f4c4228a0fee9843e3d85f44071537fdfc113d9c8d16b70b93dd2", 0xe7, 0x3, &(0x7f0000000240)={0x0, 0x989680}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x40, 0x7f, 0xff, 0x1f, 0x0, 0x7f, 0x2800, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x9, 0x7}, 0x800, 0x4, 0x1, 0x2, 0x7, 0x8, 0x1ff, 0x0, 0x0, 0x0, 0x401}, r0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sched_getaffinity(r0, 0x8, &(0x7f0000000400)) pselect6(0x40, &(0x7f0000000440)={0x4, 0x400, 0x9, 0x68, 0x6a9, 0x7, 0xd3e, 0x10001}, &(0x7f0000000480)={0x3, 0x9, 0x7451, 0x10001, 0x1, 0xbb, 0x40, 0x7ff}, &(0x7f00000004c0)={0x0, 0xff, 0x1, 0x1, 0x6, 0x7, 0x1000, 0x3}, &(0x7f0000000500), &(0x7f0000000580)={&(0x7f0000000540)={[0x8]}, 0x8}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) clock_gettime(0x1, &(0x7f00000006c0)) mq_open(&(0x7f0000000700)='+\x00', 0x82, 0x54, &(0x7f0000000740)={0x0, 0x7fff, 0x1ff, 0x1}) r1 = fork() timer_create(0x4, &(0x7f0000000780)={0x0, 0x22, 0x0, @tid=r1}, &(0x7f00000007c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x515900, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioprio_set$pid(0x1, r0, 0x2007) mq_timedreceive(r2, &(0x7f0000000940), 0x0, 0x5, &(0x7f0000000980)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10000}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) pipe2$9p(&(0x7f0000000b40), 0x0) 04:10:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x20) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x7fffffff, 0x5, 0x9a8]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x7, 0x9, 0x3, 0x6e27]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}]}, 0x68}}, 0x8018) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x845) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x6c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/101, 0x65, 0x0, 0x22}, @flat=@binder={0x73622a85, 0x1100}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x400}, @acquire_done, @register_looper, @release={0x40046306, 0x1}], 0x2, 0x0, &(0x7f0000000540)='F>'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000009c0)={&(0x7f0000000600), 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x24c, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1ec, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff44, 0x6, 0x5, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc0c8}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000a00)={0x800, 0xfffffff8, 0x1, 0x1}, 0x10) r6 = fsmount(r1, 0x0, 0xc) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x12}, 0x48014) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000d40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000f80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x188, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7c5, 0x1, 0x5, 0x5}, {0x0, 0x0, 0x7, 0x7}, {0x8, 0x3d, 0xaa, 0x600}, {0x9, 0xff, 0x5, 0x69}, {0x8, 0x30, 0x7f}, {0x81, 0x3f, 0x1f, 0x2}, {0x6, 0x1, 0x3}]}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xcf}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xdf}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000}, 0x3e1cb8f964180876) 04:10:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x9d, [0x800], 0x2}, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8, [0x0, 0x1000], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "7aedc2f184cda5747122c61197baae87"}}}, 0x16) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x6, "cd4a34", 0x3, 0x9}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x200}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x880) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x80c00, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CT={0x64, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040814}, 0x4008040) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x10000000) r2 = fsmount(r1, 0x1, 0x72) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x805, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x50) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000004c0)={0x5, [0x6, 0x6], 0x9}, 0x10) bind$bt_hci(r2, &(0x7f0000000500)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = epoll_create(0x4) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000540)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0xc0000, 0x0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f00000005c0)="f5e581f7bbd2df8b836ea2452ecb3bc00f2db289df6b9625900cf973275d5b7c86ce0bc9a19cf3c2d0162b78935f77f93c835c4c62789e123e70c22fd5688ad32d6769f45342472890bf415dfed4b307780ddd4bc5a70bcf5b564c53734b18275d253a4f41885462f6eba388b91ea4c72700") setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000640)=0x4, 0x4) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 04:10:39 executing program 3: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xfffffffb, 0x36, 0x1f, 0x8, 0x9]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20044014) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x805) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x320, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, 0x0, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x20, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x14044095}, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x6202, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x41) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x114, 