Warning: Permanently added '[localhost]:12459' (ECDSA) to the list of known hosts. 2025/01/25 23:11:39 fuzzer started 2025/01/25 23:11:39 dialing manager at localhost:40883 syzkaller login: [ 69.174191] cgroup: Unknown subsys name 'net' [ 69.280318] cgroup: Unknown subsys name 'cpuset' [ 69.325350] cgroup: Unknown subsys name 'rlimit' [ 76.084531] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 23:11:58 syscalls: 2217 2025/01/25 23:11:58 code coverage: enabled 2025/01/25 23:11:58 comparison tracing: enabled 2025/01/25 23:11:58 extra coverage: enabled 2025/01/25 23:11:58 setuid sandbox: enabled 2025/01/25 23:11:58 namespace sandbox: enabled 2025/01/25 23:11:58 Android sandbox: enabled 2025/01/25 23:11:58 fault injection: enabled 2025/01/25 23:11:58 leak checking: enabled 2025/01/25 23:11:58 net packet injection: enabled 2025/01/25 23:11:58 net device setup: enabled 2025/01/25 23:11:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 23:11:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 23:11:58 USB emulation: enabled 2025/01/25 23:11:58 hci packet injection: enabled 2025/01/25 23:11:58 wifi device emulation: enabled 2025/01/25 23:11:58 802.15.4 emulation: enabled 2025/01/25 23:11:58 fetching corpus: 50, signal 8469/9844 (executing program) 2025/01/25 23:11:58 fetching corpus: 100, signal 10808/13185 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/14460 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/15646 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/16814 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/18008 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/19197 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/20386 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/21602 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/22757 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/23902 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/25094 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/26261 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/26641 (executing program) 2025/01/25 23:11:58 fetching corpus: 112, signal 10897/26641 (executing program) 2025/01/25 23:12:02 starting 8 fuzzer processes 23:12:02 executing program 0: sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000040)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x7}, 0x81, 0xff, 0xe0, 0x768, 0xd, 'syz0\x00', "02c0444c7502a682d00b1065de7a3c67b00978b4447d4118b50059b79419abd3", "10aa60514ddae15efa9c388808bcb80aca0a51327efe51f8f5c4db8de50c052e", [{0x4, 0x3, {0x3, 0x5}}, {0x1000, 0xc7d, {0x2, 0x80000000}}, {0x1000, 0x4, {0x3, 0x8}}, {0x7, 0x8, {0x1, 0x8}}, {0x46b5, 0x6, {0x2}}, {0x1, 0x1, {0x2, 0x7}}, {0x1ff, 0x2, {0x3, 0xedd}}, {0x4, 0x3, {0x1, 0x4}}, {0x400, 0xfff, {0x1, 0x80}}, {0x9e4, 0xfffe, {0x3, 0x1}}, {0x7ff, 0x1, {0x1, 0xb46}}, {0xfff, 0x8, {0x1, 0x7}}, {0x5, 0x3}, {0x6, 0x1000, {0x0, 0xa7}}, {0x8ec, 0xffff, {0x2, 0x8}}, {0x401, 0x0, {0x1, 0xffffffe6}}, {0xffff, 0x4, {0x0, 0x200}}, {0x7, 0x5, {0x0, 0x3}}, {0x8, 0x1, {0x1, 0x2ec}}, {0x4, 0x9, {0x3, 0x4a9623de}}, {0xad8, 0x1, {0x1, 0x4}}, {0x5, 0x7f, {0x2, 0xffffffff}}, {0x25, 0x5, {0x2, 0x5}}, {0x5, 0x4, {0x3, 0x4}}, {0xb743, 0xf18, {0x1}}, {0x3f, 0x1, {0x0, 0xef9}}, {0xe2ae, 0x1, {0x0, 0xaf9}}, {0x0, 0x7, {0x3, 0xfffffc00}}, {0x8, 0x9, {0x2, 0xe6eb}}, {0xfeff, 0xabc, {0x0, 0x2}}, {0x1, 0x7ca8, {0x2, 0x8}}, {0xd5, 0x7ff, {0x2, 0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x6, 0x9, {0x1, 0x401}}, {0xff, 0xffff, {0x2, 0x4}}, {0x215, 0x9, {0x3, 0x101}}, {0x4, 0x8, {0x3, 0x2}}, {0x2a, 0x9, {0x2, 0xfffffff7}}, {0x8000, 0x8, {0x1, 0x8}}, {0x4, 0x7, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0xc1, 0x9, 0x6, 0x4c, 0x26, 'syz1\x00', "839f48119a05ba50b6d2a154b175d0a27ea75a04976f42056d3941c9c341e196", "5f54435227ca3d5465e4352b8b81c5e651bef3fa9f02fe218cd84927ced586c7", [{0xfffa, 0x100, {0x1, 0x101}}, {0x4fc, 0x1, {0x3, 0x9b52}}, {0x8001, 0x0, {0x0, 0x3ff}}, {0xcce, 0x8, {0x3, 0x80000000}}, {0x400, 0x3, {0x2, 0x954}}, {0x6, 0xff, {0x3, 0x3f}}, {0x6, 0x5, {0x3, 0x9}}, {0x7, 0xff00, {0x0, 0x3ff}}, {0xeaa, 0x7fff, {0x2}}, {0x4, 0x2, {0x3, 0x826}}, {0xd5, 0x9, {0x1, 0x4}}, {0x0, 0x4, {0x3, 0x80000001}}, {0x0, 0x9, {0x2, 0xfffffffd}}, {0x1, 0x0, {0x3, 0xffff8000}}, {0x0, 0xffff, {0x1, 0x6}}, {0x7, 0x7, {0x3, 0x3}}, {0x7a1, 0x5, {0x0, 0x1}}, {0x7, 0x1, {0x1, 0x6}}, {0x3, 0x4, {0x1, 0x400}}, {0x0, 0x3f, {0x3, 0x80000001}}, {0xec, 0x77f, {0x3, 0x6}}, {0x4, 0x4, {0x2, 0x10001}}, {0x38b, 0x1ff, {0x3, 0x6}}, {0x1, 0x5, {0x2, 0x6}}, {0x1, 0x1, {0x0, 0x50}}, {0x3, 0xffff, {0x1, 0x3}}, {0x7, 0x9, {0x3, 0x8}}, {0x7, 0x6, {0x4, 0xe4f}}, {0x8, 0x8, {0x1, 0x5}}, {0x9, 0x526, {0x2, 0x6}}, {0xff56, 0x1ff, {0x0, 0xc80f}}, {0x7, 0x9, {0x1, 0x5f5a}}, {0x179e, 0xb6, {0x1, 0x2}}, {0x6, 0x4, {0x2, 0x2e0c}}, {0x2, 0x8, {0x3, 0x80000001}}, {0x3, 0x20, {0x1, 0x20}}, {0x1000, 0x7, {0x1, 0x7}}, {0x9b05, 0x6, {0x0, 0x8000}}, {0x70, 0x0, {0x1, 0xffffffff}}, {0x7, 0x200, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x7ff}, 0x0, 0xff, 0x3, 0x4, 0xf, 'syz1\x00', "feaf2b82ae4f6f64ee48cf95729c1f9877c1c4c7de20d4b444db95567254f741", "fdef0f9d6e6e0fdd8230f214bd7cf6fb7e43801e25f8b8851af4ac4ceb524014", [{0x470, 0x8000, {0x1, 0x5}}, {0xfff7, 0x0, {0x1, 0x20}}, {0x4, 0x401, {0x2, 0x9}}, {0x7, 0x9, {0x1, 0x4}}, {0x0, 0x8, {0x0, 0x4414}}, {0x1f, 0x0, {0x1, 0x8a0}}, {0x89eb, 0x40, {0x3, 0xb23}}, {0xfffd, 0x1, {0x0, 0x1}}, {0x1, 0x3f, {0x0, 0x8}}, {0x80, 0x4, {0x2, 0x1}}, {0x8, 0x6, {0xc7ae77f74ae767e7, 0x3}}, {0x8, 0x6, {0x0, 