Warning: Permanently added '[localhost]:33006' (ECDSA) to the list of known hosts. 2025/07/06 16:39:42 fuzzer started 2025/07/06 16:39:43 dialing manager at localhost:42083 syzkaller login: [ 52.746911] cgroup: Unknown subsys name 'net' [ 52.841104] cgroup: Unknown subsys name 'cpuset' [ 52.863870] cgroup: Unknown subsys name 'rlimit' 2025/07/06 16:39:54 syscalls: 208 2025/07/06 16:39:54 code coverage: enabled 2025/07/06 16:39:54 comparison tracing: enabled 2025/07/06 16:39:54 extra coverage: enabled 2025/07/06 16:39:54 setuid sandbox: enabled 2025/07/06 16:39:54 namespace sandbox: enabled 2025/07/06 16:39:54 Android sandbox: enabled 2025/07/06 16:39:54 fault injection: enabled 2025/07/06 16:39:54 leak checking: enabled 2025/07/06 16:39:54 net packet injection: enabled 2025/07/06 16:39:54 net device setup: enabled 2025/07/06 16:39:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/06 16:39:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/06 16:39:54 USB emulation: enabled 2025/07/06 16:39:54 hci packet injection: enabled 2025/07/06 16:39:54 wifi device emulation: enabled 2025/07/06 16:39:54 802.15.4 emulation: enabled 2025/07/06 16:39:54 fetching corpus: 0, signal 0/0 (executing program) 2025/07/06 16:39:55 starting 8 fuzzer processes 16:39:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ohci_pci', 0x400800, 0x1b7) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x5, 0x4, 0x10, "b01833c729485f3965acd461fc731ed2a7ee7a003c080d92c06ab2bba651a514fbda1a75005b4dd7baf1d77bf98d4012a818610cffa9649dcf50624c0b2c47d3", "b5dcdeafb485ff4c3264bba08318b3f17e37ed5d1a7b96dcbc89099720f254950127253fada48885feb2d259c061f1a670741ec3c6a47a2e02ff22f0cd2c810b", "858dbecdd7824087d8e183ee49a175488d14e3b7058b5f0a5379fd6807972b9d", [0x80, 0x7fffffff]}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x10, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)="aabecd1815cc1ed7049f23e1f7dcd07fc6c2fcd7368b86bb73740b3b5fbe8a56530e8e9eef33bd10bd095b9fec3a3f19010ffbeb90f9c601ab66f5727c103232d035a21d5fd00005db0f8850308c74cff0cc33c20a3a8cd45acd6f701b80c85b2bb7ed80975b25fb7948940837560e7d8a9a7f24c994b11a46dc41e38f7a53371ea994f9e0e7a06489e167efff4c6f433d5d378d4d522bd85c", 0x99, 0x20}, 0x9) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x282040) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x35}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x28}}, 0x20000040) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000400)=""/211) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000580)=[0x3, 0x355c58b7]) getegid() waitid$P_PIDFD(0x3, r1, &(0x7f00000005c0), 0x8, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040010) 16:39:55 executing program 1: r0 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newpolicy={0x14c, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {{@in6=@local, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e22, 0x1, 0x2, 0x80, 0xa0, 0x32, 0x0, r0}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x1c, 0x3, 0x2, 0xffffffff, 0x9, 0x10001}, {0x4, 0x3, 0x80, 0x1}, 0x8, 0x6e6bbb, 0x2, 0x0, 0x1, 0x2}, [@tfcpad={0x8, 0x16, 0x7}, @proto={0x5, 0x19, 0x6c}, @replay_thresh={0x8, 0xb, 0x40}, @algo_comp={0x7a, 0x3, {{'deflate\x00'}, 0x190, "218c17bb39ce0051c8db669effecec798da573386e3943abcbf0d2f90ddaf7a9c7a6a6ad1f7e991ecfcd78f92e296cf50872"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x400c4) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x9, 0x6]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) geteuid() sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x218, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x40}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1ec, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9d, 0x3, "af501319e1b5b7a86c3d565e982c11289495555e3dbef89c11545c8946e7fa1011d8b73405662bcc3caf705836aa3fca5ba4c4438db7ee9dbe82101e01706301de8f08b3d1dd969aab8c5c0c4e7ddc7f151a4a2bff5e3daf11fddd7be78ef38dc900cc2f9038d3ff0b39a04aea38e48512d7d1c2e5957e85a71720abe76a98d1ce5a42853665cd30596d708fdde29b6c3122ab83255d2774e0"}, @NL80211_BAND_6GHZ={0x7, 