Warning: Permanently added '[localhost]:4845' (ECDSA) to the list of known hosts. 2025/01/25 10:13:00 fuzzer started 2025/01/25 10:13:00 dialing manager at localhost:40883 syzkaller login: [ 74.022920] cgroup: Unknown subsys name 'net' [ 74.127511] cgroup: Unknown subsys name 'cpuset' [ 74.169643] cgroup: Unknown subsys name 'rlimit' [ 80.443247] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 10:13:18 syscalls: 2217 2025/01/25 10:13:18 code coverage: enabled 2025/01/25 10:13:18 comparison tracing: enabled 2025/01/25 10:13:18 extra coverage: enabled 2025/01/25 10:13:18 setuid sandbox: enabled 2025/01/25 10:13:18 namespace sandbox: enabled 2025/01/25 10:13:18 Android sandbox: enabled 2025/01/25 10:13:18 fault injection: enabled 2025/01/25 10:13:18 leak checking: enabled 2025/01/25 10:13:18 net packet injection: enabled 2025/01/25 10:13:18 net device setup: enabled 2025/01/25 10:13:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 10:13:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 10:13:18 USB emulation: enabled 2025/01/25 10:13:18 hci packet injection: enabled 2025/01/25 10:13:18 wifi device emulation: enabled 2025/01/25 10:13:18 802.15.4 emulation: enabled 2025/01/25 10:13:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/25 10:13:18 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/25 10:13:18 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/25 10:13:18 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/25 10:13:19 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/25 10:13:19 fetching corpus: 0, signal 0/12000 (executing program) 2025/01/25 10:13:19 fetching corpus: 0, signal 0/14000 (executing program) 2025/01/25 10:13:19 fetching corpus: 0, signal 0/14245 (executing program) 2025/01/25 10:13:19 fetching corpus: 0, signal 0/14245 (executing program) 2025/01/25 10:13:21 starting 8 fuzzer processes 10:13:21 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "6bd299f2b36072ad", "80519b54f0be5e1678499df6bacc34c6", "cf5f8fa5", "c1a11247b692679d"}, 0x28) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x1, 0xffffffffffffad43, 0x2}) r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80000) listen(r2, 0x5) r3 = signalfd4(r2, &(0x7f0000000140)={[0x7]}, 0x8, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000200)={0x1f, 0x50, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$inet6(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="47007a4f90a24ba422d2a29cc2c31e355793e57fa9f74fbdaa3b4a58eb6ef0c576c555ab379a20f4ec5434d8edb93c9417f4a869f56d8480a44b1dcb66b3292d81ecbc54b8fa6379eee3eeceed5f7fc0769105ad697e177eec599b7e97ca6030997e373110eec4570da02e71243468a2a899c26aa0db9046e62ce5d22c062472a0c1e2c601c21043868d624572a8adf2f5b3b38a3521ea9f411e7aa97e6bf1ea9e6bc858382a5c4aa96c432a855f4a3b82c825fff4d83e961e8ddbeb1f97", 0xbe}, {&(0x7f0000000340)="39710923148605b507b2483ebcdda7d5ebf42ff05d03185ab03c9f7853a8cc6dcf2fd2ce3dcc32256b5fe400fa7430d91ea46767d2ced1614d37bb988d278fed7995363a74d80d93878498cee7cdb2b91f5776a28ec6bcb1f03129d2b14870ca230fa2d182717c0eb0af8d7feedccd286e7a2ba94a1c0c847ef775ddd730e2719e20829dbf0f336d97c3570b68", 0x8d}], 0x2, &(0x7f0000000440)=[@dstopts={{0x50, 0x29, 0x37, {0x6c, 0x6, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x7f, 0xbc8, [0x1f, 0x7, 0xe365]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0x50}, 0x20004001) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8) getsockopt$sock_buf(r2, 0x1, 0xb9fe3b4b0cd3162a, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=0xb8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7, 0x700, 0x9, 0x2, {{0xa, 0x4, 0x0, 0x14, 0x28, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x3, 0xe4}, @cipso={0x86, 0x6, 0x3}, @noop, @lsrr={0x83, 0x7, 0x1d, [@remote]}]}}}}}) recvfrom$inet6(r2, &(0x7f00000006c0)=""/242, 0xf2, 0x2000, &(0x7f00000007c0)={0xa, 0x4e22, 0x6, @empty, 0x3f}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x8000}}, './file0/file0\x00'}) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000840)={0x909, 0x7, 0x5, 0x80000000, 0x6, [{0x3, 0x100000001, 0x5, '\x00', 0x1001}, {0x3, 0x100000001, 0x7, '\x00', 0x1781}, {0x5, 0x9, 0x400000000000, '\x00', 0x108}, {0x6, 0x1, 0x1, '\x00', 0x1400}, {0x7, 0x0, 0x8}, {0xfc, 0x80, 0x3f, '\x00', 0x480}]}) pipe(&(0x7f00000009c0)={<r6=>0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000a00)=[@window={0x3, 0x6, 0x81}, @sack_perm], 0x2) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x141002, 0x0) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000a80)={0x2, 0x1, 0x8000, 0x401, 0x926, 0x800, 0xc9f, 0x7, 0x7ff, 0x1, 0x3f, 0x3, 0xb232, 0x5}) 10:13:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x30540, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000000) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f451abc83c"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "d54f9a1baf"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "26cdd185382d137158fe6a9ebc"}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x13, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r4, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000440)=@llc, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000800)=""/27, 0x1b}], 0x6, &(0x7f00000008c0)=""/93, 0x5d}, 0x745b5702}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000009c0)=""/165, 0xa5}, {&(0x7f0000000a80)=""/42, 0x2a}, {&(0x7f0000000ac0)=""/164, 0xa4}, {&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/202, 0xca}, {&(0x7f0000000e40)=""/6, 0x6}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x8, &(0x7f0000001f00)=""/176, 0xb0}, 0x1}, {{&(0x7f0000001fc0)=@nfc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002040)=""/150, 0x96}, {&(0x7f0000002100)=""/47, 0x2f}, {&(0x7f0000002140)=""/130, 0x82}, {&(0x7f0000002200)=""/194, 0xc2}], 0x4, &(0x7f0000002340)=""/55, 0x37}, 0x5}, {{&(0x7f0000002380)=@pppol2tpv3in6, 0x80, &(0x7f0000002600)=[{&(0x7f0000002400)=""/236, 0xec}, {&(0x7f0000002500)=""/238, 0xee}], 0x2, &(0x7f0000002640)=""/181, 0xb5}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002700)=""/253, 0xfd}], 0x1, &(0x7f0000002840)=""/214, 0xd6}}, {{&(0x7f0000002940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002ec0)=[{&(0x7f00000029c0)=""/181, 0xb5}, {&(0x7f0000002a80)=""/216, 0xd8}, {&(0x7f0000002b80)=""/200, 0xc8}, {&(0x7f0000002c80)=""/230, 0xe6}, {&(0x7f0000002d80)=""/73, 0x49}, {&(0x7f0000002e00)=""/60, 0x3c}, {&(0x7f0000002e40)=""/9, 0x9}, {&(0x7f0000002e80)=""/9, 0x9}], 0x8}, 0x4}], 0x6, 0x142, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003100), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x3c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}}, 0x11) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000003200)={{0x1, 