0x48}}, {0x64b, 0x20, {0x1, 0x5}}, {0x2, 0x6c, {0x1, 0xfff}}, {0x8, 0x2, {0x1, 0x1}}, {0x3, 0x2, {0x2, 0x3}}, {0x0, 0x4c7, {0x3, 0x80000000}}, {0x6, 0x8, {0x0, 0x7ff}}, {0x1a0f, 0x0, {0x0, 0x25d}}, {0x2, 0xc56c, {0x2, 0x2}}, {0x5f99, 0x1, {0x2, 0x5}}, {0xf71f, 0x1, {0x0, 0x8}}, {0x1f, 0x6, {0x3, 0x80000001}}, {0x1f, 0x9, {0x3, 0xa46}}, {0x1f, 0x1, {0x1, 0x6}}, {0xff, 0x1, {0x2, 0x5}}, {0x4, 0x3, {0x3, 0x80000000}}, {0x7, 0x7, {0x3, 0x1}}, {0x7ff, 0x4, {0x3, 0x400}}, {0xfffe, 0x7, {0x2, 0x10000}}, {0x4, 0x7, {0x3, 0x7a}}, {0xfff, 0x2, {0x3, 0x3}}, {0x3, 0x8, {0x1, 0x20}}, {0x1f, 0x3, {0x1, 0x5af9}}, {0x7, 0xff, {0x1, 0x7ff}}, {0x8, 0xffff, {0x1, 0x6}}, {0x9, 0x5, {0x2, 0x9}}, {0x5, 0x6a08, {0x3, 0x3}}, {0x1, 0x401, {0x3, 0x9}}, {0x2, 0x2, {0x2, 0x3}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4004}, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x98, 0x0, 0x6, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x61}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x77}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6ecd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x28}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x50}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x850) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x14c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fdea624}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f0bbde4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30b60f1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb345}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68f3bd70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x698471e7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x570effc96299d479}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6226d8d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39903e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4428cf7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31f1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4869b46d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4942fe1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a589930}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6779}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3231}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358b3cb4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x719}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2d78a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5984e968}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xa40948cecb273219}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x14c}}, 0x20008041) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40041) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x20040041) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r3, 0x402, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x441}, 0x4040004) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001340)={0xffffffffffffffff, 0x100000000, 0x6, 0x9adc}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc4f6, 0x30}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x4841) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000001a00)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001580)={0x440, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_REG_RULES={0x164, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x91de}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1fa5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff91}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x13ef}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffadb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8361}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8279}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7669}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x22}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x54}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4801}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x525}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6b4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4279}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc3d4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}]}]}, @NL80211_ATTR_REG_RULES={0x194, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe2fa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x44ed653b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffc0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2a}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x462ee604}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f24}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20004000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff26a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x562}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe577}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x440}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x68, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6a}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4c015) 23:12:02 executing program 1: r0 = semget(0x2, 0x2, 0x62) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000000)=""/138) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000000c0)=""/198) semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0x12, &(0x7f00000001c0)=""/221) semget(0x2, 0x0, 0x4c5) r1 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f00000002c0)=0x12) r2 = semget$private(0x0, 