Warning: Permanently added '[localhost]:63530' (ECDSA) to the list of known hosts. 2025/01/23 06:21:28 fuzzer started 2025/01/23 06:21:29 dialing manager at localhost:38529 syzkaller login: [ 67.541829] cgroup: Unknown subsys name 'net' [ 67.639400] cgroup: Unknown subsys name 'cpuset' [ 67.678648] cgroup: Unknown subsys name 'rlimit' [ 75.309828] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.484335] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 06:21:48 syscalls: 205 2025/01/23 06:21:48 code coverage: enabled 2025/01/23 06:21:48 comparison tracing: enabled 2025/01/23 06:21:48 extra coverage: enabled 2025/01/23 06:21:48 setuid sandbox: enabled 2025/01/23 06:21:48 namespace sandbox: enabled 2025/01/23 06:21:48 Android sandbox: enabled 2025/01/23 06:21:48 fault injection: enabled 2025/01/23 06:21:48 leak checking: enabled 2025/01/23 06:21:48 net packet injection: enabled 2025/01/23 06:21:48 net device setup: enabled 2025/01/23 06:21:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 06:21:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 06:21:48 USB emulation: enabled 2025/01/23 06:21:48 hci packet injection: enabled 2025/01/23 06:21:48 wifi device emulation: enabled 2025/01/23 06:21:48 802.15.4 emulation: enabled 2025/01/23 06:21:48 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 06:21:50 starting 8 fuzzer processes 06:21:50 executing program 1: semctl$SETVAL(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x4) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x200]) r0 = semget$private(0x0, 0x0, 0x428) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000080)=""/6) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x2, 0xffff, 0x80, 0x6, 0x9d, 0x341, 0x8000]) r1 = socket(0x1, 0x800, 0x5) r2 = semget(0x3, 0x2, 0x440) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x1, r3, 0x0, 0xee00, 0x0, 0x4, 0xffff}, 0x100000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3eb2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) r6 = socket(0xb, 0xa, 0x400) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1e}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0xac}, 0x1, 0x0, 0x0, 0x240000d1}, 0x4005) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x64}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x1) r9 = accept4(r6, &(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000880)=0x80, 0x80800) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r8, 0x102, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd1bf, 0x56}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) 06:21:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x40) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x0, 0x80, 0x1}) r1 = inotify_init1(0x80000) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xc40009a1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x20, 0x9, 0x5, 0x989}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r3, 0x1, 0x80000}) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000380)=0x80) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) inotify_rm_watch(r1, r2) recvmsg(r4, &(0x7f0000000780)={&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000640)=[{0xfffffffffffffffe}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000680)=""/219, 0xdb}, 0x2000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r5, &(0x7f0000002d40)={&(0x7f00000007c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/41, 0x29}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/216, 0xd8}], 0x8, &(0x7f0000001d40)=""/4096, 0x1000}, 0x100) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl1\x00', 0x0, 0x2f, 0x64, 0x2, 0x80000000, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}, @private2, 0x40, 0x20, 0x4, 0x7ff}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e80), r4) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000003040)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003000)={&(0x7f0000002ec0)={0x13c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4e}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1a}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x810}, 0x10) r7 = syz_open_dev$loop(&(0x7f0000003080), 0x8, 0x10000) r8 = inotify_init1(0x800) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "bc08a75528fa83e9100c03880d27a689"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x1) getpeername(r5, &(0x7f00000031c0)=@un=@abs, &(0x7f0000003240)=0x80) 06:21:50 executing program 2: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x34}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x24008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48084}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x40) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r0, 0x922, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x40, 0x6}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_DATA={0x18, 0xc5, "1eb94d547fa018d6ec4e9097d437007c5cf741b2"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}, @NL80211_ATTR_VENDOR_DATA={0xc, 0xc5, "ed4efb4c63da2f4b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x6c}}, 0x0) r10 = accept4(0xffffffffffffffff, &(0x7f0000000a80)=@can, &(0x7f0000000b00)=0x80, 0x800) sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x86}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8804}, 0x1) 06:21:50 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xe001, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004810}, 0x20000000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000856}, 0x8008) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x41}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd21}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440)=[@timestamp, @mss={0x2, 0x100}, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0x3}, @timestamp, @sack_perm, @window={0x3, 