0x1, 0x18, <r7=>r5, {0x3, 0x295f}}, './file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0xc, 0x1, 'nl80211\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x9, 0x1, 'v*}[\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x2400c845) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000003380)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0xfffffc00}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x54, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0xc0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f00000036c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003680)={&(0x7f0000003540)={0x11c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10002}, 0x8044) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) 10:13:21 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x4004044) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x47}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x800}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.sectors\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff09c5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x4c000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x2}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048140}, 0x4000090) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000780)=0x7, 0x4) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc000) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000900)) syncfs(r3) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000940)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000980)=0x28) getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x80000a, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid}, {@loose}, {@access_client}, {@fscache}, {@posixacl}, {@version_u}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}]}}) 10:13:21 executing program 2: semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000000)) r0 = semget(0x2, 0x1ee0e6f3bd16f38b, 0x600) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/147, 0x93}, {&(0x7f0000001180)=""/169, 0xa9}, {&(0x7f0000001240)=""/230, 0xe6}], 0x4, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/200, 0xc8}, {&(0x7f00000014c0)=""/62, 0x3e}], 0x2, &(0x7f0000001540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001680)=""/200, 0xc8}, {&(0x7f0000001780)=""/10, 0xa}, {&(0x7f00000017c0)=""/21, 0x15}, {&(0x7f0000001800)=""/225, 0xe1}], 0x4, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x3, 0x77bbd537bcd5504d, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001a80)={{0x1, r6, 0xffffffffffffffff, 0x0, 0xee01, 0x158, 0x7}, 0x8001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x86c0}) semtimedop(r0, &(0x7f0000001b00)=[{0x2, 0x5, 0x1800}, {0x1, 0x6, 0x1000}], 0x2, &(0x7f0000001b40)={0x0, 0x989680}) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000001b80)) ioctl$RTC_AIE_OFF(r4, 0x7002) nanosleep(&(0x7f0000001bc0)={0x77359400}, &(0x7f0000001c00)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001c80)={'wlan0\x00', <r8=>0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x150, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_KEYS={0x128, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f36d436d0d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "35e66bd3ad"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "c5072ea326d656254c"}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a7da25414e"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "420e2644c1065b95b1d9c6d141"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8e0862e0f6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a4c15239f1d48771f7f13ed4b3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "08eab42fb505f363e2544581ccb8f0"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040}, 0x40001) r9 = openat(r7, &(0x7f0000001ec0)='./file0\x00', 0x220000, 0x2) bind$bt_hci(r9, &(0x7f0000001f00)={0x1f, 0x3, 0x4}, 0x6) r10 = creat(&(0x7f0000001f40)='./file0\x00', 0x20) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4841) r11 = semget$private(0x0, 0x1, 0x564) semctl$IPC_RMID(r11, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = signalfd4(r3, &(0x7f0000002080)={[0x5]}, 0x8, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, &(0x7f0000002100)={0xfbd0, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, r12, r3, r13]}, 0x4) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 10:13:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/19, 0x13}], 0x4, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x8d, 0x81, 0x9, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x40, 0x40, 0x9, 0x7}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x2}, {0x9}, 0x1, 0x0, 0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)="9b01947c67687cb7c091d42fb94f9e24ce08b3fa43e882bba5b5e6f98b4aaaadd8711e02d0fc1095280251cc4871025c692ddd9d0b58008bfc57c65c7ea990a949872fe6d021642193ac1512273202fccee5ad5f398239d24b2d030ba150ed13ecb7d4da3b20c165474ad546fad1fe2f224e86634648f03c837395d888b0ad35f4e9528dd25d79f52a494f629bb33d748e2a9931c36c6890fd207dc73cbfd14bfe111f909163fc6526636c0bc9aa8a3dd8097aed66982efde531d27b952454d1973246088b3d054118499df20d7021ce7157a6cc06fc95d1d4", 0xd9, 0x0, &(0x7f0000000600)={0x2, 0xfc, {0x1, 0xc, 0x33, "092e017060a8f101e4ad6d1b0ad751dcf1f26f7684deef48fb62630417cb7bcf53a4da5cb35458ae134371e79eb49d3ca6e331", 0xbc, "dfac543ed54469e353cb6a681ce57bbbcbb00e46fc8783d985c5210d4a7a4480a1a7f198b3096628bf3135d9bb8a0a5d5349d3369d31734db2daa165964fd55dcd16d1c1934e23d89a3903be62d7ca58802e10a281596f52e38b138d139d060acbecf49b88ccc8ab001311ea7fbb71673bed4afbe587d8a9848509a2af60f8fc15b16264b3a199b853b505c93ee0cf3017777217c1a44636df93afdea52b36bffc3101c30b3d61d473c6691b6fe4bbf4c79ace94589d9c25a7f4c566"}, 0x9e, "6849dbd43c8936a3b662102837e2a05daea8bef2a6a602f365e32eb7e2b32bf015e813b37d4dd35fbb4cafa7aeefa8bbeed9d975149227550a9ad3e040f95e4942aa54534b448ec0e32f912c989e3a327c0417e5e860e1048ffd5e4ff38763b7631c07e5910619e847e60c8af3d9068173a42f55b27de02067769001919024079fac445a6e1bf4032b9e078376a3fa12b63ed985d66296c3077376be070c"}, 0x1a6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x1000) r9 = openat$cgroup(r1, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0) write$binfmt_aout(r9, &(0x7f0000000940)={{0x107, 0xa7, 0x1, 0x151, 0x13, 0x6, 0x24c, 0xfd}, "8066b28067568061784b99523832d3a2e8b8a1d32a04e5031d412a31264cd3dde9aeb8d771c5c3d1fe86d8993e6aa085b7617bd2211a104fefc723c92f24b57ab5f4d2bc8179e578dae1bade2866d7ec80b86a95218608d75a4665a2eb2eeea478724066d47fb0956c95e280cd5450609eef450638789ae8b99ff55e30453692582188d4170b0d08c93e7334f21f37e87be6487d055193775014e0e53732f15f54366a81baf305f36eb28cdca2e03b432959d4f6ce96ea2dc4aca7ffa75a3ee12724f1ee18e663ea81cf4d0c546a7e1e9eaefef0960faa0bf9c900537cd46be23639c9d17a1a133bfd88d3358fb85bdc9364e0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x813) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000001180)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000001200)) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001240)={'TPROXY\x00'}, &(0x7f0000001280)=0x1e) ioctl$BLKSECTGET(r7, 