0x3, "c5c917"}, @NL80211_BAND_2GHZ={0xb0, 0x0, "282b9c34e8a35f28608ab5442bc19c5d57528ad92f4b4f273ca736a32866f2c0641859afb2783342987f3a96bcd8c1edb2a94edaeb5b71751edbf5617b662495ed67c8282c7835250e48fc677b1aa6acfceffed2353916da8b128936574e37024e7c9923902165c73f23888252256083993f3763388fd5d9ce3a4374ddd6dcc769894d8bb2b2dc02838cfa8c9bce5b9c7596b9b4f029f601061a0992bfdc3f311c6265373d84e4d69937ede4"}, @NL80211_BAND_6GHZ={0x90, 0x3, "d6863f68df920e03ffb73103b41073a66c189d78fe2b9cd6d18d422e6270df84e35a9d133fb5b163ad84abd7639bb9341a0bd18809ba3a14f34988f7e02f4f82a07335bc857ddba88bda067643d09268c591ab55618878880af87a86d6ea7def00a42aba4e7f221293c72032f40d532ef58e28f4bf8f88734b31d3da7c90cdf907cc51f9da870b1405fa6f11"}]}]}, 0x218}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80000001, 0x30}}}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x88, 0x2}}, @dsss={0x3, 0x1, 0x4}, @cf={0x4, 0x6, {0x7f, 0x4, 0x7, 0x8000}}]}, @NL80211_ATTR_SSID={0x18, 0x34, @random="1f50dc1a05dcde9a5976a63b3b9974221eca531c"}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x200080cf}, 0x40080) geteuid() r5 = socket(0x2, 0xa, 0x2f) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x18, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x90}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffff, 0x5f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008014}, 0x4000) 16:39:55 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x100010, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x1}, 0x1) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x10010, r3, 0x10000000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x600000, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000100)={0x0, 0x965f, 0x2, 0x1, 0x1c8, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r6, r4, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="1c01c02b3d85432711f952a61257a679e533ec398b6278c34fd4654b5294b57866904241fb44d6b8a5710325c2ca4d0494ca796e01e2f99bf8347ecf33e91977aaac69dfa0568c24288035c0cf40eb129068a8f91a383a5e3089b8175ba9062b0df40043cf", 0x65}, {&(0x7f0000000300)="56fb1a7baaae662fb94054d39c3d594960a5521abd59aa7a7d6ab8f61e48e6e52623c9a5975247d8c9e94f06c6b61d954369111c14f61d1ff01e1d156cb3dca641961fe7202bbc63a0c783ebfd9fa430585accafcc162cd03d0725a6ff260ac7a9aa3b6e4c9a7737b0e7151953b21e37a1f26a83d1c6fe323e38cceab6f543604fd9fb05c71296304efe2ea500e5b2e5c241a3", 0x93}, {&(0x7f00000003c0)="008b8f5c29ee5cb149d242b1845a6656b538710792b389075e522cc7e857f0f6ac606a1d30cc6d3946a399544a46eb0d665286b75fd4b1931e224ad39c6931573cac08b43d16cc97da78fc9fcbc03652c629e95372034114259dd093fe8cb4b5a48e13296f4d028d6667df2d7c9b80b1c2b9c31129cbe2ad2c746e3a624cfae1fbf9e54da913e0fa4b030d8ea6d80f0bb0278b81672ea4ce24b971afa75098d2bc05fc91f30de2fd", 0xa8}, {&(0x7f0000000480)="351537608f0ea7b55eda34ac3cb29d00af964c1a81403452a9bacdb8ba2920fe9cd3d5c03e73262899d00ff523b114b0e78c281ad8b58af00b147781d94194a7f5c3c503aa6e040eaebd631f68f515ea94236c50e1c70acdb5bb1e3e778dae907032ca076beea2958502f0403b2612eda9a6486e30bc038148704de95691f26eef564db676d3e5798e3322b02187cc01a770bd7d796c792e5dc467aa5b9da692652d5590050b0a650928b0ce", 0xac}], 0x4}, 0x0, 0x80}, 0x80000001) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r7 = pidfd_getfd(r3, r0, 0x0) syz_io_uring_setup(0x47a4, &(0x7f0000000680)={0x0, 0x74ff, 0x2, 0x3, 0x37a, 0x0, r7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) clone3(&(0x7f0000000bc0)={0x2a00, &(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00), {0xb}, &(0x7f0000000a40)=""/104, 0x68, &(0x7f0000000ac0)=""/161, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) clone3(&(0x7f0000000c80)={0x1e2000000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x18}, &(0x7f0000000840)=""/220, 0xdc, &(0x7f0000000940)=""/56, &(0x7f0000000c40)=[r8], 0x1, {r7}}, 0x58) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000d80)) write$cgroup_freezer_state(r5, &(0x7f0000000f00)='FREEZING\x00', 0x9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000f40), 0x420800, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000f80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 16:39:55 