0xfff, 0x8}, @window={0x3, 0x8, 0x2}, @mss={0x2, 0x1}], 0xa) r3 = syz_open_dev$loop(&(0x7f00000004c0), 0x800, 0x8000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000500)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x20002000) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r1, 0x14, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9a2, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008031}, 0x4000050) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000b40)=0xe8) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x124, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe00000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x16}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x20}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40801}, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000d80)={0x9, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @remote}}}, 0x108) 06:21:50 executing program 4: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/121) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget(0x0, 0x3, 0x4) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/45) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xee00, 0x0, 0xee01, 0x41, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae88}) semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000140)=0xfff) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/201) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000280)=0x7) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000002c0)=""/25) r1 = shmget(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000300)=""/98) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)=[0x5]) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f00000003c0)=0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4010) r3 = semget(0x0, 0x3, 0x9) semctl$GETPID(r3, 0x4, 0xb, &(0x7f0000000540)=""/24) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400060}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0xb0}}, 0x4) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000700)=""/192) [ 88.798550] audit: type=1400 audit(1737613310.610:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:21:50 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x104, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "243283b55b1305ae5944531d9a993d5e3bf32a8e61be7715d6b3c9d9b1e93fe6"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xb4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x76c}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xef}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bd03acd30a7a7fff8280f2f429f66434926af7eb19c699cfcc7d0f516efe7861"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "42969fe14fc1bb5d2c8fae10056d6f2d"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x2404c805) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}}, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000e40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000640)={0x788, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x26}}}}, [@NL80211_ATTR_BEACON_TAIL={0x368, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0x64, 0x9}}, @perr={0x84, 0x10e, {0x7, 0x10, [@ext={{}, @broadcast, 0x4, @device_b, 0x3e}, @not_ext={{}, @device_a, 0x7, "", 0x26}, @not_ext={{}, @broadcast, 0x1, "", 0x1a}, @ext={{}, @device_a, 0x8, @broadcast, 0x3f}, @ext={{}, @device_b, 0xd1, @broadcast, 0x2}, @ext={{}, @device_a, 0xffffffe1, @broadcast, 0x40}, @ext={{}, @device_b, 0x80000000, @broadcast, 0x10}, @not_ext={{}, @device_b, 0x4bfc, "", 0x3c}, @ext={{}, @device_a, 0xeea, @device_b, 0x5}, @not_ext={{}, @device_a, 0x2, "", 0xd}, @not_ext={{}, @device_a, 0x7fff, "", 0x3e}, @ext={{}, @broadcast, 0x8, @broadcast, 0x11}, @ext={{}, @device_a, 0x3ff, @device_a, 0x3a}, @ext={{}, @broadcast, 0x6, @broadcast, 0x1c}, @not_ext={{}, @device_b, 0x4, "", 0xb}, @ext={{}, @device_b, 0xffff, @broadcast, 0x3d}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x81, @device_a, 0x61e5, "", 0x3, 0x1, @broadcast, 0x8}}, @perr={0x84, 0x6f, {0x18, 0x7, [@ext={{}, @device_b, 0x80, @broadcast, 0x3b}, @not_ext={{}, @device_a, 0x3ff, "", 0x18}, @not_ext={{}, @device_b, 0xffffffff, "", 0x31}, @ext={{}, @device_a, 0x2, @device_b, 0x34}, @not_ext={{}, @broadcast, 0x6, "", 0xa}, @not_ext={{}, @broadcast, 0xa35, "", 0x24}, @ext={{}, @broadcast, 0xffffffff, @broadcast, 0x20}]}}, @random={0xff, 0xa3, "d05b9ce7a844d5bdff1144585726ac114ded830042c67e0e23149129f2c355f98f64046d5a04f5fb53a2d8877b0a6d89b5986ce14d2b02119f24e5261f9c5c8d9349898ebcb201c9fdd0005693066284ade054f5b46ed06090b6ee4cfcbdc0714dafdec5da9f6fdeb260effa601df589511bee47c2e147010f7b5bab413418a6ca571353ebe0cd0c9e75473dbad037020572bf8315806c3bdb122a4314db391b2b2017"}, @tim={0x5, 0xec, {0xff, 0x1e, 0xa3, "7a8aa52ad602ff36bf0fc1babfee766ea6a1ffa1044d58b632103b87d9cf11f3bd1cc628f74cc6043aed185598c7cd6dc8a6651192f2669b1b1eb4bd0d5716867dd56ebaecce6d21c085430b81e8d61fdd2c400bdea4468782d9e4e65c768f419c5953166a7626de06fc97e1d456cea1eb8530c2ad137e44e8a4295c54743ac3788046d222bc5753a6c55554e9c62518c94ed3060e898b5475f5e1647334cc66e4623713442983407b71d1957d04e9cba061b33c14b0276d050b9c68d223e303d1af59b1d361ec7f1cb9b24fb6d781f623b3398a0dd91a74fa8d96443dfccf28215df2e8c09c026a84"}}, @mic={0x8c, 0x18, {0x365, "8afe4fc20e14", @long="30da3a1aaf5599efae2c8ccf162928fc"}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb2}, @channel_switch={0x25, 0x3, {0x0, 0x40, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x1a4, 