0x1267, &(0x7f00000012c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x80, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0c0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x6) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0), 0x6000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 10:13:21 executing program 4: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @multicast2, <r0=>0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r0, 0x4, 0x7f, 0x7, 0x7f, 0x20, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x40, 0x70, 0x6}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/nfs', 0x102, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x1, 0x6, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xee01}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x6, 0x80000001, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x40, 0x7, 0x64}}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000300)) r3 = dup(r2) ioctl$CDROM_SELECT_DISK(r3, 0x5322, 0x4000000000) ioctl$CDROMVOLREAD(r3, 0x5313, &(0x7f0000000340)) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x370, 0x13, 0x400, 0x70bd27, 0x25dfdbff, {0x8, 0x3, 0x9, 0xbb, {0x4e24, 0x4e24, [0x7, 0x800, 0xffffffff, 0x2], [0x2, 0x7fff, 0xf5e, 0xd122], r0, [0x1, 0xfff]}, 0x40, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "c1131a93f44bbb138ba7c98e0b13bab02394d6e2fbe2457eeb39017944e89cf973d72be74deaba8e203271a9e98cb4d7694a527024fb22e6b687441f8049574f2b04a84498535e441aeb8ca1cc82d3c2e979bcab9ec2f032"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "75598f4769b6768aff2e64eeb8a90bc46ac95c6da3f0a79453"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "2f80239594d115fd3fdaa5106f8c32df744f8f8194c5b5d915d2c33ad34e146f20b96797c04c67d815897d0424c8cd37a4cbb80dd262afd0db5097e82a16bf5e2e6b35d7e25b88c846b6d52d1789a3a3202393af80afb83f5957c3884b165977fc54c2c418d918ca67ed7bea38cc92bd3b67cb3badfa99ef57983aa45e0587856253d4a19fc7437834a01a6f78b7c00c818ed3855c665760b66db4d22ce15476c8cfcc83227d091fe079f6803d22e9efb87caa9f09642eb54e0b20b7c91f196c51fae10d9ccc3c3c0003fb20eb50fa483b1e"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "038f1891539dffcd27537476269898cdf05f2e29eedab4bb4aeb8c5e1395382f7d3b32b3afcb7cbe955ad92b4be68d41fdf9f91ad8b53ec61c9337ffd8360df23f6e618c79e9ab377f336cf4a01c2a8435a157216e52abe4f263b8df5128933c4fa4c75782c506ff0c"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "c57a02474d1bdc2f4d7b66a4c5d4bbe31f820258495ab8213644d3a0b0bc09aa28efd3977dd8dab38395a6eb27ff7512456e4fee2eaa7fb2def9c4332908bbf6d68e9c7f99c43d777fe23d43066f5204633065199b6c7abc5d3f6399275133a440c3d72354ef5508f85652f3f2e08ad8de4edfd6f6186a6c02da8b17a2ce4c6ce4880ddfbfc502621d63f4bbba90495026689294568cd569df2894dfcac83392c525171abf5ae2a91387d776084d09937a126f4b682b671e9c57445e648afae322e90b5b642558b408726c"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "64e3af815ef735881e6cbf3ba71dce605084884d191bb52e0b421de6b04bbaec7467ec9d956991c55a4cf3ff48079e1e3c7d09b5102bd0cb6ad63b7f8485636019cd6bddd076af5ecd9efb3996eab922f92812c8d68c979586d354347671e2bffab30d6bcced49d43cfd3eac73664e27ceeb5412f677b756a9b1d1068cb78cd1272585a9b0839ca6ea"}]}, 0x370}, 0x1, 0x0, 0x0, 0x40050}, 0x20000801) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000800)={0x7, 0x6d, 0x1}, 0x7) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000880)={0x56, 0x4b3, 0x7, {0x24, 0x6}, {0x2}, @period={0x59, 0x800, 0x0, 0x7, 0x6, {0x401, 0x0, 0x200, 0x5}, 0x2, &(0x7f0000000840)=[0x4, 0x1]}}) open(&(0x7f00000008c0)='./file0\x00', 0x400000, 0x114) r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fsync(r5) r6 = memfd_secret(0x0) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000010c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000940)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5}, 0x3, 0x1, 0xa89, 0x2, 0x27, 'syz1\x00', "d0180c8fddeae246179e4d724fede8454662b02183ce23813263d1300438491f", "38401681de3ec290b9f8738d7589206b9dcfcf81943fca60fc5c757b3ccb6a02", [{0xf916, 0x7, {0x3, 0x8}}, {0x800, 0x5, {0x3, 0x8}}, {0x0, 0xfffd, {0x0, 0x8}}, {0x7, 0x200, {0x0, 0x387363f5}}, {0x7, 0x8, {0x1, 0x5}}, {0x100, 0xe8f2, {0x0, 0x4}}, {0x7, 0x1, {0x2, 0x9}}, {0x80, 0x101, {0x2, 0x3}}, {0x2, 0xda, {0x0, 0x5}}, {0x2, 0x2, {0x2, 0x484}}, {0x20, 0x8000, {0x3, 0x40}}, {0x9, 0xf6b, {0x2, 0x7}}, {0xddba, 0x44, {0x1, 0x20}}, {0x4, 0x2, {0x0, 0x3}}, {0x4, 0x20, {0x3, 0x6}}, {0x7f, 0xfff, {0x2, 0x5}}, {0xa, 0xb49, {0x3, 0x5}}, {0x8000, 0x1000, {0x2, 0x81}}, {0x400, 0x58, {0x0, 0x10001}}, {0x8, 0x1000, {0x0, 0x2}}, {0x9, 0x4d97, {0x3, 0xee}}, {0x87, 0x20, {0x1}}, {0x346e, 0x0, {0x7909063390acf549, 0xffffffff}}, {0x2, 0x5, {0x3, 0xb0f}}, {0x40, 0xff81, {0x3, 0xc116}}, {0xf0a7, 0x7ff, {0x0, 0x37}}, {0x80, 0x1, {0x3, 0x6}}, {0x8, 0x4, {0x3, 0x1b2f}}, {0x8000, 0x1000, {0x0, 0x1}}, {0x3, 0x2, {0x3}}, {0x3, 0x4, {0x1, 0x7}}, {0x400, 0xe7e2, {0x0, 0x6}}, {0x4, 0x4, {0x3, 0x100}}, {0x139, 0x7, {0x3, 0x101}}, {0xa7c0, 0x7fff, {0x2, 0x1f}}, {0x2, 0x2, {0x3, 0x4d}}, {0xfff9, 0x4, {0x3, 0xffffffff}}, {0x148f, 0xca, {0x1, 0x40}}, {0x8, 0x1, {0x1, 0xc9}}, {0x1, 0x0, {0x0, 0x4cdb}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x0, 0x1, 0x6, 0xff80, 0x1c, 'syz0\x00', "6d30f67fe71487297aab066f0d48c2037f853cc1ac3ebc665ddfad579dc75941", "63562e95438d5938b169d6cf80fd167b5c5f583550cf5a24bf90a3c31d7f2d0a", [{0xfff9, 0x20, {0x3}}, {0x8001, 0x1, {0x2, 0x2}}, {0x8, 0x3, {0x1, 0x9}}, {0x1f, 0x4, {0x0, 0xb16}}, {0x400, 0x1000, {0x1, 0x1ebb}}, {0x5, 0x627, {0x0, 0x18}}, {0x9c6, 0x800, {0x1, 0xffffffff}}, {0x401, 0x3, {0x3, 0x7}}, {0x8a, 0x8, {0x1, 0x80000000}}, {0x50c4, 0x5, {0x1, 0x2}}, {0xff, 0x7fff, {0x2}}, {0x40, 0x4, {0x0, 0x7fffffff}}, {0x0, 0x2e0e, {0x1, 0x4}}, {0x9, 0x1a, {0x2, 0xfffffffe}}, {0x1, 0x23b, {0x3, 0x8e}}, {0x0, 0xff, {0x3, 0x1}}, {0x9, 0x9}, {0x1, 0xfffb, {0x3, 0xbdb5}}, {0xdc94, 0x40, {0x3, 0x8}}, {0x8, 0x6, {0x0, 0x201}}, {0x100, 0x2, {0x1, 0x9}}, {0x9, 0x9, {0x1, 0xfffffff8}}, {0x8, 0x5, {0x3, 0x10001}}, {0x7, 0x1, {0x3, 0x2}}, {0x4, 0x100, {0x0, 0x6}}, {0x8, 0x0, {0x0, 0x7}}, {0x41, 0x9, {0x0, 0x8}}, {0x1754, 0x3f, {0x3, 0xeb0}}, {0x7fff, 0xa1d6, {0x0, 0x9}}, {0x8000, 0x3, {0x3, 0x7}}, {0x6, 0x1ff, {0x3, 0x800}}, {0x8001, 0x66c, {0x3, 0xbb59}}, {0x3, 0x2, {0x3}}, {0x401, 0x1000, {0x1, 0x81}}, {0x1, 0x7fff, {0x3, 0x5}}, {0x4, 0x9, {0x1, 0x3}}, {0x8, 0x8, {0x2, 0xcb}}, {0x3, 0x4, {0x1, 0x1ac}}, {0x30, 0x9, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x7a}, 