0x1, 0x20) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000300)=""/182) r3 = semget(0x1, 0x0, 0x180) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f00000003c0)=""/170) r4 = semget$private(0x0, 0x0, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000480)=""/147) r5 = semget(0x2, 0x1, 0x22) r6 = getegid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x2003) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000017c0)={{0x0, 0x0, r6, r7, r8, 0x20}, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6}) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000001840)=""/4096) 23:12:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x62, [0x1, 0x7, 0x4, 0x2, 0x4, 0x100], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/98}, &(0x7f00000001c0)=0x78) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000200)={0x6, 0x10000, 0x3, 0x1, 0x0, [0x5, 0x0, 0x7ff, 0x5]}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000300)={@lba=0x3, 0x1, 0x1, &(0x7f00000002c0)=""/1}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000340)={'ipvlan0\x00', {0x2, 0x0, @private}}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000003c0)) write$tcp_mem(r1, &(0x7f0000000400)={0x0, 0x20, 0x1, 0x20, 0xc00000000000000}, 0x48) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000004c0)=0x8) r3 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ddd1f440760b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x81) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x3, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) [ 91.705579] audit: type=1400 audit(1737846722.586:7): avc: denied { execmem } for pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:12:02 executing program 3: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x8001, 0x0, 0x3, 0x2, 0x2, 0x8}, &(0x7f0000000080)=0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r0, 0x608, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x57d9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c840) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x14) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc8, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb1}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x169}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf12a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc8}}, 0x20000000) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x105400, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000640)={{r3}, 0x0, 0x6, @unused=[0x100000001, 0x55ab, 0x1, 0x1], @subvolid=0xdde}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001640)={'veth1_to_bridge\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001680)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xbfe, 0x0, 0xbca1df4dd1f2792e, 0x0, 0xd112, 0x200}, 0x20) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000001c00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001800)={0x3a0, 0x5, 0x1, 0x301, 0x70bd27, 0x25dfdbfc, {0xc, 0x0, 0x4}, [@generic="9607def028c01aa5a77e6f105e7c8eb2d4a886cf43ef1050d84dc546119ea440bf02f3211f8de927919e2189a2c824e95c50e75fb8e96ec60d0b38f7160c9daf2961411487bbe2778257a51e6ee606863a3fda1bdb112a409ec0286ea89339c19eb0130f5f5173b892cc0e059c5fbf0bd6e163444b506c01e1270ca7ef474d5ce10da7fa76affb5125bb2408e283e4197885c46313dceff59c1e3e09813d8b77b1ba73b9cd18864971a1ccc893d429fba5586433ce31f44900d7d0250d46b42ab48a5d308536673e7b82c656a584332016f77b225886cd3ecfca7f6dc15b", @nested={0x2ac, 0x17, 0x0, 0x1, [@generic="2fca35e4eeaae7c03e15f74d7f5991281f4de173f9b62e226d75c23a8972d97ed01006915aa5cc0646", @generic="9434910af4694a420b19106714cfb17835640a2ba0c08df92e1bf967b0e8a688b6b8db5e3cc3c950e05a95fa833fcf2ad8f8fa6199e2a3e3159714ab7db233a03c8bf9c2cfc865dda213420749fc9d443962ec560b072eab6b2c45106434a0670cc7a08feeec59df714d8cfa70fb9a28ba44cbea2bc6143495efdefe00259e143c9c8f3ce3f7e594a8da94dc76e387cba1d6951db18d9f1c2ad2d2d4fe3763907598d3ca397e607579a2354316fa46fc6ae2f17aa93fca17978572111c0fd1e28520775d3378902a97780e754112ebad81f25b3c3a7fbdb62057eacfe9bde259d4cf3142d48f77ad33", @generic, @generic="baf145ebb600e7cecc8a58c2e372ff3dd19fa7dcefd6f7a4971bee8f632f09c76efff61717fc7e29ea02b2f2e2afa09a012c3fc1936ef5ce3911179b50db8761e1cd71b65635f69fc80fed1a342ac3ed853bc9bcf1ea93e3817a1c7504d33ecc", @generic="fa0a204b5617b14b9a124a390dee1d87273268a9ab6e6a6d20672ff11ec7f9abe82932b710433bc135ecb2596a6036c67dc3003764c35ef730f385bc0815969441adabc9fe6ccfe7b5b0b7880ec76a61ff04c545c661badbe5e23450ab1b2242a6d967983d6b4b5a067a8f676648de91ef9869f08c26f8a42d6c87cb0b230741448040b65caaa31d3c72881e01e04a9f3065bd770a3468dbcba49d01442cca759bfad6a9b973538cf69aa2a55ba9bac81611c4469bf98015b5f368", @generic="4c226d32945b2ac5ae136ab2bcb6d6053dca7685d8581b58aa938e7bb348e8119b2e69f15ea3dabde4f8d8da66d3d4e13a5e99d6a4166a987e3d0f88aaecfe76f715488d02f1243d274623bc370728600cd8c5ef736b8e6230c2b3aee1fcb1425227b3c8f3f5a2da8964d4d050d679d580d40924edfb08f19dd0bc"]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0xc4}, 0x44041) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000001c40)={0x1, "e2c2d2"}, 0x6) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) r6 = accept4(r3, &(0x7f0000001c80)=@isdn, &(0x7f0000001d00)=0x80, 0x800) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x74, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x1a}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x7a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x4a}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) 23:12:02 