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x200240) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/7, 0x7}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x25}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x64000}, 0xc011) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/usbmisc', 0x101140, 0x10) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000340)={0x52, 0x4, 0x6, {0x3, 0x6}, {0x1, 0x3}, @const={0x4, {0x410, 0x101, 0x3, 0x1974}}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000380)) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000500)=[0xfffffffd, 0xa0]) r4 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x2040) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000580)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/class/drm', 0x521a00, 0x1) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) 16:39:55 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x400) r1 = pidfd_getfd(r0, r0, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x440d0}, 0x40050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x1, 0x10000, 0x10, @local, @mcast2, 0x80, 0x10, 0xffffffc1, 0x8}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x40) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/8250_core', 0x2, 0x10) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f0000000500)="305ae66574b1ede0ebf8c2735f4b46070f84e7b1d57dc73fe73c1e625ed4139432e5ed47bd9df5b52df3c3d1cb2204fbd90481a7565c5b48b8a4008aa13610598435b0e34e098b5c65887f5ca4cb60d28cee7a38ebe9ed0e6a73ccd11fcce94897b077af73f0e3cea5af49715dddc2211f31c30d07cf8a17500e0b9f062fb67c128666e62db25bdedea34a7aa052c12ece2c2a752978f9e5a98f6dc3b142bf819fe56320f5e20e587f673f7f251207f9f8eac31ecb0b29c6b95dfc2c8a9e17289b657a65560385482eff8e1516ebb26054ccebdeb3af54ad6423d3fb19c4303958da", 0xe2, 0x4}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x895) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000780)={0x490, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IE={0xfd, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x80, 0x80}}, @random_vendor={0xdd, 0x2c, "69e67dd08b87c109a2bedfc73388de3775f062f9e79c47016219e346a158da8c6a0bd12114f6044b25a446ad"}, @mic={0x8c, 0x10, {0x38a, "ed802a966d32", @short="f9a7a69b72e9caf9"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0xb, 0x1}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x16, {0x0, 0x4, @void, @val=0x1e, @val="d65395d15e952cb16ca4798755913df3"}}, @mesh_chsw={0x76, 0x6, {0x9, 0x9a, 0x8, 0x7}}, @chsw_timing={0x68, 0x4, {0x6, 0xdb1c}}, @preq={0x82, 0x6d, @ext={{0x1}, 0x14, 0x1, 0x4, @device_b, 0x9, @broadcast, 0x9, 0x6, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x200}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0xfffffffc}, {{0x1, 0x0, 0x1}, @device_b, 0xa58}, {{}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x5}]}}, @tim={0x5, 0xf, {0x6a, 0x46, 0x7, "ca0f32b0577b4f75b10f7dda"}}]}, @NL80211_ATTR_SSID={0x24, 0x34, @random="1dab009e74fc647ce127507163286b7f919c9b756f0228957740179d3d3aa1b7"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe7ba}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x31f, 0x2a, [@preq={0x82, 0x6d, @ext={{0x1, 0x1}, 0x2, 0x7, 0x7ff, @device_a, 0x9, @device_a, 0xfffffffd, 0x10001, 0x7, [{{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}}, {{}, @device_b, 0x2}, {{}, @device_a, 0x434}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x0, 0x0, 0x1}, @device_b, 0x5}]}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x20}}, @fast_bss_trans={0x37, 0x14c, {0x7f, 0x9, "f59a9896c827b9cde637e147530c7e9a", "0bc235d0262f1d33aabb0824c69e9a348ff0fb881f0d3e9e4e6c4a7fc1a3b6ca", "1fdbc94bdcf35b1169eaa385458baa21fb9236d7854a096d8fa166991db16281", [{0x4, 0x15, "1729d2f3cf2662ac4ee6c81ebda3d735dba04a96e8"}, {0x4, 0x20, "9e05df25caf7887ea8aea41fd5e57f49910ffe0f5cad12b1410951283afc33c7"}, {0x2, 0x1e, "e015244e87620107357e2a1d9a6f0fcf113faf7325b3b5af34311e833e3d"}, {0x2}, {0x1, 0x28, "50e2deba116f4b018aae3b8f831d2219502bd85e1fd2b22aebeaf52b8f3fdc6c3c7b188e3fad3058"}, {0x1, 0x1a, "3b7f8c012762cf9b58ccee6853d56ce94f98ac557f269a3561cd"}, {0x2, 