0x2, 0x3, 0x3f, 0x1, 0x27, 'syz0\x00', "98df6a2ba96b96c04ed4b2d7688da7e45fe9281b124a8630e57def7d4fbd07c4", "2decfdc40792f47944e21bb9389c79bf238dcc0b999f45f2ab15e34e993c19de", [{0xfc98, 0x2, {0x1, 0x1}}, {0x5, 0x7fff, {0x2}}, {0x1, 0x7, {0x3, 0x6}}, {0x4, 0xff7d, {0x0, 0x1f}}, {0x3, 0x5, {0x1, 0x9}}, {0x1f, 0xfc00, {0x2, 0x1000}}, {0x1, 0x400, {0x1, 0xfff}}, {0x7f, 0x0, {0x2, 0x3}}, {0x8, 0x3, {0x3, 0x6}}, {0x92, 0x8, {0x3, 0x7fff}}, {0x0, 0x1, {0x2, 0xfffffbbd}}, {0x800, 0x7f, {0x1, 0x4}}, {0x606e, 0xffe1, {0x0, 0x8}}, {0x8, 0xf, {0x2, 0x5}}, {0x7, 0xfdd, {0x2, 0x8000}}, {0x0, 0xff0, {0x3, 0x6}}, {0x2, 0x310e, {0x2, 0x4f}}, {0xbae, 0x3, {0x0, 0x3}}, {0x2, 0x8e00, {0x0, 0x7fffffff}}, {0x401, 0xfffc, {0x2, 0x3ff}}, {0x9, 0x9, {0x0, 0xfffffffa}}, {0x8, 0x1, {0x1, 0x81}}, {0x3, 0x11, {0x3, 0xe0000000}}, {0x4, 0xb8fe, {0x1, 0x8}}, {0x7ff, 0x20, {0x1, 0x7}}, {0x0, 0xa080, {0x2, 0x9}}, {0x7, 0x8, {0x3, 0x3}}, {0x1000, 0x8000, {0x0, 0x3}}, {0x3f, 0xfffa, {0x0, 0xffff}}, {0x80, 0x57, {0x1, 0x756}}, {0x8, 0x2, {0x0, 0x9}}, {0x8, 0x100, {0x2, 0x45}}, {0x400, 0x4, {0x3, 0x81}}, {0x100, 0x8000, {0x1, 0x1}}, {0x200, 0xfffa, {0x2, 0x1}}, {0x401, 0x40, {0x3, 0x1}}, {0x1ff, 0x8000, {0x0, 0x9}}, {0xeeed, 0x8, {0x0, 0x6}}, {0x101, 0x0, {0x0, 0x3}}, {0x80, 0x100, {0x0, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 10:13:21 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400101, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x138, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7a3}, @NFTA_SET_ELEM_USERDATA={0xcf, 0x6, 0x1, 0x0, "83114e54606b14db5f6fdb888793c65e12684d2cdd75a17a4820a9e3766a81060840882176f51392159255750d1b181298fa71aa0b0795490a5e91135517ddc59325a09fd36f3a253d1e00f2d9b17448a03a21975fb2521d51eff985436430b8d5e249596df5896ff6ea2200a49c8b807824d81b051181a9573f4f373623c13c6b823293a213360022236e5a34e625759505ba477ba8dcd346baedecf84b7015a724226f1fff9138c8611d2f242d49d49b52dc4af0c9fdd563a55818d2b72d6a2fb1ee80cd6375242af4d1"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfb}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "7ba50e25ea06d176a67d49bbddfc79315ad49e17e1397bdf62"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x48005}, 0x0) write$tcp_congestion(r0, &(0x7f0000000280)='cdg\x00', 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=<r2=>0x0) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r4 = getpid() r5 = fcntl$getown(r1, 0x9) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x104, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x104}, 0x1, 0x0, 0x0, 0x810}, 0x1) recvmsg$unix(r0, &(0x7f0000001a00)={&(0x7f00000005c0), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/64, 0x40}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/198, 0xc6}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0x78}, 0x102) r11 = openat$incfs(r6, &(0x7f00000020c0)='.log\x00', 0x60100, 0x162) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r11, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r12, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008}, 0x80) r13 = signalfd4(r8, &(0x7f0000002240)={[0x4d]}, 0x8, 0x80000) sendmsg$NL80211_CMD_DEL_PMK(r13, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r12, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000002}, 0x80) fremovexattr(r8, &(0x7f0000002380)=@random={'user.', 'netdevsim\x00'}) r14 = signalfd(r9, &(0x7f0000002740)={[0x100000000]}, 0x8) openat$cgroup(r14, &(0x7f0000002780)='syz0\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x881) [ 94.208036] audit: type=1400 audit(1737800001.188:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:13:21 executing program 7: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}]}, 0x40}}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x4080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r5=>0x0}, &(0x7f0000000400)=0xc) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x970}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x358, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x6c, 0x6, 0x36, 0x2, 0x4]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x3}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x7, 0xb}, {0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x7, 0x1}, {0x4}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x4}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xab, 0x5, 0x9, 0x4, 0x8000, 0x7ed, 0x7f, 0x3]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe35d, 0x400, 0xd8ec, 0x81, 0x2, 0x40, 0x4fe]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xe9, 0x4, 0xffff, 0x3ff, 0x100, 0x3d52]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x3}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x40, 0x1, 0x6, 0x8, 0x0, 0x99f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x20, 0x3, 0x5, 0x9, 0x3, 0xefa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4, 0xef, 0x0, 0x9, 0x4, 0x8f0]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x8}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xdab6, 0x6, 0x8000, 0x4, 0x5, 0x200, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x36, 0x1]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x7}, {0x7, 0x4}, {0x4}, {0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x2}, {0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3a, 0x1f, 0x6, 0x800, 0x3, 0x4, 0x6, 0x401]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x0, 0x30, 0x6, 0x16, 0x60, 0x30, 0x39, 0x36, 0x2, 0x3]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x81, 0x7, 0x0, 0xff7f, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x58a7, 0x23, 0x2, 0x1, 0x5, 0x1f, 0xd93, 0x9]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x8}, {0x4, 0x6}, {0x2, 0x3}, {0x5}, {0x2, 0x3}, {}, {0x0, 0x1}, {0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x9}, {0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x27e9, 0x0, 0x4, 0x2, 0x4]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x8}, {0x7}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x6, 0x7}, {0x2}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x3}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x2}, {0x3, 0x9}, {}, {0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x8}, {0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x6, 0x1e}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x5, 0x12, 0x24, 0x48, 0x1b, 0x9, 0x5, 0x4, 0x1b, 0x1b, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xb4fe, 0x4, 0x0, 0x7, 0x0, 0x80]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x49, 0x2, 0x60, 0x48, 0x1, 0x4]}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2c000010) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x595}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9898}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x51}, {0x5, 