0x1, 0x3, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb83}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_PAYLOAD={0xcc, 0xa, "7805e820c061930e2fe2b8bb709566310604910c06f9c0f710645b2a2387649aeaba7005b853ef11ef477d53d59bda7f2b8dbc955893b5947a35e8ac37f12eead68a3e7346e4177edac4eb32dc6f7f6a8e413b9bd5c3ce1de854da851a80ea24198c192031e9c45504da64b396bd0249adf9a31353d00a3374d11ecc96157058867582a82201084efce57c314abc418b782b4960bde5a396ac86dd196809d211edd202323220ac281e093a9f4c2a4639b182f050ba5dc5854a2d2f07940e6f313c9d7b917d50721a"}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) bind$bt_sco(r2, &(0x7f0000000a80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$netlink(r2, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x78, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd06}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3c9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x75c6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbfb}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0xc0000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xdc1ad31dea569d65}, 0x8001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20054001}, 0x20008030) 04:10:39 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) r1 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100002, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\\\'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r1}}, {@subj_user}]}}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6a6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28801}, 0x4) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffff448}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000004) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="b2fbfbd9eb07ed80fb94b3a61d75ade3080120ca9d5e917b430f66062c50fed6119087ede87cd5e6557a976a49716ef4691d0822adef920cc39a13e12b9b659482b545d5ea309eccefc4c2fbfb5655ab1ecf8fe5f2776685bbcd003d101c69a355b7624c30440a9133888b2efe3e17e4e4b52688484e22f552509822e20e323f48a74b72d98f94a7d8ad25023411181ca96ee12a1e3e801189de67a8d83ff03371f0dac92fc9c7df51cb905cd6e0b500e03a4e88536c9e17f0fd30fbad150494330f26aee5969a852e091f890807bf1212f02b78af95bcd784af3f408236da9625", 0xe1, 0xfffffffffffffffe) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000580)={0x1f, @none}, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000005c0)=0x12, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000600)=0x3, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000007c0)={&(0x7f0000000640), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x809}, 0xc000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000800)=0x3, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000840)={0x1f, @none}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x6400c000) [ 96.973846] audit: type=1400 audit(1738210239.935:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:10:39 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_io_uring_setup(0x6011, &(0x7f0000000080)={0x0, 0x2211, 0x20, 0x3, 0x22b}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000001c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x642c00, 0x0) syz_io_uring_setup(0x2265, &(0x7f0000000240)={0x0, 0xb941, 0x4, 0x0, 0x232, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xce42}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = io_uring_setup(0x5ab4, &(0x7f0000000480)={0x0, 0x9799, 0x4, 0x0, 0x3cc, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r3, 0x10000000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000004) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40400002}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000780)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc9, 0x3}}}, 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40400040}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x402100a}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x69d2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x8880) 04:10:40 executing program 7: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x3) r1 = io_uring_setup(0x7411, &(0x7f0000000040)={0x0, 0x8c17, 0x2, 0x3, 0x185}) syz_io_uring_setup(0x7c73, &(0x7f00000000c0)={0x0, 0x6369, 0x10, 0x2, 0x12a, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000200)={[0x80000001]}, 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000854) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r1, 0x8000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x4004800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff6ee}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x409d4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4004000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r3, 0x2, 0x70bd2c, 0x81d, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x872c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}]}, 0x24}}, 0xadf366e8858fd953) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080800}, 0x24040040) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf3ec}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x808}, 0x8004) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000004, 0x50, r1, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000a40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002040, 0x0, {0x3}}, 