0x91, "fd4d505fd89f2a60726688cec04fbcfb2f719e991fa729fdcf61ec8e4d18b198171752f99516cfc080ec618018b0e5c096a75ceb62dec378856f0608b7eeb0c229bf16de4202b6be4003d81c1671d7a4ee6d29ebb1fa1360c59b0a6b3979abe9ddd8016129ca1db6235aa29dd8a3a449e864846d8b01dee5283b1e39b721724510bf3b89e32591160740be3850a4a0197bf492240835a3142cda600f926325c6bc8b4cb9c73a88f9586069e4b56156fb671c434f9518a122a302b640980e3accd07fb564556c6d7d565f39b77ee5dc4fd446b1bc1a33203adc149dad84358e2f8c2a3a581038a7b4ddf6ee6e161838a35831ab7a1a34e6bf2204977c0f57805aae6d66b340191987e1fe2e4f2706dc9f1541612c99f4ca4a77b3d251be8431008943ed6d121632f043859c1b57a7920613a1bd7dcf9815058090ad1b400627546638a6fef0af3779aa95aa8ee287ffa48045853fd58fc8baf92d1c2eb5de3e446c94d33b7da361af7be450c878908f3267b246bc4ef8383e76a99ead1ec17ac42614a48f4c2f476667022004962db1b4e16a1252f4594b6f1d04d89f0ca67242"}, @NL80211_ATTR_PROBE_RESP={0x153, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x105, 0x7f, [@chsw_timing={0x68, 0x4, {0xff01, 0x2}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x2, 0x7, @device_b, 0x6d77, 0x6b, 0x6}}, @dsss={0x3, 0x1, 0xb5}, @ibss={0x6, 0x2, 0xffa8}, @measure_req={0x26, 0xdb, {0x3, 0x3, 0x81, "0b3d6bcc7d23fc491bd2be807ff7c9ca4998e1507d7e1bc468fc80d72a8cb2b0c1c9787b6b0f883e53fe3e51a84a67eff4d3ba61af7162b1a37840091597e4b5ae84ca44722f3c4806367b74e8233948d8f46abd8559e8491182f0b6a589526280fced60f3ea7120f8371ee41c6511ba8f24d5cc4f28b7f5836a697ab095f85ed4d0b5cdc641572d07fdecf32138b05ed4efda51db37eb8377d970ab93a26bce52bb69caeedaf354713fb2f43aa9b1fcc7570c28e619a14bc2d62c1fd65cdc576b5d5a4a068fad13ee6cd1cfb88e0c9c3ef94ada26e9adb7"}}]}]}, 0x788}, 0x1, 0x0, 0x0, 0x1}, 0x805) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001000)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000080) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x1c}}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x79edd0bbd8e8cfaf}, 0x1000) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xd42103b08e461bd0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x74, r0, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40) 06:21:50 executing program 6: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x202, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xefd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008000) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x15e40241}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7a3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x20008800) r1 = accept4(r0, 0x0, &(0x7f0000000340), 0xc1000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) r3 = socket(0x29, 0x1, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x20004000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa8, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2b6215ec22d172daed63979a84202bf8734fd13bdbb1399e47d126ac14fa60c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dfa4e6193e8fce7d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d006e9a377d2e80bdfed41497f7ad505ddfb0b6b8d5421d9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b30de5619aeedbb3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bc5909d59ab8371"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ddf901bf986fd04db36a5a5b17bfd6b07a85c6c5b8017b21"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc4}, 0x4000040) getgid() sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe4, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb03f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2204c019}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x200008c4) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x85}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004805}, 0x20) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002280)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002240)={&(0x7f0000000fc0)={0x125c, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_BEACON_TAIL={0x66, 0xf, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1, 0x1}, 0xe9, 0x0, 0x401, @broadcast, 0x8, "", 0x4, 0x80000001, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_b, 0x3ff}, {{0x1}, @device_a, 0xfff}, {{0x0, 0x0, 0x1}, @broadcast, 0x80000000}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0x30}, @ibss={0x6, 0x2, 0x5}]}, @NL80211_ATTR_BEACON_TAIL={0x1e7, 0xf, [@prep={0x83, 0x25, @ext={{}, 0x5, 0x6, @device_a, 0x2, @broadcast, 0x7c75, 0x2, @broadcast, 0x1ff}}, @random_vendor={0xdd, 0xe4, "179ae7c03475f27e3a6bf230bbc611a24316e6ae3295bf902c45fa4059abe9b48bf46de9eb1e6d3c31064d8637b479197f2ed65a111144f5cb5e45eb57fde07e53abb5cc744771f67dbdc91731a5c191fb6fc9676aa3a1d703e8dad1e34ca1e34516528d5559813cca9f7e73477426bdf75e0f5eefc9e0d07792159d2ddbc7ea651127d6d2cf69d2bd0ca2f714d665019a9acfd2efb640f69168999e7c81d96c6b82017c70e078b79557e4063c8cf443ad805066088b6f989943acc8b6f8bde1c3d5f65cb3102289f812098ab91f6f11236e8620b62b14ce3c17b2585e34a08f7562ac87"}, @peer_mgmt={0x75, 0x18, {0x0, 0x9, @val=0x1, @val=0x2, @val="8833036b6b1306c9d64c26fab21cb95e"}}, @random={0xfb, 0xa6, "6449f4f8bc6b2231367aaf55e27b269603cb876896cadfa4b380e1feba037395252989ba6a3f5a9775b149fe1a3a67af291ae3a3503b7bc653fe9dbd02df0576b52d8b41cbcdd684f49b1f0aa36cc455af447c58dc9f1ef4ac44236d9de31092358608db9b18481b60b37ea399d4113ae418b8808238cb6033b585ce1b57287525b9ae98faa9bcd4f9ae9532268dbf510477bd35c9ff77d9ae93953deedf68bd3323de3436fa"}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x24, 0x80, [@random={0x8, 0x1b, "191d32c2578af65edc61de205111ab148df99bd795caa499c65fc7"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x3c7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xe8}, @device_b, @device_b, @random="66f9e15f39bd", {0xd, 0x2}}, 0xc3, @default, 0x8002, @val={0x0, 0x1d, @random="d452dfe7c25103d8d172ff2dbf7a129e52522147e9013ccca1105441b5"}, @val={0x1, 0x7, [{0x24, 0x1}, {0x36, 0x1}, {0xc}, {0x9}, {0x12}, {0x36}, {0xc}]}, @val={0x3, 0x1, 0xb6}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0x22, {0x7, 0xda, 0xf8, "8f7b2a82ee9325c4e35c6529b9a90bb4ed0d517d97d92dc403776f26bf2ad6"}}, @val={0x25, 0x3, {0x1, 0x70, 