0x14, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r6, &(0x7f0000000e80)=""/243, 0xf3, 0x41, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x200008c4) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e23, 0x800, 0x4e23, 0x8, 0xa, 0x0, 0x80, 0x8, 0x0, r5}, {0xfff, 0x6, 0x43dd, 0x1ff, 0x7f, 0xff, 0xda8, 0x8001}, {0x8, 0x5, 0xa59, 0xffffffffffffff83}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0xff}, 0xa, @in=@multicast2, 0x3505, 0x5, 0x3, 0xe, 0x88c, 0x1, 0x3}}, 0xe8) [ 95.655660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.666077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.668777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.679012] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.683513] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.687668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.738886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.752978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.756893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.772228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.774375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.777983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.782691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.791770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.796151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.798156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.801024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.806162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.813895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.819223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.861859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.867930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.871255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.877036] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.882355] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.885348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.890303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.905091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.911382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.914387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.916532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.926723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.929163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.931642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.933748] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.941589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.950968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.952875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.960071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.973057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.975394] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.984931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.987648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.995861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.998006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.001581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.003691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.020630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.796877] Bluetooth: hci0: command tx timeout [ 97.860603] Bluetooth: hci2: command tx timeout [ 97.924508] Bluetooth: hci1: command tx timeout [ 98.052519] Bluetooth: hci3: command tx timeout [ 98.053930] Bluetooth: hci5: command tx timeout [ 98.054525] Bluetooth: hci4: command tx timeout [ 98.116538] Bluetooth: hci6: command tx timeout [ 98.117194] Bluetooth: hci7: command tx timeout [ 99.845703] Bluetooth: hci0: command tx timeout [ 99.909810] Bluetooth: hci2: command tx timeout [ 99.972878] Bluetooth: hci1: command tx timeout [ 100.101542] Bluetooth: hci5: command tx timeout [ 100.102376] Bluetooth: hci4: command tx timeout [ 100.103610] Bluetooth: hci3: command tx timeout [ 100.164880] Bluetooth: hci6: command tx timeout [ 100.165970] Bluetooth: hci7: command tx timeout [ 101.892496] Bluetooth: hci0: command tx timeout [ 101.956503] Bluetooth: hci2: command tx timeout [ 102.020543] Bluetooth: hci1: command tx timeout [ 102.150581] Bluetooth: hci4: command tx timeout [ 102.151030] Bluetooth: hci5: command tx timeout [ 102.152215] Bluetooth: hci3: command tx timeout [ 102.212555] Bluetooth: hci6: command tx timeout [ 102.213338] Bluetooth: hci7: command tx timeout [ 103.940500] Bluetooth: hci0: command tx timeout [ 104.004571] Bluetooth: hci2: command tx timeout [ 104.068519] Bluetooth: hci1: command tx timeout [ 104.196520] Bluetooth: hci5: command tx timeout [ 104.196567] Bluetooth: hci3: command tx timeout [ 104.197003] Bluetooth: hci4: command tx timeout [ 104.260613] Bluetooth: hci6: command tx timeout [ 104.263512] Bluetooth: hci7: command tx timeout [ 158.161363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.164342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.170841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.181837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.186967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.189643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.479252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.482609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.486273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.491155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.494636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.499857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.502205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.503829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.506074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.509051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.517492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.521289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.548899] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.553076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.556220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.566724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.569263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.571648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.596771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.605680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.628290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.645961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.705082