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7a) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x88f5}, @val={0x2, 0x0, 0xfff9, 0x8, 0x8}, @ipv6=@dccp_packet={0x9, 0x6, "5088de", 0x1dc, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @dev={0xfe, 0x80, '\x00', 0x36}, {[@routing={0xff, 0xe, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @empty, @mcast2]}, @srh={0x1, 0x6, 0x4, 0x3, 0xd6, 0x8, 0x5, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}, @routing={0x0, 0x6, 0x1, 0x1, 0x0, [@private0, @private2, @mcast2]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x9, 0x5, "1fa31e", 0x81, "bc9d94"}, "297a6c612d2c88ba91af57e18d293f48cded54048f27f91902279ce81391d01cc95dea813f289538be0884556a6dbca4b8ef7d76fee40d3371e79ded9023f339fdeade9cf8e75e69d758b8e08bd6977e75cc8728cd91355a4923d59b367c74623459c1a1140461f7069731626a5a6a2bdff71c836c4f9e56965d0de4bbc50317ab2a0e45002e07eefffadc814b38c6ba7799d05a8c16822a7b3892285e26e1bb40c96ad7aaf8ad27fef779f51b5d3662c215f45ad5608f90198e79ed38e5ef43ee583c8db56781b0fe7ca4da18cf53f9afb6b4a3e9f4023b9003c4fd537ad157a6d6e830"}}}}, 0x212) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0)=0x7, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) vmsplice(r3, &(0x7f0000000800)=[{&(0x7f0000000440)="05c302117ae34d24e5e813bd7e6bebc86c798e8ac078dc2b819efa96299c585262c185d4c09471af7e2b28d5b2ab0bf6bd333dda388f2367582233e0d1d417c0edde1baf4e7fd7a70f66330abc6cf17d8d44ba5d5b719bd6f03fb5650a78da0e7ac7810cc9739a0638fcd06fdba44f3aa69657873345adc1f27bbe", 0x7b}, {&(0x7f00000004c0)="bb47244e05b821e052d672a0b1310431556b3ac5acd6f7b971f935295dac614dd0cf390b23f063ba90d326e3badeeb878f58fc3f4c31e68eabb52d41d7ce3ea1b09427a20b8802cdbbeb10091eab1e784dd8e243f8a82cd23fe097b921eb3d09b833c4e04f541404d6688b99385debe8e8d44ea78178c0b4b344083beb3c9cb5fbbbca4b54da1759d91e92eba88cda90138f685ac8913874fc4f4b81d1274e4e87b42557fbcdb356b09a3405f46503e6411142df3783b8cdc7e3961b18b9f8a6e509e19ccf35c296f9fbbf1003bfb769528c8d7507e94084da20cbe5026a8730cf26d64f", 0xe4}, {&(0x7f00000005c0)="bd69a16e21a220bf75a4ba06974aee5c67ca306346e08b34debbfb65b5db57b63b33adbccffd0a01cf9f32e1f5a892cfa40bcd0e04c81057e5ec9534a49c56cea4e070f1ae1f790998b093e52e66f850f34baa629fd1f2c3dbca7db139cd0298683f", 0x62}, {&(0x7f0000000640)="1cf09e919b604bdc46f57d05094ceed5067126efcff4afca74bcd15bbac7fc6e35b6ed29cd9206df2ef1e443c07e34858d6574a6a10f908cd2b5b6ffe42b9efaeef679ac07c125baf170afa2b687b5bf716314afcfa5010cf617b2328b0c6a3250671bca167add00b1a68d0b85257284742e2e341646487ea3c5e4d7b0751135238acf8af6c4fc8e87a0544f798dc2bfc2548979e557508f8681cc8ea9bf09dfa280d572f93ca064d9a6473fe9ea4069b8ccbc18c8067b8b6b0a82ce17485b8b1b933740d5792ea29013e6d9a38bcfefafcf", 0xd2}, {&(0x7f0000000740)="8d11fca4f711a74b1b34420f857c49627ad9ef02f8c86a7bd1b0a61429f2e4a72a5a673b2f6cebf983a7320fac961315711408c00148462a3225ef9b24d459d9c0ae519467d5cfdb7cec9f060aa37b5a09b95ba16b764355eff1591a9703bdf9079e29d092ac7417e762ee6479ec04fe9e4fddbeb84462b4116c76c82d9829412e633042f43e6b8dc791d46b8fdc62", 0x8f}], 0x5, 0xf) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0xffffffffffff0001}}, './file0\x00'}) bind(r0, &(0x7f00000008c0)=@ethernet={0x1, @local}, 0x80) r5 = accept4$bt_l2cap(r3, &(0x7f0000000940)={0x1f, 0x0, @fixed}, &(0x7f0000000980)=0xe, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000009c0)=0x1, 0x4) ioctl$int_in(r0, 0x7a33664a9ae1a71b, &(0x7f0000000a00)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000a40)=0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), &(0x7f0000000b00), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000001240)={'syztnl2\x00', &(0x7f00000011c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x5, 0x4, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x80, 0x7d, 0x8}}) sendmsg$inet(r4, &(0x7f0000001300)={&(0x7f0000000b40)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000b80)="be438b520e7b26ef5f773d7bf4e60122f99df3748cbab557e3640be19de981b5b05ef08f108fae56b2701056b3469e10d3232fb351df3504222085f71f798634e12754b781afd71cdf5721840be6e3886666bf33898c0aa925bff948b77b9d9746917fab56377c5eb6867ea4b91091fb420cb73e6604ba891e39086be3a8964d105606b92699f2bf", 0x88}, {&(0x7f0000000c40)="5ec3bbb39ff3ec6c468c6a7b01c11841b0b524caeacf614cb4420959a830d3f182d54827924221bbe5d7041f4441c098821d4ca16463fcf0c94371898979f3fb89c0c3e487fe149e2fe046449d9e2da2236d97225e2738e01d88f5ac889ab27425ab", 0x62}, {&(0x7f0000000cc0)="b78209af88109ea36405a39e1c4c52ab1f84ec669c1a392cb0d866af7f77e8e51bf68460cc3c1db6034650e007c3d5b1f1d7b583019eb75a4ef50b57fcd12b903b2da85209ea7eb04f7bda8b2763edb33ac508d6deac4770348e0c7f7bc6ac95e0783b6a2896b7981e289e4bb630d67ead3bc098f337dd9f11fb8fd4c4a41ba3a2e90cdab510931dc92cc9d393aa69ab9246c9b145042e8a1ccaae20534697fac6fc5a", 0xa3}, {&(0x7f0000000d80)="76b078c410176f2f317ccd8b15ad75f09bbdf50083ce7846f8357aabc3d5662c030ecc1ac405a59bd54520b3f5b9c03131740aed240c93dcf784c47a13f92f313b80ecf48b174171c057473ee0e4f0f097ad3d985a112fe6036ffb0cd5e86b3a0fcd47917a521aedacfc9485df30cd1cabd03061fe", 0x75}, {&(0x7f0000000e00)="802167d282167182ce484f89", 0xc}, {&(0x7f0000000e40)="e4ec2dfa5512cd16e13bf609ad262543a49784182a085ba004b69d3fcbe0d36efd08d827f079188bd3a93c1504ade6751ab6b487d95ba6849f519d08cbc527db454e6bd96cca49e54f85170f5ba39231b753d01ba1af4d53a98fc1041d", 0x5d}, {&(0x7f0000000ec0)="455acb0292781d696467468dd9837c1a32bb3ccec1fa1b907b0951aba2c1cd99d97a79221bb3dcb42f92560799481bfe53b798e38cbe9f3a8099c17def483b4a15de3ec7f9571a0ce28ab9944abe7d1536961851d8f25bbe7abb4fae135807b42a2907daca33399221f1ba2e4f524fd2f511b443b3856c4e6bf158c57e491035fad1d2d048c118f2c5e33fa13913509b4280ef1e506bb635ed61ed91c8e41bc95e70e31d589cc588fa0b473c4b12e3db416beb429885f3135b7fd923acd1", 