0xd1}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0xfe, 0xaf, 0x9}}, @val={0x2d, 0x1a, {0x40, 0x0, 0x3, 0x0, {0x8, 0x80, 0x0, 0x386, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x8, 0x8}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x0, 0x3a, 0xb77f}}, [{0xdd, 0xe6, "9571931b7990a4ceb4216b710b12dc0574666abdb435701e1f90459f3e5a2a2cfef6a0fc0c9cdb14aac8bdd33cf46e752eecc3b2189263f545d5e942f8ca073adcc85f8aa5b1a26aafe213053e3ae5d0f7c1c8891583061e06dc412596db08c38eba469805c6d200cfa48ef7b8fc3d4117534c53aaa69171da6de4000038d81c20faa51b1bce3a1260bb0eaa3a6d21113621da347b283a129bebf709a7f1c375ae069ba00c569e7d58f9fbafb30a6e2b5dde5a3b83d9fb70376c1f939efa4042aef19c8968cfb409f1ded3fc5baac7eb3f43b68692fb8a45d4913bfc6247ad7eaf0ab70554a4"}, {0xdd, 0x3e, "7ba9e515bcfff8700fefec7d22aab867958c6cb726c960aea2d49eec8a36bc1f7994bfc5afc6691b54fe7a22412ff7f688734b58ce63e0dd46d969eb73b0"}, {0xdd, 0x3b, "e366e6275c67f99f06f43dc2673f985b360360a7845b33d503dcab5c0453f3a86cfe63d9e45138f47668c5dd9be4326e6d44e488abd9a58f4c743e"}, {0xdd, 0x45, "cb30695251a89f97b460acffd0c9341ff74fe2e4a82b4c248d143d5375d31e90d527cb90fd97a8db26fa5bda65aadefe31b8b525226d81d3478ab1555efd16ce3860ce546f"}, {0xdd, 0xc0, "8162f4a8f28aed77ab1cfc721ed9ca98018bcf5134fa0aac813ebdc239948d7b96c495ad8eb130f83fed85abe07d008108409b018c6f9b73b1f0a187b4fa1d8ef863aa9ea077084422801595217ec2535c4db66809cd09042de6a68c11233fef589d45448c3160e66fcc09cdd4d07aa61a4a8ba98304851f7fd59790e014c28a920c4d114a1408b3c85f2fa29b34da34f0ec3cc96438d500999cbef5fe269a255059df64ea9d5de16622417dc2da9b79c3cb10f0f969ac4f059edf7956c18e1f"}, {0xdd, 0xa2, "00aaafe882ce11cfa8ad7bd49d8d545db99bacdddee7b4221ed917a17b1051c756e5d8c86366bf69c35a04d185a48584008b08158ee044bef35f083e78951013c6d9651c1daa7985652f78943926c7fbf96fc48abd1c3914b56f5c1be2eb4edf79f7c56be519663fbefa11b1ae753cdfb17bc8c390b44e97c019028f37a3e2741629c682375ea8f948787870cc949303b7f43ef5603d1d30c9a090aa2032b7893942"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x8a, 0x3, "5266eee1f526ae14403b51c542c964779cbbb9ead1d01ea40d4959b1bad1fad88e9372954912a2b52edf8b2f7145445e9a2c4a43e0d9b9ec0ef13d962509751cc88649c724f8ccee21597c5afbe1072c8843b7cec14632312861a3d778e93848baa16c66197a37735a31a5f4b277b6d009e3ce3c94489a7b03ec76391eb782c55e73d450132d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf0, 0x3, "47fc4d89a27c0ae1e407e18452903ca3e84d14ccd60dce0f489ad3c6ccc3a3e3810cfe1ebde1bb81a9f729a1554d1656410ce4f63c55a2edd7a8d016455b59c7f4496973ba2e9bd5d7c15438d3143f94bb972dfc691923e4f12e883cf641e2b6a07d3a904fa36b28abac0108be334cb0c07f2e0eb4da14cefdb376a2b45f44387a3e4beea9e2781ec3f985d25c8e3f81fa49524286f5f51c8bd53fe8b21abe72020c440766c321ee8998f948e287f5131f243db21b995cb7dfe60c6984fd4f08c94963c8b6d7a62f5e01596aca37b747e1786f09ca4d0b443478b32ac44b7c0efa04235413eaaa3dd3ba795d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "f814b6a96083c32d2f7718100fca92de4c4f7f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "f454e12e0178bf71f91dbc7952e26b9d9cf78c6278a082cb352f1df8d4823791fa"}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x65b, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x3cb, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="9649ef8b3b8e", {0x5, 0x1}}, @ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4, @random=0x9, 0xc130, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x5}, @val={0x5, 0x55, {0x1, 0xb3, 0x9, "416f57daafa6897a9dc4dca246472cc70ccfabcfb4bbd5849df6856f35667f68935eb988e4cfb23bcc0bb333b929e17f523c377c5a262435e490f80b0e9877c41273817d2a34dde3867d95e7f6f2a1021f46"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0x24, 0x37}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x173, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa1, "45c995352a6a8059b98ed52121f1baf00fd6765a630132fe5e6591a6931851ad4ed5e312afac58955a5580b6370930b05ac42297668c5ccb9cda5fddb839b4a556f090f12427b3cee769b535542589bac6ab1e26cf0837a0d3ec3cbeffa30daa7e665cd91ae41266069a5fb169d93c4389c4fea6939f2254a0ac81811a544eb12b54471333b2af860644ae6817f6f271cbcc28a7b187c266a6fadb78d8612ba5f0"}, {0xdd, 0x54, "ad1c41f0f07139be05182328fe34af3062c923952ccd90a0a8d78394b4e426c52cdd0280ffae36013cfa8021afd2adb6855aaad6bd461eee38be67110d6d27339ec7756b83ca6295b9287f242ec77b07bf88ccf9"}, {0xdd, 0x9f, "b93c816857615e84f18f96db5bc323d1dd82f59b4780853db58ac0b46fe5f41de49fe4a3ed8150da77037ca7f15e3a03698f57f9221ad4ee9f537fe013aaac5dc2caa12c0cc398dda73a0d8aefd06511c1732257262ad361a5001a600c2f08453b14602e190e1ddf4c83be087c78f26a43481e53630c5b8fe27cd2d479f2f444aceedb4ba56ee01c7675b54584d4882aecce1ffc80eb35c288838a8d5e2d8f"}, {0xdd, 0x56, "f39839b9f89335775c5777217c7e796f5dd0600c702ecf3e67a526bfa3ac06cab84cdc52dfb3016d9a457ebb50027531a1e2912d2ba93938ad5b2cb4dc91bc7ed1e1771350d5ccfcdd7825284cad895a09dd302a313d"}, {0xdd, 0x71, "0b06adc93dc1cb3811058207f0ad5c099218477179f91bbe09eabe6d90c077f06a34070d4861dca720d12ca2522134cd8f8985a0c3d472373669e4f123ab953aceb763ce166fd89c21fdbcdd47f02b90bf74c53a7e3908a481faf6ad088950ac8c9bba062e4864a7109defc0088c0f8074"}, {0xdd, 0xa8, "2a662dce513def8578434db6bc66e20a99fd5b9acca139ef6d3f8fd4682fce73aa7cb51e8ca66a90778303d180e15f3365e32682c453717b26e6b0375974c8e2c51471b5ad5ee4d71e623daffc2b635e3a7d1d7d074fc7694a49b351cdacc01f5416e006fcd5a0518647a08feee62a3dd21dc97f520ee6743eddebe73461716344a8b27143ad433cf88653bf431e1f04c586ea86afcef66511eaca9b49fc78e78742daee610f3a31"}]}}]}, 0x125c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004090) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002380)={&(0x7f00000022c0), 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40044) 06:21:50 executing program 7: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3a19221af8181a98}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40060}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x10000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x8c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40800}, 