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.707328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.784138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.786550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.788139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.790031] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.794781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.799257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.801945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.805922] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.808086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.823234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.828692] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.830181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.885542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.901260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.917912] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.938267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.940319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.958662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.263458] Bluetooth: hci0: command tx timeout [ 160.582529] Bluetooth: hci1: command tx timeout [ 160.582737] Bluetooth: hci2: command tx timeout [ 160.644590] Bluetooth: hci3: command tx timeout [ 160.837007] Bluetooth: hci4: command tx timeout [ 160.900737] Bluetooth: hci6: command tx timeout [ 161.093357] Bluetooth: hci5: command tx timeout [ 161.094206] Bluetooth: hci7: command tx timeout [ 162.309500] Bluetooth: hci0: command tx timeout [ 162.628511] Bluetooth: hci2: command tx timeout [ 162.628558] Bluetooth: hci1: command tx timeout [ 162.692546] Bluetooth: hci3: command tx timeout [ 162.884703] Bluetooth: hci4: command tx timeout [ 162.950486] Bluetooth: hci6: command tx timeout [ 163.140523] Bluetooth: hci7: command tx timeout [ 163.141513] Bluetooth: hci5: command tx timeout [ 164.356506] Bluetooth: hci0: command tx timeout [ 164.676544] Bluetooth: hci1: command tx timeout [ 164.676644] Bluetooth: hci2: command tx timeout [ 164.740680] Bluetooth: hci3: command tx timeout [ 164.932521] Bluetooth: hci4: command tx timeout [ 164.997667] Bluetooth: hci6: command tx timeout [ 165.190711] Bluetooth: hci5: command tx timeout [ 165.190785] Bluetooth: hci7: command tx timeout [ 166.405481] Bluetooth: hci0: command tx timeout [ 166.724606] Bluetooth: hci1: command tx timeout [ 166.725111] Bluetooth: hci2: command tx timeout [ 166.788501] Bluetooth: hci3: command tx timeout [ 166.980724] Bluetooth: hci4: command tx timeout [ 167.044490] Bluetooth: hci6: command tx timeout [ 167.236637] Bluetooth: hci7: command tx timeout [ 167.237496] Bluetooth: hci5: command tx timeout [ 221.335723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.337799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.339215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.345617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.347988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.349472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.405275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.409498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.414110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.425603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.431266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.437069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.473925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.482744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.489733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.503006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.510735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.515724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.636134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.651270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.653134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.658640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.659538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.664722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.668588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.673977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.676825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.683501] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.684830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.692709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.713228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.715838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.719603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.725834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.726830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.730744] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.734355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.769554] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.771660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.835413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.842781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.848711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 221.849597] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.852138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.871702] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 221.946588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.955736] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.957821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.429524] Bluetooth: hci0: command tx timeout [ 223.493905] Bluetooth: hci1: command tx timeout [ 223.620636] Bluetooth: hci2: command tx timeout [ 223.812603] Bluetooth: hci3: command tx timeout [ 223.812799] Bluetooth: hci5: command tx timeout [ 223.814192] Bluetooth: hci4: command tx timeout [ 223.940498] Bluetooth: hci6: command tx timeout [ 224.004830] Bluetooth: hci7: command tx timeout [ 225.478429] Bluetooth: hci0: command tx timeout [ 225.541234] Bluetooth: hci1: command tx timeout [ 225.669492] Bluetooth: hci2: command tx timeout [ 225.861433] Bluetooth: hci5: command tx timeout [ 225.862073] Bluetooth: hci4: command tx timeout [ 225.863044] Bluetooth: hci3: command tx timeout [ 225.989420] Bluetooth: hci6: command tx timeout [ 226.052706] Bluetooth: hci7: command tx timeout [ 227.524477] Bluetooth: hci0: command tx timeout [ 227.590507] Bluetooth: hci1: command tx timeout [ 227.716505] Bluetooth: hci2: command tx timeout [ 227.908548] Bluetooth: hci3: command tx timeout [ 227.908994] Bluetooth: hci4: command