0xffffffff) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000ac0)={0x10002008}) [ 98.376206] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.377913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.380068] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.382266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.383783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.385203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.387251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.389114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.390541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.399838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.401180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.402515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.408230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.414000] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.415679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.416952] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.419940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.421935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.441008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.454758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.457269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.457407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.478279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.480314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.483968] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.490020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.494724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.499415] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.501199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.506893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.509896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.511138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.512427] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.515194] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.522998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.524814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.526310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.529386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.530711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.532169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.536653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.546573] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.549272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.551772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.570155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.572223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.577317] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.600283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.516149] Bluetooth: hci0: command tx timeout [ 100.516952] Bluetooth: hci2: command tx timeout [ 100.518374] Bluetooth: hci1: command tx timeout [ 100.580197] Bluetooth: hci3: command tx timeout [ 100.581368] Bluetooth: hci5: command tx timeout [ 100.643676] Bluetooth: hci7: command tx timeout [ 100.643736] Bluetooth: hci6: command tx timeout [ 100.645118] Bluetooth: hci4: command tx timeout [ 102.564588] Bluetooth: hci1: command tx timeout [ 102.564643] Bluetooth: hci2: command tx timeout [ 102.566025] Bluetooth: hci0: command tx timeout [ 102.627663] Bluetooth: hci5: command tx timeout [ 102.627674] Bluetooth: hci3: command tx timeout [ 102.691709] Bluetooth: hci6: command tx timeout [ 102.692006] Bluetooth: hci4: command tx timeout [ 102.692742] Bluetooth: hci7: command tx timeout [ 104.611521] Bluetooth: hci0: command tx timeout [ 104.611590] Bluetooth: hci2: command tx timeout [ 104.611965] Bluetooth: hci1: command tx timeout [ 104.675585] Bluetooth: hci5: command tx timeout [ 104.676024] Bluetooth: hci3: command tx timeout [ 104.739573] Bluetooth: hci7: command tx timeout [ 104.740037] Bluetooth: hci4: command tx timeout [ 104.740749] Bluetooth: hci6: command tx timeout [ 106.659747] Bluetooth: hci2: command tx timeout [ 106.660347] Bluetooth: hci0: command tx timeout [ 106.661530] Bluetooth: hci1: command tx timeout [ 106.723676] Bluetooth: hci5: command tx timeout [ 106.724237] Bluetooth: hci3: command tx timeout [ 106.788259] Bluetooth: hci6: command tx timeout [ 106.788998] Bluetooth: hci4: command tx timeout [ 106.789128] Bluetooth: hci7: command tx timeout [ 