0xbe}, {&(0x7f0000000f80)="03bfbcf84891504d8d514fb3f08ca564a1bf5b30a0022829770d42b8a3ca32c8c6d6397440f8c1bdcc02756e7a459fc42b6a615ecc97860305885d603cab56076845a8d125b1eb0b03ddb60f74d9fdead695f8aae58208e715b6c16865abe007e5f602d698", 0x65}, {&(0x7f0000001000)="ec3ddfb7213c94466f5bf15d85dc726cc8b07ea5e5fe4cd4d265d4a324b2d71820abbc0cc30de065b88027d3d30d2a9f0054e65d1e52287fe1285e1b893860ed04d71a5c33ac4d4c24ef0335cf8bae09d1697e3f66c27e0471de3f5861fb5ce929e759494dc1562d304b7e931d2745f6d3af5a663eb8eb7087a0a3130a2be866626bdab5d478f8c0e2355d3051cbf7c37af83bc86253549c98b329227d76e4ab08bc727ebd007bc0d5fecc92e1b3cc601bd5e2ca060b79526135453a616d1ed3faa76f40355fd6b2e92da8bb8ab17a8f051c8b9986d829", 0xd7}], 0x9, &(0x7f0000001280)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_ttl={{0x14}}], 0x70}, 0x20040041) r7 = syz_open_dev$mouse(&(0x7f0000001340), 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000001600)={&(0x7f0000001380)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000013c0)="9c7cf6aba7d6a28597d6346bf744d6ae2a0acfb068fa18e453ee8189d979966fc9a6a3b5107e33bd89a221c7bdff9169e4ede87da9478e1734496550db66af8ecbe1d504ce3bbb8ef3fb4c93a5478dabd378b09fbc0ef61aa14df9427f86b1f1965b7fc18b70535cffbe47950686458112ac86d741679d7c621a957634be46683f3ff89b1dbc081843e553ac4978b7427d1343f4f8f69a23894878c51e2e2674eb9acdbe67e35e3980a38c6cf4e110553fd9441bea6384eb7ec2ad4d13a794532d6e3081e13849ce8e1e1ee54dbf2b35dd835e448f343d74366c2ad12965f823f9248748a7f69314ba3f6adabe878230fdf1a0a71e679b", 0xf7}], 0x1, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @broadcast}}}], 0x38}, 0x80) 23:12:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=""/136, 0x88}) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x8, 0x5}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000240)={0x0, 0x1, [0x6, 0x8, 0x4, 0x7f, 0x3ff, 0x6]}) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000480)=""/191, 0xbf}], 0x4) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000580)) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000600)={0x1, 0x0, &(0x7f00000005c0)=[r0, r0, r0, r1]}, 0x4) r2 = eventfd2(0xff, 0xc1c01) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000640)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000680)={{}, r3, 0x10, @unused=[0x100, 0x20, 0x39, 0x1f], @subvolid=0x80}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x16c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffc00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd57}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffc1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x32d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0xfca, 0x2, 0x20, 0x81]}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8f56}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x6, 0x22, 0x6, 0x27c4, 0x9, 0x9, 0x1, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb24}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4dc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x11}, 0x4080) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001a00)={&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001940)=""/137, 0x89}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0x8f76c000) syz_genetlink_get_family_id$team(&(0x7f0000001a80), 0xffffffffffffffff) 23:12:02 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ba60ffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffe0}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4020000}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x150}, 0x1, 0x0, 0x0, 0x480}, 0x4040005) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/time\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000740)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r3, 0x220, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d4}, 0x4000) splice(r0, &(0x7f0000000840)=0x7, r1, &(0x7f0000000880)=0x200, 0x5, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x3f, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x700, 0x1, 0x1, 0x2}}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000ac0)) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000c00)={{r7}, 0x0, 0x0, @inherit={0x90, &(0x7f0000000b40)={0x0, 0x9, 0xff, 0xaf, {0x8, 0x30, 0x5, 0xff, 0x1000}, [0x9, 0x6, 0xcc79, 0x8001, 0x9, 0x0, 0x9, 0xfffffffffffffffd, 0x8]}}, @subvolid=0xd0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40) 23:12:02 executing program 7: ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xd93, 0x76, &(0x7f0000000000)="a8fcf9a6b3f2cefc2ad176a60d62ca00ef668a2956cc074dbbbfe404d983bc2397f6960f5da10772316f139dc96175f04e8ce97b532381cffe70e2911c162d3ee11687648de84232aeb176f8e2e4afdd96c050bcdf53f2dbf3308727459ef75e9ec9f3be45f301e92aa689c82c086ca7134984d427bd"}]}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x1, 0x5b, 0xb7, &(0x7f0000000100)="8616e09f23db8ae8ba3cd7c4a29c9626360ba1239bff0d504b37679b8bafcc8fe55f16ed29a2fa1375c50ccc6448e721f71168117b458821d6f111882aa55ee239b802161a369bd9f33d1c768a6db179a06d6b02bdb724d53bc99f7847a4a53ba8cce776d795f7f06c75b565919e0c088f4b932baab7da85dc66993dd8b4b007a5222023b07b498999ea2933cf5463ecb1e894119b43396156ddb3d6983ad1ee3b6993544dd64658f94c3a4c76a6eedd1d936ac7483336"}) r0 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x80000001}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000280)={0x9, 0x49}) r1 = syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x7f, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000340)="41398a9bbac6307c848728dce7f51e89aee9b0409b42d23b19714859391ce04b1f903852dae96864ba85", 0x2a, 0x8000}, {&(0x7f0000000380)="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", 0x1000, 0x2}, {&(0x7f0000001380)="476b3cdb2f2682c100d88fe973b2853a34b5619727ba5481adb9990a7c69ea79df00c0c56652403317d584940f3e581deac7687bb7591bb4558023070e6e21e54a236bce842c9c4702c74aacb515e2918dd7cf485ebe8c5247c7f93a71a267a710dcd26a8a50ec5f3d288211faacba7d4d1671d8376e1471cb31bb62a9f97aae8ebcdac72fe234ae343bd3ab8e5de6d3a850530900b0d8af39a5352865e6499b0eb85754a803f2e445af93cef578677b5a2f04a92388324fb167e8f62da25b97875c3d8a531b1a961ec371", 0xcb}, {&(0x7f0000001480)="a9caa957b081be6c69b5f08ead47be73053c9e73fcd74f839844fd0502d034010402cf32d29cfed5e5916fc058a028b6fe95845e56da35144be474b63512504db21b726d1798296d3374de79a7b4b0c4f9666f06ed6023d5af335c831ed6009b169b008704f982feea9d2cc4f93997d8158c46bd3b990e5eb4de782a", 0x7c, 0x5}, {&(0x7f0000001500)="1946420ab0b6259ffd244bb1d2c3ae49ceb503ead2675d5942f8f629b1fb18b5a770d25532f8def6159443654f441b817a9b25a13d9df8bf1fbeda97ce86e873b0e0b30ee898d5f10b404d536df0a6911d09ddb1022e01a6236995f61159daad4f088d1da26785a47ff10fd0d6ab8125ba3f470157682683bf7e829da2c66948d6f0443839a7179ebfee", 0x8a, 0x51b}], 0x40000, &(0x7f0000001640)={[{@utf8}, {@session}, {@unhide}, {@utf8}, {@map_acorn}, {@mode={'mode', 0x3d, 0x400}}, {@check_relaxed}, {@uid}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001700)={0x0, 0x101, 0x3, 0x1}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000001b00)={0x10000000}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r1, {0xfffffc00}}, './file0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) write$bt_hci(r3, &(0x7f0000001c00)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x9}}}, 0x6) r4 = openat$cgroup_ro(r2, &(0x7f0000001c40)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000001d00)={0x1, 0x80000001, 0x9}) r6 = dup2(r3, r4) faccessat2(r6, &(0x7f0000001d40)='./file0\x00', 0x10, 0x1000) [ 93.289265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.291578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.294610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.324102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.326363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.333969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.339982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.341610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.347602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.349416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.353352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.355071] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.357471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.372001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.374530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.406011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.409127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.413043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.420535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.423628] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.425774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.450899] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.456544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.458540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.470423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.472240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.480830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.494112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.498568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.500104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.500628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.501982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.506178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.508531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.526887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.529942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.531256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.537946] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.544040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.548116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.567023] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.570248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.571037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.572296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.574084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.579937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.582168] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.589180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.438154] Bluetooth: hci0: command tx timeout [ 95.439128] Bluetooth: hci1: command tx timeout [ 95.502010] Bluetooth: hci3: command tx timeout [ 95.565841] Bluetooth: hci2: command tx timeout [ 95.629746] Bluetooth: hci4: command tx timeout [ 95.693989] Bluetooth: hci5: command tx timeout [ 95.694603] Bluetooth: hci6: command tx timeout [ 95.694868] Bluetooth: hci7: command tx timeout [ 97.486728] Bluetooth: hci0: command tx timeout [ 97.486832] Bluetooth: hci1: command tx timeout [ 97.550750] Bluetooth: hci3: command tx timeout [ 