0x884) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x144, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf708}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4805}, 0x40040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x480c0}, 0xc000) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc4a, 0x34}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x42}, 0x40840) getpeername(r3, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000c40)=0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, r8, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fe, 0x13}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2c0500460967d86820e4d691759c9820c89081b52a51a0cb"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ce}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14016}, 0x5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x80) [ 90.349689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.353788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.356359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.363109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.366216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.368197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.402391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.407182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.409499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.414362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.417439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.419196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.421424] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.422472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.423831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.434755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.440780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.442690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.494124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.498390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.507816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.512364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.519423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.520446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.524356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.535515] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.538502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.550481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.553136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.558874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.559234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.564487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.570371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.595395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.602394] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.605501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.634467] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.637446] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.641512] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.650574] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.658084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.664194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.705925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.713171] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.719114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.750482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.757168] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.759503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.430452] Bluetooth: hci0: command tx timeout [ 92.495407] Bluetooth: hci2: command tx timeout [ 92.495475] Bluetooth: hci1: command tx timeout [ 92.622161] Bluetooth: hci3: command tx timeout [ 92.688020] Bluetooth: hci4: command tx timeout [ 92.750042] Bluetooth: hci6: command tx timeout [ 92.750723] Bluetooth: hci5: command tx timeout [ 92.878043] Bluetooth: hci7: command tx timeout [ 94.478061] Bluetooth: hci0: command tx timeout [ 94.542069] Bluetooth: hci1: command tx timeout [ 94.543114] Bluetooth: hci2: command tx timeout [ 94.675757] Bluetooth: hci3: command tx timeout [ 94.734085] Bluetooth: hci4: command tx timeout [ 94.798067] Bluetooth: hci5: command tx timeout [ 94.798164] Bluetooth: hci6: command tx timeout [ 94.927983] Bluetooth: hci7: command tx timeout [ 96.527010] Bluetooth: hci0: command tx timeout [ 96.592046] Bluetooth: hci2: command tx timeout [ 96.592077] Bluetooth: hci1: command tx timeout [ 96.718028] Bluetooth: hci3: command tx timeout [ 96.783071] Bluetooth: hci4: command tx timeout [ 96.847070] Bluetooth: hci6: command tx timeout [ 96.847097] Bluetooth: hci5: command tx timeout [ 96.974014] Bluetooth: hci7: command tx timeout [ 98.574115] Bluetooth: hci0: command tx timeout [ 98.638011] Bluetooth: hci2: command tx timeout [ 98.639018] Bluetooth: hci1: command tx timeout [ 98.766087] Bluetooth: hci3: command tx timeout [ 98.831972] Bluetooth: hci4: command tx timeout [ 98.894102] Bluetooth: hci5: command tx timeout [ 98.894494] Bluetooth: hci6: command tx timeout [ 99.023146] Bluetooth: hci7: command tx timeout [ 