0x15, "8ca362e347bbf96ce8f3be0833abc561b5830435cb"}, {0x0, 0x28, "49b5b378a22ddfaa0337daf720ebf43a235b61484a3544812a2425b500294dd9174d6ba876628420"}, {0x2, 0x16, "04c6b86723902547bfc9b527b4a2910aa4d6e328e63e"}]}}, @random={0x8, 0x4c, "9cf43c2c449b0755091eac445697581ce2b3e4c5084df319668f765c59ea7519e3a9f45f479ca6dc1bcdbacbbfdb224b4cbbe9e4f5aea0d92defc5de3118b0ccbdaf73354f5c7e42c44e26fe"}, @tim={0x5, 0x87, {0x0, 0x9b, 0x2, "9f1c9c7a616d7a7fc3f6ad5adf52e684a328ae3b4f504732861016a8fcf7705862291a4fda35f678ca3ca2f5eaff7d96c3d4ceaa28b08a71ed9b72d38d5fb35d06f3b7805cbb31be8f8c807b738562e2e4858fa470ad20e12d5e728f0874c075ae73530ec836e2950044b193d457ea5243d25451bfc87291ff7feaf18fe1eb7dec953e4e"}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x8}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x5b, {0x3, 0xbb, 0x20, "fc6afdb4a3efe6cb01f96f8df782fe7aaeb73b1455def5fed9a78910b8e98919293e242585ca72d9a0a45a6cdc5cbaf840a2c0521a3641ed182d4b78125ac6bda909fed09f43d706131048ccd3eec867b1fa1d54918e7398"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x490}, 0x1, 0x0, 0x0, 0x8091}, 0x40004010) r8 = pidfd_getfd(r0, r1, 0x0) process_mrelease(r8, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000cc0), 0x101804, 0x0) r9 = pidfd_getfd(r1, r8, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8001, 0x6c}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x78, 0x2d, 0x0, 0x1, [{0x21, 0x0, @random="268f2369a31934a41847db366de5829b591970ebc51aaf48d5e6fc79bd"}, {0xa, 0x0, @default_ap_ssid}, {0x15, 0x0, @random="47ec7681329d2126e1a0771430426357ae"}, {0x14, 0x0, @random="5f08ee4c872e9e6c2c2b80b7b4d1b4a5"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) 16:39:55 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7d}}}}, [@NL80211_ATTR_IE={0xe0, 0x2a, [@random={0x2, 0x6b, "ae031e47b3cffa0af3765983362e727204d11abbdff526d2d4b4e4a0551f29be187cb503ac31c61c51436f3dd120927c57d0c96dc3298cc962cd7f7f2d78170dcd799a51706ead2d191d62bbd36ed487acfceb2633fc54deffa29b5cc4cb39b8a7eb5a33aaea1fdd8bf56d"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @mic={0x8c, 0x10, {0xda4, "42c0ac489734", @short="8cc45d0c124f04e5"}}, @random={0x20, 0x50, "d1a3a8976596d1e32ff96f0ca41742d7e341d92c25c336a3786f57be7c2d769b0be6182534c828f8fb7af0fb3540b2a51c5702858471e296c42a336ee4f8c3155237ee83b345765ec5ce91496d593e42"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x58005) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040011}, 0x8004) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/hid_monterey', 0x1, 0x111) r2 = gettid() sendmsg$AUDIT_SET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x3e9, 0x800, 0x70bd27, 0x25dfdbfd, {0x23, 0x0, 0x2, r2, 0x1ff, 0x401, 0xb1ac, 0x100, 0x0, 0x200}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x20008004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5878ebae90c141ec}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c725d0b93dd78e66ebcd2e7091989646bf4078514d1f9323"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40804}, 0x7d5b1fb81c4c015b) r4 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000700)={0x7}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xfffffffffffffffa) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xb3, 0x7, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x3, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0xfffffff7, 0x18, @local, @dev={0xfe, 0x80, '\x00', 0xf}, 0x10, 0x8000, 0x7ff, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x4, 0x7fffffff, 0x60, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x8, 0x40, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000018c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000e00)={0xa48, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x80, 0x8, 0x81}, {0x7c2, 0x60, 0xe3, 0x43}, {0x561, 0x1, 0x81, 0x6}, {0x81, 0x1, 0x1, 0x800}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x2a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3417}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a1c}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfff, 0x1, 0x7f, 0x7}, {0x5, 