tx timeout [ 227.909488] Bluetooth: hci5: command tx timeout [ 228.036712] Bluetooth: hci6: command tx timeout [ 228.101458] Bluetooth: hci7: command tx timeout [ 229.573493] Bluetooth: hci0: command tx timeout [ 229.636527] Bluetooth: hci1: command tx timeout [ 229.764561] Bluetooth: hci2: command tx timeout [ 229.958437] Bluetooth: hci5: command tx timeout [ 229.958938] Bluetooth: hci4: command tx timeout [ 229.959419] Bluetooth: hci3: command tx timeout [ 230.084454] Bluetooth: hci6: command tx timeout [ 230.148468] Bluetooth: hci7: command tx timeout [ 280.135165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.136725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.456363] [ 282.456635] ====================================================== [ 282.457258] WARNING: possible circular locking dependency detected [ 282.457882] 6.13.0-next-20250124 #1 Not tainted [ 282.458374] ------------------------------------------------------ [ 282.459292] kworker/u8:0/11 is trying to acquire lock: [ 282.460147] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.461720] [ 282.461720] but task is already holding lock: [ 282.462727] ffff888037630768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 282.464374] [ 282.464374] which lock already depends on the new lock. [ 282.464374] [ 282.465716] [ 282.465716] the existing dependency chain (in reverse order) is: [ 282.467557] [ 282.467557] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 282.469205] __mutex_lock+0x13d/0xb50 [ 282.470410] wiphy_register+0x1b2e/0x25d0 [ 282.471589] ieee80211_register_hw+0x23a4/0x3d60 [ 282.472187] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 282.472814] init_mac80211_hwsim+0x389/0x870 [ 282.473376] do_one_initcall+0xf9/0x640 [ 282.473895] kernel_init_freeable+0x53d/0x7a0 [ 282.474476] kernel_init+0x1e/0x2d0 [ 282.474924] ret_from_fork+0x48/0x80 [ 282.475384] ret_from_fork_asm+0x1a/0x30 [ 282.475919] [ 282.475919] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 282.476585] __lock_acquire+0x29fd/0x4580 [ 282.477097] lock_acquire+0x19b/0x520 [ 282.477574] __mutex_lock+0x13d/0xb50 [ 282.478067] unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.478720] unregister_netdevice_queue+0x224/0x2e0 [ 282.479309] _cfg80211_unregister_wdev+0x57b/0x700 [ 282.479909] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 282.481014] ieee80211_unregister_hw+0x55/0x3a0 [ 282.481999] hwsim_exit_net+0x3a0/0x730 [ 282.482885] ops_exit_list+0xb3/0x180 [ 282.483716] cleanup_net+0x546/0xad0 [ 282.484522] process_one_work+0x8ee/0x1a10 [ 282.485407] worker_thread+0x674/0xe70 [ 282.486347] kthread+0x3ab/0x720 [ 282.487198] ret_from_fork+0x48/0x80 [ 282.487955] ret_from_fork_asm+0x1a/0x30 [ 282.488801] [ 282.488801] other info that might help us debug this: [ 282.488801] [ 282.490178] Possible unsafe locking scenario: [ 282.490178] [ 282.491234] CPU0 CPU1 [ 282.492213] ---- ---- [ 282.493068] lock(&rdev->wiphy.mtx); [ 282.493825] lock(rtnl_mutex); [ 282.494899] lock(&rdev->wiphy.mtx); [ 282.496078] lock(rtnl_mutex); [ 282.496752] [ 282.496752] *** DEADLOCK *** [ 282.496752] [ 282.497819] 4 locks held by kworker/u8:0/11: [ 282.498633] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 282.500561] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 282.502187] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 282.503712] #3: ffff888037630768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 282.505460] [ 282.505460] stack backtrace: [ 282.506205] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 282.506278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 282.506321] Workqueue: netns cleanup_net [ 282.506401] Call Trace: [ 282.506421] <TASK> [ 282.506443] dump_stack_lvl+0xca/0x120 [ 282.506557] print_circular_bug+0x47b/0x750 [ 282.506648] check_noncircular+0x2e9/0x3c0 [ 282.506729] ? lock_repin_lock+0x207/0x320 [ 282.506846] ? __pfx_check_noncircular+0x10/0x10 [ 282.506928] ? hlock_class+0x4e/0x130 [ 282.506989] ? mark_lock+0xac/0xed0 [ 282.507068] ? __pfx_lock_repin_lock+0x10/0x10 [ 282.507193] ? lockdep_lock+0xba/0x1b0 [ 282.507306] ? __pfx_lockdep_lock+0x10/0x10 [ 282.507430] __lock_acquire+0x29fd/0x4580 [ 282.507537] ? __pfx___lock_acquire+0x10/0x10 [ 282.507624] ? lock_release+0x20f/0x6f0 [ 282.507712] ? __pfx_lock_release+0x10/0x10 [ 282.507807] lock_acquire+0x19b/0x520 [ 282.507905] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.508003] ? __pfx_lock_acquire+0x10/0x10 [ 282.508092] ? srso_return_thunk+0x5/0x5f [ 282.508202] ? lock_release+0x20f/0x6f0 [ 282.508289] ? srso_return_thunk+0x5/0x5f [ 282.508399] ? lock_is_held_type+0x9e/0x120 [ 282.508508] ? srso_return_thunk+0x5/0x5f [ 282.508626] __mutex_lock+0x13d/0xb50 [ 282.508730] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.508820] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.508912] ? srso_return_thunk+0x5/0x5f [ 282.509021] ? synchronize_rcu_expedited+0x38a/0x420 [ 282.509108] ? __pfx___mutex_lock+0x10/0x10 [ 282.509215] ? __pfx_autoremove_wake_function+0x10/0x10 [ 282.509322] ? srso_return_thunk+0x5/0x5f [ 282.509432] ? kasan_quarantine_put+0x84/0x1e0 [ 282.509551] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 282.509621] ? srso_return_thunk+0x5/0x5f [ 282.509740] unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.509831] ? __virt_addr_valid+0x2e8/0x5d0 [ 282.509935] ? __pfx_lock_release+0x10/0x10 [ 282.510025] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 282.510117] ? find_held_lock+0x2c/0x110 [ 282.510232] ? srso_return_thunk+0x5/0x5f [ 282.510347] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 282.510466] ? srso_return_thunk+0x5/0x5f [ 282.510576] ? lock_release+0x20f/0x6f0 [ 282.510664] ? __pfx_lock_release+0x10/0x10 [ 282.510750] ? srso_return_thunk+0x5/0x5f [ 282.510860] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 282.510955] ? srso_return_thunk+0x5/0x5f [ 282.511075] unregister_netdevice_queue+0x224/0x2e0 [ 282.511162] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 282.511249] ? up_write+0x195/0x520 [ 282.511358] _cfg80211_unregister_wdev+0x57b/0x700 [ 282.511463] ? srso_return_thunk+0x5/0x5f [ 282.511580] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 282.511657] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 282.511734] ? srso_return_thunk+0x5/0x5f [ 282.511844] ? srso_return_thunk+0x5/0x5f [ 282.511966] ? synchronize_rcu+0x1ff/0x260 [ 282.512051] ieee80211_unregister_hw+0x55/0x3a0 [ 282.512140] hwsim_exit_net+0x3a0/0x730 [ 282.512224] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.512305] ? srso_return_thunk+0x5/0x5f [ 282.512415] ? netdev_run_todo+0x788/0x1040 [ 282.512509] ? srso_return_thunk+0x5/0x5f [ 282.512622] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.512708] ops_exit_list+0xb3/0x180 [ 282.512792] cleanup_net+0x546/0xad0 [ 282.512881] ? __pfx_cleanup_net+0x10/0x10 [ 282.512988] process_one_work+0x8ee/0x1a10 [ 282.513119] ? __pfx_lock_acquire+0x10/0x10 [ 282.513208] ? __pfx_process_one_work+0x10/0x10 [ 282.513324] ? srso_return_thunk+0x5/0x5f [ 282.513434] ? move_linked_works+0x172/0x270 [ 282.513523] ? srso_return_thunk+0x5/0x5f [ 282.513633] ? assign_work+0x196/0x240 [ 282.513747] worker_thread+0x674/0xe70 [ 282.513863] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 282.513968] ? __pfx_worker_thread+0x10/0x10 [ 282.514087] kthread+0x3ab/0x720 [ 282.514190] ? __pfx_kthread+0x10/0x10 [ 282.514294] ? srso_return_thunk+0x5/0x5f [ 282.514404] ? finish_task_switch.isra.0+0x206/0x840 [ 282.514504] ? __pfx_kthread+0x10/0x10 [ 282.514612] ret_from_fork+0x48/0x80 [ 282.514674] ? __pfx_kthread+0x10/0x10 [ 282.514780] ret_from_fork_asm+0x1a/0x30 [ 282.514912] </TASK> [ 283.918329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.920971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.924899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.928931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.930245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.932300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.936267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.938786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.941689] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.942278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.944819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.959611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.168566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.170578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.172236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.175481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.178105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.180061] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.247889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.251079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.252738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.257237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.259512] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.261093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.302754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.304629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.306210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.310998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.313358] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.315205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.404935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.411742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.415633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.415644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.420175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.426636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.439857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.441126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.444237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 284.445563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.467658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.471079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.541152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.558745] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.581432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.612823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.616341] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 284.618061] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.957403] Bluetooth: hci0: command tx timeout [ 286.020607] Bluetooth: hci1: command tx timeout [ 286.212631] Bluetooth: hci2: command tx timeout [ 286.342378] Bluetooth: hci4: command tx timeout [ 286.342853] Bluetooth: hci3: command tx timeout [ 286.532420] Bluetooth: hci5: command tx timeout [ 286.596439] Bluetooth: hci6: command tx timeout [ 286.724487] Bluetooth: hci7: command tx timeout [ 288.004792] Bluetooth: hci0: command tx timeout [ 288.068455] Bluetooth: hci1: command tx timeout [ 288.261453] Bluetooth: hci2: command tx timeout [ 288.388627] Bluetooth: hci3: command tx timeout [ 288.389553] Bluetooth: hci4: command tx timeout [ 288.580663] Bluetooth: hci5: command tx timeout [ 288.644726] Bluetooth: hci6: command tx timeout [ 288.772480] Bluetooth: hci7: command tx timeout [ 290.052563] Bluetooth: hci0: command tx timeout [ 290.116735] Bluetooth: hci1: command tx timeout [ 290.308749] Bluetooth: hci2: command tx timeout [ 290.436505] Bluetooth: hci4: command tx timeout [ 290.437416] Bluetooth: hci3: command tx timeout [ 290.628862] Bluetooth: hci5: command tx timeout [ 290.692490] Bluetooth: hci6: command tx timeout [ 290.820628] Bluetooth: hci7: command tx timeout [ 292.100422] Bluetooth: hci0: command tx timeout [ 292.164518] Bluetooth: hci1: command tx timeout [ 292.356479] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 10:16:29 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800ed81bc0 RCX=ffffffff81429a4a RDX=ffff88800ed81bc0 RSI=ffffffff814299d3 RDI=ffff88800ed81bec RBP=0000000000000000 RSP=ffff88800f187db8 R8 =0000000000000000 R9 =ffffed1001742a00 R10=ffff88800ba15007 R11=ffff88800ed82078 R12=ffffc900002feff9 R13=ffff88800b2f3cb8 R14=ffff88800ed81bc0 R15=0000000000000086 RIP=ffffffff814299d7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b9f62a9a40 CR3=000000000b8f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c00008d9e0000000c00008d9b0 XMM02=000000c00008daa0000000c0002ec230 XMM03=000000c00008dc80000000c0002ec280 XMM04=000000c00017a090000000c00017a060 XMM05=000000c00017a0f0000000c00017a0c0 XMM06=000000c00017a150000000c00017a120 XMM07=000000c000179760000000c0000554d0 XMM08=000000c00017a4b0000000c00017a480 XMM09=000000c00017a510000000c00017a4e0 XMM10=000000c00017a540000000c000055530 XMM11=000000c00017a5a0000000c00017a570 XMM12=000000c00017a600000000c00017a5d0 XMM13=000000c00017a660000000c00017a630 XMM14=000000c00017a6c0000000c00017a690 XMM15=000000c000105080000000c00017a6f0 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095deca8 R8 =0000000000000001 R9 =ffffed10012bbd86 R10=0000000000000000 R11=3064353278302020 R12=0000000000000033 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283f125 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d1dff45018 CR3=000000000b8f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040fabf0000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000