161.135170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.140112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.142346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.159754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.165207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.168071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.207271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.213321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.217617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.222825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.228689] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.236002] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.270916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.279916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.283081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.289356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.292189] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.294833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.411008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.421839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.426158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.431281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.443152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.453139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.461108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.464912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.469091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.504748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.512630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.517578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.602936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.609913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.612328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.619890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.624830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.629010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.662329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.681820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.687069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.693927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.709360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.743161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.744320] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.768151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.770313] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.772072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.772940] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.774373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.235515] Bluetooth: hci0: command tx timeout [ 163.300598] Bluetooth: hci1: command tx timeout [ 163.364631] Bluetooth: hci2: command tx timeout [ 163.492481] Bluetooth: hci3: command tx timeout [ 163.621531] Bluetooth: hci4: command tx timeout [ 163.747685] Bluetooth: hci5: command tx timeout [ 163.876748] Bluetooth: hci7: command tx timeout [ 163.876758] Bluetooth: hci6: command tx timeout [ 165.285409] Bluetooth: hci0: command tx timeout [ 165.348935] Bluetooth: hci1: command tx timeout [ 165.412677] Bluetooth: hci2: command tx timeout [ 165.539541] Bluetooth: hci3: command tx timeout [ 165.667502] Bluetooth: hci4: command tx timeout [ 165.796497] Bluetooth: hci5: command tx timeout [ 165.923597] Bluetooth: hci6: command tx timeout [ 165.924598] Bluetooth: hci7: command tx timeout [ 167.332553] Bluetooth: hci0: command tx timeout [ 167.397492] Bluetooth: hci1: command tx timeout [ 167.460516] Bluetooth: hci2: command tx timeout [ 167.587481] Bluetooth: hci3: command tx timeout [ 167.715559] Bluetooth: hci4: command tx timeout [ 167.844691] Bluetooth: hci5: command tx timeout [ 167.971562] Bluetooth: hci7: command tx timeout [ 167.971819] Bluetooth: hci6: command tx timeout [ 169.379638] Bluetooth: hci0: command tx timeout [ 169.445470] Bluetooth: hci1: command tx timeout [ 169.508564] Bluetooth: hci2: command tx timeout [ 169.635639] Bluetooth: hci3: command tx timeout [ 169.763580] Bluetooth: hci4: command tx timeout [ 169.891545] Bluetooth: hci5: command tx timeout [ 170.019546] Bluetooth: hci7: command tx timeout [ 170.019591] Bluetooth: hci6: command tx timeout [ 221.492670] [ 221.492905] ====================================================== [ 221.493416] WARNING: possible circular locking dependency detected [ 221.493937] 6.13.0-next-20250129 #1 Not tainted [ 221.494331] ------------------------------------------------------ [ 221.496891] kworker/u8:1/64 is trying to acquire lock: [ 221.498613] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.499495] [ 221.499495] but task is already holding lock: [ 221.499989] ffff888031eb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 221.500817] [ 221.500817] which lock already depends on the new lock. [ 221.500817] [ 221.501477] [ 221.501477] the existing dependency chain (in reverse order) is: [ 221.502082] [ 221.502082] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 221.502648] __mutex_lock+0x13d/0xb50 [ 221.503051] wiphy_register+0x1b2e/0x25d0 [ 221.503481] ieee80211_register_hw+0x23a4/0x3d60 [ 221.503965] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 221.504466] init_mac80211_hwsim+0x389/0x870 [ 221.504917] do_one_initcall+0xf9/0x640 [ 221.505339] kernel_init_freeable+0x53d/0x7a0 [ 221.505793] kernel_init+0x1e/0x2d0 [ 221.506158] ret_from_fork+0x48/0x80 [ 221.506533] ret_from_fork_asm+0x1a/0x30 [ 221.506961] [ 221.506961] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 221.507491] __lock_acquire+0x29fd/0x4580 [ 221.507923] lock_acquire+0x19b/0x520 [ 221.508309] __mutex_lock+0x13d/0xb50 [ 221.508707] unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.509245] unregister_netdevice_queue+0x224/0x2e0 [ 221.509723] _cfg80211_unregister_wdev+0x57b/0x700 [ 