0xf9, 0x6, 0x1}, {0x7ff, 0xea, 0x1d, 0x401}, {0x5, 0xfe}, {0x200, 0x40, 0x0, 0x3ff}, {0x3, 0x3, 0x2}, {0xa2d7, 0x7, 0x3, 0xe2}, {0xfff, 0x80, 0xfc, 0x8}, {0x8, 0xe4, 0x4}]}}}]}}]}, 0xa48}, 0x1, 0x0, 0x0, 0x40001}, 0x44800) [ 64.595126] audit: type=1400 audit(1751819995.948:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:39:55 executing program 6: r0 = io_uring_setup(0x4a27, &(0x7f0000000000)={0x0, 0x76c5, 0x0, 0x1, 0x2da}) r1 = io_uring_setup(0x75ed, &(0x7f0000000080)={0x0, 0x7175, 0x4, 0x2, 0x10f, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="83e95782e173382fb5ce7480170b10eb008d36", 0x13}], 0x1, 0xc, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x10400) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x7) r4 = gettid() sched_setparam(r4, &(0x7f0000000200)=0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb3, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xc1357064b9928231) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x7e}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x200, 0x6}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfffe}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x48}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffff, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x0, 0x5, 0x34, 0x1ff, 0x20, @mcast2, @loopback, 0x7800, 0x80, 0x1, 0x1ff}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000500), 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x348, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x350000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x348}, 0x1, 0x0, 0x0, 0x40000}, 0x10050) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a80), 0x8000, 0x0) io_uring_setup(0x2d70, &(0x7f0000000ac0)={0x0, 0xdb2, 0x8, 0x3, 0x32e, 0x0, r8}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x100010, 0xffffffffffffffff, 0x10000000) 16:39:56 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="6aa08bef0dd5cfdfc76dfefeb3e6a3fe85099ecffbfcf4703b834ceb7814ab55d00f4f5080eebc8142ee00f51e318682acfea166a19b11299e85c4f1baca9fb5699de003acffe1e1af074c02fa3748e4c468d50dbff0b85eeeafd5e72a66d851a3fa7dda4a650c2d1fc66df15645", 0x6e, r0}, 0x68) r1 = socket(0x18, 0x800, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = syz_io_uring_setup(0x58bc, &(0x7f0000000180)={0x0, 0xf927, 0x2, 0x3, 0x384}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_WRITEV={0x2, 0x3, 0x2007, @fd=r1, 0x3, &(0x7f0000000440)=[{&(0x7f0000000280)="0cddbc774638d890a4de3eb531b06b49bd145641d0c86e09e622ef8f9e067c872320974886573cf99d678f42d9be43ad71d42d682566dcaa8c1bd1a2b436ac0e793901690c08577f45cc702d3eadf6a07932fc2f8746f0ad9ae94b5fdf20c377d3495dec5ae691b8c0e619b8c385c78d76914d341cd00e5b1dfd62ec95d51ccd6b7f2bed34658cb836a2915c76575e16c893c02b2a59d71e03fa67511d075090d29b18b048a39807898e7b2ad4822800b466aab1e19d777e9deb", 0xba}, {&(0x7f0000000340)="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", 0xfb}], 0x2, 0x4, 0x1}, 0x3) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000004c0)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7fff) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb, 0x10, r2, 0x8000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r4, r3, &(0x7f00000006c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000640)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}}, 0x10001) syz_io_uring_setup(0x249c, &(0x7f0000000700)={0x0, 0x93b4, 0x10, 0x0, 0x383, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) syz_open_dev$usbmon(&(0x7f0000000800), 0x2, 0x40000) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000880), r1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x2f, 0x1b, 0x1a, 0x6, 0x20, @empty, @local, 0x0, 0x0, 0x9, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000010c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000000b40)={0x538, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x18f, 0xff, 0x2, 0x9}, {0x7, 0x4, 0x9, 0x4}, {0x40, 0x1f, 0x1, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x538}}, 0x4000) [ 