152.676494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.683721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.691346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.701719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.708717] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.711688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.916634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.921580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.928196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.941182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.947722] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.950283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.993698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.008759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.011477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.021138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.024217] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.035895] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.039494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.040275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.040821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.046667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.059401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.060407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.063480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.071496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.074414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.080445] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.081898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.085343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.086160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.086765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.087904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.091718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.108633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.115112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.115357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.118715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.119739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.130441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.139152] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.140289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.144178] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.147405] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.151236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.188298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.194534] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.196375] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.767216] Bluetooth: hci0: command tx timeout [ 155.023066] Bluetooth: hci1: command tx timeout [ 155.150008] Bluetooth: hci2: command tx timeout [ 155.151172] Bluetooth: hci3: command tx timeout [ 155.214993] Bluetooth: hci5: command tx timeout [ 155.215018] Bluetooth: hci4: command tx timeout [ 155.215422] Bluetooth: hci6: command tx timeout [ 155.278086] Bluetooth: hci7: command tx timeout [ 156.815543] Bluetooth: hci0: command tx timeout [ 157.069988] Bluetooth: hci1: command tx timeout [ 157.198589] Bluetooth: hci3: command tx timeout [ 157.198620] Bluetooth: hci2: command tx timeout [ 157.262139] Bluetooth: hci5: command tx timeout [ 157.262908] Bluetooth: hci4: command tx timeout [ 157.263043] Bluetooth: hci6: command tx timeout [ 157.326068] Bluetooth: hci7: command tx timeout [ 158.862001] Bluetooth: hci0: command tx timeout [ 159.118242] Bluetooth: hci1: command tx timeout [ 159.246004] Bluetooth: hci3: command tx timeout [ 159.246045] Bluetooth: hci2: command tx timeout [ 159.311225] Bluetooth: hci6: command tx timeout [ 159.311450] Bluetooth: hci4: command tx timeout [ 159.311508] Bluetooth: hci5: command tx timeout [ 159.375074] Bluetooth: hci7: command tx timeout [ 160.910172] Bluetooth: hci0: command tx timeout [ 161.165987] Bluetooth: hci1: command tx timeout [ 161.293990] Bluetooth: hci3: command tx timeout [ 161.296966] Bluetooth: hci2: command tx timeout [ 161.358138] Bluetooth: hci4: command tx timeout [ 161.358186] Bluetooth: hci6: command tx timeout [ 161.358246] Bluetooth: hci5: command tx timeout [ 161.422036] Bluetooth: hci7: command tx timeout [ 210.501135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.501436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.122398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.122574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.863205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.863294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.784573] [ 212.785022] ====================================================== [ 212.786183] WARNING: possible circular locking dependency detected [ 212.787347] 6.13.0-next-20250122 #1 Not tainted [ 212.789308] ------------------------------------------------------ [ 212.794850] kworker/u8:2/7032 is trying to acquire lock: [ 212.795873] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.797811] [ 212.797811] but task is already holding lock: [ 212.798881] ffff888016228768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 212.800760] [ 212.800760] which lock already depends on the new lock. [ 212.800760] [ 212.802244] [ 212.802244] the existing dependency chain (in reverse order) is: [ 212.803627] [ 212.803627] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 212.804897] __mutex_lock+0x13d/0xb50 [ 212.805817] wiphy_register+0x1b2e/0x25d0 [ 212.806785] ieee80211_register_hw+0x23a4/0x3d60 [ 212.807836] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 212.808943] init_mac80211_hwsim+0x389/0x870 [ 212.809978] do_one_initcall+0xf9/0x640 [ 212.810913] kernel_init_freeable+0x53d/0x7a0 [ 212.811942] kernel_init+0x1e/0x2d0 [ 212.812779] ret_from_fork+0x48/0x80 [ 212.813637] ret_from_fork_asm+0x1a/0x30 [ 212.814581] [ 