221.510207] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 221.510685] ieee80211_unregister_hw+0x55/0x3a0 [ 221.511140] hwsim_exit_net+0x3a0/0x730 [ 221.511544] ops_exit_list+0xb3/0x180 [ 221.511937] cleanup_net+0x546/0xad0 [ 221.512320] process_one_work+0x8ee/0x1a10 [ 221.512772] worker_thread+0x674/0xe70 [ 221.513185] kthread+0x3ab/0x720 [ 221.513556] ret_from_fork+0x48/0x80 [ 221.513925] ret_from_fork_asm+0x1a/0x30 [ 221.514356] [ 221.514356] other info that might help us debug this: [ 221.514356] [ 221.515012] Possible unsafe locking scenario: [ 221.515012] [ 221.515516] CPU0 CPU1 [ 221.515913] ---- ---- [ 221.516308] lock(&rdev->wiphy.mtx); [ 221.516656] lock(rtnl_mutex); [ 221.517165] lock(&rdev->wiphy.mtx); [ 221.517711] lock(rtnl_mutex); [ 221.518025] [ 221.518025] *** DEADLOCK *** [ 221.518025] [ 221.518523] 4 locks held by kworker/u8:1/64: [ 221.518909] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 221.519813] #1: ffff88800ec2fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 221.520679] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 221.521471] #3: ffff888031eb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 221.522346] [ 221.522346] stack backtrace: [ 221.522728] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250129 #1 [ 221.522765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 221.522788] Workqueue: netns cleanup_net [ 221.522828] Call Trace: [ 221.522838] [ 221.522850] dump_stack_lvl+0xca/0x120 [ 221.522909] print_circular_bug+0x47b/0x750 [ 221.522956] check_noncircular+0x2e9/0x3c0 [ 221.522999] ? __pfx_check_noncircular+0x10/0x10 [ 221.523042] ? hlock_class+0x4e/0x130 [ 221.523073] ? mark_lock+0xac/0xed0 [ 221.523114] ? srso_return_thunk+0x5/0x5f [ 221.523171] ? __dequeue_entity+0x9b1/0x1900 [ 221.523224] ? lockdep_lock+0xba/0x1b0 [ 221.523284] ? __pfx_lockdep_lock+0x10/0x10 [ 221.523348] __lock_acquire+0x29fd/0x4580 [ 221.523403] ? __pfx___lock_acquire+0x10/0x10 [ 221.523448] ? lock_release+0x20f/0x6f0 [ 221.523493] ? __pfx_lock_release+0x10/0x10 [ 221.523542] lock_acquire+0x19b/0x520 [ 221.523587] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.523647] ? __pfx_lock_acquire+0x10/0x10 [ 221.523694] ? srso_return_thunk+0x5/0x5f [ 221.523750] ? lock_release+0x20f/0x6f0 [ 221.523794] ? srso_return_thunk+0x5/0x5f [ 221.523850] ? lock_is_held_type+0x9e/0x120 [ 221.523906] ? srso_return_thunk+0x5/0x5f [ 221.523966] __mutex_lock+0x13d/0xb50 [ 221.524018] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.524064] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.524110] ? srso_return_thunk+0x5/0x5f [ 221.524166] ? synchronize_rcu_expedited+0x38a/0x420 [ 221.524212] ? __pfx___mutex_lock+0x10/0x10 [ 221.524266] ? __pfx_autoremove_wake_function+0x10/0x10 [ 221.524323] ? srso_return_thunk+0x5/0x5f [ 221.524378] ? kasan_quarantine_put+0x84/0x1e0 [ 221.524442] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 221.524478] ? srso_return_thunk+0x5/0x5f [ 221.524538] unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.524584] ? __virt_addr_valid+0x2e8/0x5d0 [ 221.524638] ? __pfx_lock_release+0x10/0x10 [ 221.524684] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 221.524731] ? find_held_lock+0x2c/0x110 [ 221.524791] ? srso_return_thunk+0x5/0x5f [ 221.524849] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 221.524910] ? srso_return_thunk+0x5/0x5f [ 221.524966] ? lock_release+0x20f/0x6f0 [ 221.525011] ? __pfx_lock_release+0x10/0x10 [ 221.525056] ? srso_return_thunk+0x5/0x5f [ 221.525111] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 221.525160] ? srso_return_thunk+0x5/0x5f [ 221.525221] unregister_netdevice_queue+0x224/0x2e0 [ 221.525265] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 221.525309] ? up_write+0x195/0x520 [ 221.525365] _cfg80211_unregister_wdev+0x57b/0x700 [ 221.525418] ? srso_return_thunk+0x5/0x5f [ 221.525477] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 221.525515] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 221.525583] ? srso_return_thunk+0x5/0x5f [ 221.525639] ? srso_return_thunk+0x5/0x5f [ 221.525695] ? synchronize_rcu+0x1ff/0x260 [ 221.525738] ieee80211_unregister_hw+0x55/0x3a0 [ 221.525783] hwsim_exit_net+0x3a0/0x730 [ 221.525825] ? __pfx_hwsim_exit_net+0x10/0x10 [ 221.525866] ? srso_return_thunk+0x5/0x5f [ 221.525922] ? netdev_run_todo+0x788/0x1040 [ 221.525971] ? __pfx_hwsim_exit_net+0x10/0x10 [ 221.526014] ops_exit_list+0xb3/0x180 [ 221.526057] cleanup_net+0x546/0xad0 [ 221.526102] ? __pfx_cleanup_net+0x10/0x10 [ 221.526155] process_one_work+0x8ee/0x1a10 [ 221.526223] ? __pfx_lock_acquire+0x10/0x10 [ 221.526269] ? __pfx_process_one_work+0x10/0x10 [ 221.526329] ? srso_return_thunk+0x5/0x5f [ 221.526385] ? move_linked_works+0x172/0x270 [ 221.526430] ? srso_return_thunk+0x5/0x5f [ 221.526486] ? assign_work+0x196/0x240 [ 221.526545] worker_thread+0x674/0xe70 [ 221.526605] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 221.526658] ? srso_return_thunk+0x5/0x5f [ 221.526714] ? __pfx_worker_thread+0x10/0x10 [ 221.526776] kthread+0x3ab/0x720 [ 221.526829] ? __pfx_kthread+0x10/0x10 [ 221.526883] ? srso_return_thunk+0x5/0x5f [ 221.526938] ? finish_task_switch.isra.0+0x206/0x840 [ 221.526991] ? __pfx_kthread+0x10/0x10 [ 221.527046] ret_from_fork+0x48/0x80 [ 221.527078] ? __pfx_kthread+0x10/0x10 [ 221.527132] ret_from_fork_asm+0x1a/0x30 [ 