65.756318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.758964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.762413] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.764526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.768177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.771278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.778790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.781992] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.782312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.789449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.825027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.831917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.836804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.843079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.849671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.851115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.853613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.856373] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.860058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.861641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.864036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.871368] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.875237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.875298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.878494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.886920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.891163] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.895086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.895131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.900408] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.904594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.906729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.916946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.916983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.919399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.922146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.923409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.927316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.933159] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.942063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.365689] [ 66.366442] ============================= [ 66.367360] WARNING: suspicious RCU usage [ 66.368232] 6.16.0-rc4-next-20250704 #1 Not tainted [ 66.369956] ----------------------------- [ 66.373190] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 66.374282] [ 66.374282] other info that might help us debug this: [ 66.374282] [ 66.375465] [ 66.375465] rcu_scheduler_active = 2, debug_locks = 1 [ 66.376432] 3 locks held by syz-executor.6/286: [ 66.377145] #0: ffff88800f782400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 66.378451] #1: ffff888009276618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 66.379897] #2: ffff888018a12828 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 66.381251] [ 66.381251] stack backtrace: [ 66.381946] CPU: 0 UID: 0 PID: 286 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 66.381973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 66.381985] Call Trace: [ 66.381993] [ 66.382001] dump_stack_lvl+0xfa/0x120 [ 66.382028] lockdep_rcu_suspicious+0x152/0x1c0 [ 66.382055] proc_sys_compare+0x28a/0x340 [ 66.382076] ? __pfx_proc_sys_compare+0x10/0x10 [ 66.382099] d_same_name+0x229/0x2e0 [ 66.382134] d_alloc_parallel+0x7c1/0x1330 [ 66.382169] ? __pfx_d_alloc_parallel+0x10/0x10 [ 66.382196] ? __pfx_default_wake_function+0x10/0x10 [ 66.382227] ? __d_lookup+0x25f/0x490 [ 66.382258] lookup_open.isra.0+0x64f/0x1530 [ 66.382291] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 66.382334] ? mnt_get_write_access+0x81/0x2d0 [ 66.382353] ? mnt_get_write_access+0x1ea/0x2d0 [ 66.382381] path_openat+0xc26/0x2880 [ 66.382419] ? __lock_acquire+0x694/0x1b70 [ 66.382441] ? __pfx_path_openat+0x10/0x10 [ 66.382479] do_filp_open+0x1e8/0x450 [ 66.382508] ? __pfx_do_filp_open+0x10/0x10 [ 