212.814581] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 212.815790] __lock_acquire+0x29fd/0x4580 [ 212.816742] lock_acquire+0x19b/0x520 [ 212.817618] __mutex_lock+0x13d/0xb50 [ 212.818515] unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.819730] unregister_netdevice_queue+0x224/0x2e0 [ 212.820813] _cfg80211_unregister_wdev+0x57b/0x700 [ 212.821910] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 212.822980] ieee80211_unregister_hw+0x55/0x3a0 [ 212.824005] hwsim_exit_net+0x3a0/0x730 [ 212.824912] ops_exit_list+0xb3/0x180 [ 212.825819] cleanup_net+0x546/0xad0 [ 212.826678] process_one_work+0x8ee/0x1a10 [ 212.827664] worker_thread+0x674/0xe70 [ 212.828595] kthread+0x3ab/0x720 [ 212.829424] ret_from_fork+0x48/0x80 [ 212.830282] ret_from_fork_asm+0x1a/0x30 [ 212.831243] [ 212.831243] other info that might help us debug this: [ 212.831243] [ 212.832723] Possible unsafe locking scenario: [ 212.832723] [ 212.833833] CPU0 CPU1 [ 212.834713] ---- ---- [ 212.835590] lock(&rdev->wiphy.mtx); [ 212.836386] lock(rtnl_mutex); [ 212.837534] lock(&rdev->wiphy.mtx); [ 212.838765] lock(rtnl_mutex); [ 212.839471] [ 212.839471] *** DEADLOCK *** [ 212.839471] [ 212.840573] 4 locks held by kworker/u8:2/7032: [ 212.841444] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 212.843446] #1: ffff88802273fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 212.845374] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 212.847183] #3: ffff888016228768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 212.849190] [ 212.849190] stack backtrace: [ 212.850064] CPU: 0 UID: 0 PID: 7032 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250122 #1 [ 212.851597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 212.853095] Workqueue: netns cleanup_net [ 212.853907] Call Trace: [ 212.854409] [ 212.854858] dump_stack_lvl+0xca/0x120 [ 212.855678] print_circular_bug+0x47b/0x750 [ 212.856550] check_noncircular+0x2e9/0x3c0 [ 212.857390] ? __pfx_check_noncircular+0x10/0x10 [ 212.858335] ? hlock_class+0x4e/0x130 [ 212.859079] ? mark_lock+0xac/0xed0 [ 212.859803] ? __pfx_mark_lock+0x10/0x10 [ 212.860596] ? lockdep_lock+0xba/0x1b0 [ 212.861418] ? __pfx_lockdep_lock+0x10/0x10 [ 212.862332] __lock_acquire+0x29fd/0x4580 [ 212.863190] ? __pfx___lock_acquire+0x10/0x10 [ 212.864088] ? lock_release+0x20f/0x6f0 [ 212.864894] ? __pfx_lock_release+0x10/0x10 [ 212.865778] lock_acquire+0x19b/0x520 [ 212.866555] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.867700] ? __pfx_lock_acquire+0x10/0x10 [ 212.868564] ? srso_return_thunk+0x5/0x5f [ 212.869433] ? lock_release+0x20f/0x6f0 [ 212.870254] ? srso_return_thunk+0x5/0x5f [ 212.871101] ? lock_is_held_type+0x9e/0x120 [ 212.871982] ? srso_return_thunk+0x5/0x5f [ 212.872851] __mutex_lock+0x13d/0xb50 [ 212.873641] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.874757] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.875893] ? srso_return_thunk+0x5/0x5f [ 212.876760] ? synchronize_rcu_expedited+0x38a/0x420 [ 212.877742] ? __pfx___mutex_lock+0x10/0x10 [ 212.878609] ? __pfx_autoremove_wake_function+0x10/0x10 [ 212.879645] ? srso_return_thunk+0x5/0x5f [ 212.880499] ? kasan_quarantine_put+0x84/0x1e0 [ 212.881424] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 212.882330] ? srso_return_thunk+0x5/0x5f [ 212.883199] unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.884313] ? __virt_addr_valid+0x2e8/0x5d0 [ 212.885214] ? __pfx_lock_release+0x10/0x10 [ 212.886084] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.887235] ? find_held_lock+0x2c/0x110 [ 212.888080] ? srso_return_thunk+0x5/0x5f [ 212.888941] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 212.889951] ? srso_return_thunk+0x5/0x5f [ 212.890814] ? lock_release+0x20f/0x6f0 [ 212.891625] ? __pfx_lock_release+0x10/0x10 [ 212.892489] ? srso_return_thunk+0x5/0x5f [ 212.893351] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.894394] ? srso_return_thunk+0x5/0x5f [ 212.895268] unregister_netdevice_queue+0x224/0x2e0 [ 212.896258] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 212.897324] ? up_write+0x195/0x520 [ 212.898082] _cfg80211_unregister_wdev+0x57b/0x700 [ 212.899050] ? srso_return_thunk+0x5/0x5f [ 212.899904] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 212.900866] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 212.901932] ? srso_return_thunk+0x5/0x5f [ 212.902793] ? srso_return_thunk+0x5/0x5f [ 212.903648] ? synchronize_rcu+0x1ff/0x260 [ 212.904479] ieee80211_unregister_hw+0x55/0x3a0 [ 212.905407] hwsim_exit_net+0x3a0/0x730 [ 212.906205] ? __pfx_hwsim_exit_net+0x10/0x10 [ 212.907094] ? srso_return_thunk+0x5/0x5f [ 212.907958] ? netdev_run_todo+0x788/0x1040 [ 212.908816] ? __pfx_hwsim_exit_net+0x10/0x10 [ 212.909707] ops_exit_list+0xb3/0x180 [ 212.910477] cleanup_net+0x546/0xad0 [ 212.911228] ? __pfx_cleanup_net+0x10/0x10 [ 212.912078] process_one_work+0x8ee/0x1a10 [ 212.912953] ? __pfx_lock_acquire+0x10/0x10 [ 212.913814] ? __pfx_process_one_work+0x10/0x10 [ 212.914778] ? srso_return_thunk+0x5/0x5f [ 212.915619] ? move_linked_works+0x172/0x270 [ 212.916487] ? srso_return_thunk+0x5/0x5f [ 212.917353] ? assign_work+0x196/0x240 [ 212.918177] worker_thread+0x674/0xe70 [ 212.918997] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.920041] ? srso_return_thunk+0x5/0x5f [ 212.920884] ? __pfx_worker_thread+0x10/0x10 [ 212.921802] kthread+0x3ab/0x720 [ 212.922510] ? __pfx_kthread+0x10/0x10 [ 212.923302] ? srso_return_thunk+0x5/0x5f [ 212.924153] ? finish_task_switch.isra.0+0x206/0x840 [ 212.925145] ? __pfx_kthread+0x10/0x10 [ 212.925944] ret_from_fork+0x48/0x80 [ 212.926665] ? __pfx_kthread+0x10/0x10 [ 212.927461] ret_from_fork_asm+0x1a/0x30 [ 212.928310] [ 