221.527201] [ 223.275531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.277555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.285980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.289553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.294069] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.301316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.480162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.484394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.485894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.487375] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.492074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.494687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.498607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.500993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.505842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.508974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.511927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.514986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.551545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.556920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.570877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.579034] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.584591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.587485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.588490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.595140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.598478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.599329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.601262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.602742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.608686] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.612609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.617083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.621756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.622741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.624985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.628863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.629985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.635606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.640011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.641054] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.644178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.681811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.690310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.692801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.696352] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.700747] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.707084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.315517] Bluetooth: hci0: command tx timeout [ 225.571552] Bluetooth: hci1: command tx timeout [ 225.574448] Bluetooth: hci2: command tx timeout [ 225.699463] Bluetooth: hci3: command tx timeout [ 225.700586] Bluetooth: hci6: command tx timeout [ 225.700620] Bluetooth: hci5: command tx timeout [ 225.701153] Bluetooth: hci4: command tx timeout [ 225.763459] Bluetooth: hci7: command tx timeout [ 227.365438] Bluetooth: hci0: command tx timeout [ 227.619463] Bluetooth: hci2: command tx timeout [ 227.619955] Bluetooth: hci1: command tx timeout [ 227.747651] Bluetooth: hci5: command tx timeout [ 227.748115] Bluetooth: hci6: command tx timeout [ 227.749336] Bluetooth: hci4: command tx timeout [ 227.749788] Bluetooth: hci3: command tx timeout [ 227.811457] Bluetooth: hci7: command tx timeout [ 229.411483] Bluetooth: hci0: command tx timeout [ 229.667505] Bluetooth: hci1: command tx timeout [ 229.667963] Bluetooth: hci2: command tx timeout [ 229.795542] Bluetooth: hci4: command tx timeout [ 229.796580] Bluetooth: hci3: command tx timeout [ 229.796606] Bluetooth: hci5: command tx timeout [ 229.797341] Bluetooth: hci6: command tx timeout [ 229.861626] Bluetooth: hci7: command tx timeout [ 231.460241] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 04:12:44 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283c500 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800ec2ec88 R8 =0000000000000000 R9 =ffffed1001ccf046 R10=00000000000fe503 R11=2d2d2d2d2d2d2d2d R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10d2e66 R15=dffffc0000000000 RIP=ffffffff8283c555 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055963ca743d8 CR3=000000000b8f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=000055963ca7f230000055963caa7ed0 XMM05=00000000000000000000000000000000 XMM06=697665640030006563697665642e3569 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff11001e15fa7 RCX=ffffffff8150272e RDX=fffffbfff0c8087b RSI=0000000000000008 RDI=ffffffff864043d0 RBP=0000000000000001 RSP=ffff88800f0afd18 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=ffffffff864043d7 R11=0000000000000001 R12=ffff8880116bf018 R13=ffffffff81aef49c R14=000000000003a68c R15=ffff8880116bb7e8 RIP=ffffffff84ab0f80 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555ea10b4090 CR3=000000000c4f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415370ec00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000