66.382549] ? find_held_lock+0x2b/0x80 [ 66.382577] ? alloc_fd+0x2c1/0x560 [ 66.382603] ? lock_release+0xc8/0x290 [ 66.382630] ? alloc_fd+0x2c1/0x560 [ 66.382666] do_sys_openat2+0x104/0x1b0 [ 66.382690] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.382715] ? __pfx___schedule+0x10/0x10 [ 66.382761] __x64_sys_openat+0x142/0x200 [ 66.382785] ? __pfx___x64_sys_openat+0x10/0x10 [ 66.382808] ? __pfx_fput_close_sync+0x10/0x10 [ 66.382843] do_syscall_64+0xbf/0x360 [ 66.382868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.382890] RIP: 0033:0x7f3731e32a04 [ 66.382907] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 66.382926] RSP: 002b:00007ffd76bba6b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 66.382946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f3731e32a04 [ 66.382960] RDX: 0000000000080001 RSI: 00007f3731ee92bb RDI: 00000000ffffff9c [ 66.382973] RBP: 00007f3731ee92bb R08: 0000000000000000 R09: 00007ffd76bba6a0 [ 66.382986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 66.382999] R13: 00007ffd76bba750 R14: 0000000000000000 R15: 00000000000000f8 [ 66.383027] [ 67.848329] Bluetooth: hci1: command tx timeout [ 67.848335] Bluetooth: hci0: command tx timeout [ 67.911952] Bluetooth: hci3: command tx timeout [ 67.975976] Bluetooth: hci4: command tx timeout [ 67.976685] Bluetooth: hci5: command tx timeout [ 67.977941] Bluetooth: hci6: command tx timeout [ 67.978163] Bluetooth: hci2: command tx timeout [ 68.039926] Bluetooth: hci7: command tx timeout [ 69.895918] Bluetooth: hci1: command tx timeout [ 69.896045] Bluetooth: hci0: command tx timeout [ 69.959897] Bluetooth: hci3: command tx timeout [ 70.024199] Bluetooth: hci5: command tx timeout [ 70.025097] Bluetooth: hci2: command tx timeout [ 70.025125] Bluetooth: hci6: command tx timeout [ 70.025147] Bluetooth: hci4: command tx timeout [ 70.087869] Bluetooth: hci7: command tx timeout [ 71.943923] Bluetooth: hci1: command tx timeout [ 71.944535] Bluetooth: hci0: command tx timeout [ 72.007948] Bluetooth: hci3: command tx timeout [ 72.071850] Bluetooth: hci4: command tx timeout [ 72.072414] Bluetooth: hci6: command tx timeout [ 72.072471] Bluetooth: hci5: command tx timeout [ 72.073372] Bluetooth: hci2: command tx timeout [ 72.136072] Bluetooth: hci7: command tx timeout [ 73.991847] Bluetooth: hci1: command tx timeout [ 73.992616] Bluetooth: hci0: command tx timeout [ 74.055867] Bluetooth: hci3: command tx timeout [ 74.120045] Bluetooth: hci5: command tx timeout [ 74.120927] Bluetooth: hci6: command tx timeout [ 74.121629] Bluetooth: hci4: command tx timeout [ 74.123075] Bluetooth: hci2: command tx timeout [ 74.183855] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:39:57 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff828b59b0 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff88802e04f2c0 R8 =0000000000000001 R9 =ffffed1005c09e49 R10=0000000000000000 R11=0000000000000001 R12=000000000000002d R13=ffffffff8871def0 R14=ffffffff8871dea0 R15=ffffffff8871e160 RIP=ffffffff828b5a05 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555560deb400 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0c762ac269 CR3=000000002eaf5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000000000 XMM02=ffffff0000ff00000000000000000000 XMM03=ffff0000ffffffff0000000000000000 XMM04=ffffffffffffff00ffffff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=ffff888033d9f72c RDX=0000000000000001 RSI=ffffffff85c1cc40 RDI=ffff888030dcdcd8 RBP=ffffffff85c1cc40 RSP=ffff888033d9f6f0 R8 =0000000000000001 R9 =ffff888033d9f818 R10=000000000003ba94 R11=000000000002594c R12=ffff888030dcdcd8 R13=ffff888033d9f72c R14=0000000000000001 R15=0000000000000001 RIP=ffffffff815140ce RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f334ddfd8c0 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6c3f31f1f0 CR3=0000000033206000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=682f68746f6f7465756c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000561f1235a9f00000561f12396600 XMM06=0000561f123207c00000000000000002 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000