214.684019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.687292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.693085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.697689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.702591] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.704609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.869721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.873800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.876840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.881816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.887590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.892732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.004454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.015077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.020627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.026533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.034195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.037135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.132586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.134384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.136263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.155397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.167302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.171258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.193192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.204468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.212061] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.219272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.220536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.237265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.257224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.258657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.286396] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.295535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.295543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.297015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.304960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.305008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.316995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.368224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.370659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.388864] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.397213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.397649] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.400122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.455242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.477036] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.486164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.781974] Bluetooth: hci0: command tx timeout [ 216.910013] Bluetooth: hci1: command tx timeout [ 217.102096] Bluetooth: hci2: command tx timeout [ 217.230022] Bluetooth: hci3: command tx timeout [ 217.358063] Bluetooth: hci5: command tx timeout [ 217.421963] Bluetooth: hci4: command tx timeout [ 217.486010] Bluetooth: hci6: command tx timeout [ 217.678947] Bluetooth: hci7: command tx timeout [ 218.830976] Bluetooth: hci0: command tx timeout [ 218.958199] Bluetooth: hci1: command tx timeout [ 219.150000] Bluetooth: hci2: command tx timeout [ 219.278124] Bluetooth: hci3: command tx timeout [ 219.408993] Bluetooth: hci5: command tx timeout [ 219.470934] Bluetooth: hci4: command tx timeout [ 219.535020] Bluetooth: hci6: command tx timeout [ 219.725985] Bluetooth: hci7: command tx timeout [ 220.878960] Bluetooth: hci0: command tx timeout [ 221.007018] Bluetooth: hci1: command tx timeout [ 221.197952] Bluetooth: hci2: command tx timeout [ 221.326051] Bluetooth: hci3: command tx timeout [ 221.454042] Bluetooth: hci5: command tx timeout [ 221.517961] Bluetooth: hci4: command tx timeout [ 221.581952] Bluetooth: hci6: command tx timeout [ 221.774048] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:23:54 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88802273ebb8 R8 =0000000000000001 R9 =ffffed10044e7d67 R10=0000000000000038 R11=2d2d2d2d2d2d2d2d R12=0000000000000038 R13=0000000000000001 R14=ffff888008fea009 R15=ffff88802273eeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056237e089e78 CR3=0000000015882000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000042510177a2160000 XMM02=00000000000000003fd3333333333333 XMM03=000000c0003421b0000000c0000562d0 XMM04=000000c000086360000000c00005b500 XMM05=000000c0000863c0000000c000086390 XMM06=000000c000086420000000c0000863f0 XMM07=000000c000086480000000c000086450 XMM08=000000c0000864e0000000c0000864b0 XMM09=000000c00005b530000000c000086510 XMM10=000000c000086570000000c000086540 XMM11=000000c0000865d0000000c0000865a0 XMM12=000000c000086630000000c000086600 XMM13=000000c000086690000000c000086660 XMM14=000000c0000866f0000000c0000866c0 XMM15=000000c000102160000000c00005b560 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888009649800 RCX=ffffffff81429a4a RDX=1ffff110012c9300 RSI=0000000000000008 RDI=ffff888009649800 RBP=0000000000200000 RSP=ffff88800f8d7db8 R8 =0000000000000000 R9 =ffffed10012c9300 R10=ffff888009649807 R11=ffff88800f8c84b8 R12=ffff88806c296ff9 R13=ffffffff8861e798 R14=ffff88800f8c8000 R15=0000000000000086 RIP=ffffffff81429a5f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555aabdddb88 CR3=0000000015882000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000004392ae00000000004375a8 XMM02=0000000000439fea0000000000439a19 XMM03=0000000000441217000000000043a122 XMM04=0000000000439a1900000000004392ae XMM05=000000000043a1220000000000439fea XMM06=0000000000440d180000000000441217 XMM07=00000000004388ee00000000004389d3 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000