97.613771] Bluetooth: hci2: command tx timeout [ 97.678073] Bluetooth: hci4: command tx timeout [ 97.741862] Bluetooth: hci5: command tx timeout [ 97.741923] Bluetooth: hci7: command tx timeout [ 97.743494] Bluetooth: hci6: command tx timeout [ 99.534182] Bluetooth: hci0: command tx timeout [ 99.535587] Bluetooth: hci1: command tx timeout [ 99.598708] Bluetooth: hci3: command tx timeout [ 99.663681] Bluetooth: hci2: command tx timeout [ 99.727907] Bluetooth: hci4: command tx timeout [ 99.789857] Bluetooth: hci6: command tx timeout [ 99.790786] Bluetooth: hci5: command tx timeout [ 99.791229] Bluetooth: hci7: command tx timeout [ 101.581736] Bluetooth: hci1: command tx timeout [ 101.582211] Bluetooth: hci0: command tx timeout [ 101.645898] Bluetooth: hci3: command tx timeout [ 101.709777] Bluetooth: hci2: command tx timeout [ 101.773782] Bluetooth: hci4: command tx timeout [ 101.838217] Bluetooth: hci5: command tx timeout [ 101.839097] Bluetooth: hci7: command tx timeout [ 101.839524] Bluetooth: hci6: command tx timeout [ 156.517262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.520771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.525336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.528882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.531762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.537751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.541429] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.543979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.572903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.595219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.596249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.600502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.601003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.604585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.605046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.608295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.609031] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.609985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.612041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.613256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.614313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.617380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.617884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.618166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.619158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.621150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.623519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.624530] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.626909] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.628660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.630579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.631760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.632443] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.635839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.636986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.641226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.644109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.644931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.652819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.656563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.657447] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.664019] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.722134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.735865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.741121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.766110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.773741] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.776756] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.605754] Bluetooth: hci0: command tx timeout [ 158.733799] Bluetooth: hci4: command tx timeout [ 158.734180] Bluetooth: hci5: command tx timeout [ 158.734726] Bluetooth: hci6: command tx timeout [ 158.797760] Bluetooth: hci3: command tx timeout [ 158.797898] Bluetooth: hci1: command tx timeout [ 158.798616] Bluetooth: hci2: command tx timeout [ 158.862714] Bluetooth: hci7: command tx timeout [ 160.654696] Bluetooth: hci0: command tx timeout [ 160.781750] Bluetooth: hci5: command tx timeout [ 160.782774] Bluetooth: hci6: command tx timeout [ 160.783210] Bluetooth: hci4: command tx timeout [ 160.845791] Bluetooth: hci3: command tx timeout [ 160.846265] Bluetooth: hci1: command tx timeout [ 160.846753] Bluetooth: hci2: command tx timeout [ 160.909775] Bluetooth: hci7: command tx timeout [ 162.701700] Bluetooth: hci0: command tx timeout [ 162.829933] Bluetooth: hci6: command tx timeout [ 162.830384] Bluetooth: hci4: command tx timeout [ 162.830983] Bluetooth: hci5: command tx timeout [ 162.895083] Bluetooth: hci2: command tx timeout [ 162.895556] Bluetooth: hci1: command tx timeout [ 162.896075] Bluetooth: hci3: command tx timeout [ 162.957711] Bluetooth: hci7: command tx timeout [ 164.750736] Bluetooth: hci0: command tx timeout [ 164.878015] Bluetooth: hci6: command tx timeout [ 164.878049] Bluetooth: hci4: command tx timeout [ 164.878506] Bluetooth: hci5: command tx timeout [ 164.942731] Bluetooth: hci1: command tx timeout [ 164.942760] Bluetooth: hci3: command tx timeout [ 164.943217] Bluetooth: hci2: command tx timeout [ 165.005843] Bluetooth: hci7: command tx timeout [ 216.399781] [ 216.399989] ====================================================== [ 216.400504] WARNING: possible circular locking dependency detected [ 216.401018] 6.13.0-next-20250124 #1 Not tainted [ 216.401409] ------------------------------------------------------ [ 216.401915] kworker/u8:0/11 is trying to acquire lock: [ 216.405640] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.406516] [ 216.406516] but task is already holding lock: [ 216.407022] ffff888015fc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.407844] [ 216.407844] which lock already depends on the new lock. [ 216.407844] [ 216.408524] [ 216.408524] the existing dependency chain (in reverse order) is: [ 216.409151] [ 216.409151] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 216.409733] __mutex_lock+0x13d/0xb50 [ 216.410140] wiphy_register+0x1b2e/0x25d0 [ 216.410588] ieee80211_register_hw+0x23a4/0x3d60 [ 216.411086] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 216.411588] init_mac80211_hwsim+0x389/0x870 [ 216.412044] do_one_initcall+0xf9/0x640 [ 216.412476] kernel_init_freeable+0x53d/0x7a0 [ 216.412931] kernel_init+0x1e/0x2d0 [ 216.413299] ret_from_fork+0x48/0x80 [ 216.413675] ret_from_fork_asm+0x1a/0x30 [ 216.414124] [ 216.414124] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 216.414662] __lock_acquire+0x29fd/0x4580 [ 216.415101] lock_acquire+0x19b/0x520 [ 216.415495] __mutex_lock+0x13d/0xb50 [ 216.415898] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.416442] unregister_netdevice_queue+0x224/0x2e0 [ 216.416931] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.417416] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.417898] ieee80211_unregister_hw+0x55/0x3a0 [ 216.418355] hwsim_exit_net+0x3a0/0x730 [ 216.418764] ops_exit_list+0xb3/0x180 [ 216.419165] cleanup_net+0x546/0xad0 [ 216.419548] process_one_work+0x8ee/0x1a10 [ 216.419990] worker_thread+0x674/0xe70 [ 216.420405] kthread+0x3ab/0x720 [ 216.420776] ret_from_fork+0x48/0x80 [ 216.421146] ret_from_fork_asm+0x1a/0x30 [ 216.421574] [ 216.421574] other info that might help us debug this: [ 216.421574] [ 216.422219] Possible unsafe locking scenario: [ 216.422219] [ 216.422715] CPU0 CPU1 [ 216.423116] ---- ---- [ 216.423501] lock(&rdev->wiphy.mtx); [ 216.423842] lock(rtnl_mutex); [ 216.424337] lock(&rdev->wiphy.mtx); [ 216.424871] lock(rtnl_mutex); [ 216.425176] [ 216.425176] *** DEADLOCK *** [ 216.425176] [ 216.425670] 4 locks held by kworker/u8:0/11: [ 216.426047] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 216.426933] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 216.427770] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 216.428550] #3: ffff888015fc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.429422] [ 216.429422] stack backtrace: [ 216.429804] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 216.429841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 216.429863] Workqueue: netns cleanup_net [ 216.429904] Call Trace: [ 216.429914] [ 216.429925] dump_stack_lvl+0xca/0x120 [ 216.429984] print_circular_bug+0x47b/0x750 [ 216.430030] check_noncircular+0x2e9/0x3c0 [ 216.430071] ? srso_return_thunk+0x5/0x5f [ 216.430127] ? __pfx_check_noncircular+0x10/0x10 [ 216.430169] ? hlock_class+0x4e/0x130 [ 216.430199] ? mark_lock+0xac/0xed0 [ 216.430240] ? srso_return_thunk+0x5/0x5f [ 216.430295] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 216.430340] ? lockdep_lock+0xba/0x1b0 [ 216.430397] ? __pfx_lockdep_lock+0x10/0x10 [ 216.430460] __lock_acquire+0x29fd/0x4580 [ 216.430513] ? __pfx___lock_acquire+0x10/0x10 [ 216.430557] ? lock_release+0x20f/0x6f0 [ 216.430601] ? __pfx_lock_release+0x10/0x10 [ 216.430649] lock_acquire+0x19b/0x520 [ 216.430692] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.430741] ? __pfx_lock_acquire+0x10/0x10 [ 216.430799] ? srso_return_thunk+0x5/0x5f [ 216.430857] ? lock_release+0x20f/0x6f0 [ 216.430901] ? srso_return_thunk+0x5/0x5f [ 216.430957] ? lock_is_held_type+0x9e/0x120 [ 216.431012] ? srso_return_thunk+0x5/0x5f [ 216.431072] __mutex_lock+0x13d/0xb50 [ 216.431125] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.431170] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.431217] ? srso_return_thunk+0x5/0x5f [ 216.431272] ? synchronize_rcu_expedited+0x38a/0x420 [ 216.431317] ? __pfx___mutex_lock+0x10/0x10 [ 216.431371] ? __pfx_autoremove_wake_function+0x10/0x10 [ 216.431426] ? srso_return_thunk+0x5/0x5f [ 216.431482] ? kasan_quarantine_put+0x84/0x1e0 [ 216.431544] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 216.431579] ? srso_return_thunk+0x5/0x5f [ 216.431639] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.431685] ? __virt_addr_valid+0x2e8/0x5d0 [ 216.431738] ? __pfx_lock_release+0x10/0x10 [ 216.431783] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 216.431830] ? find_held_lock+0x2c/0x110 [ 216.431889] ? srso_return_thunk+0x5/0x5f [ 216.431947] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 216.432008] ? srso_return_thunk+0x5/0x5f [ 216.432064] ? lock_release+0x20f/0x6f0 [ 216.432108] ? __pfx_lock_release+0x10/0x10 [ 216.432152] ? srso_return_thunk+0x5/0x5f [ 216.432208] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.432256] ? srso_return_thunk+0x5/0x5f [ 216.432317] unregister_netdevice_queue+0x224/0x2e0 [ 216.432361] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 216.432404] ? up_write+0x195/0x520 [ 216.432460] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.432513] ? srso_return_thunk+0x5/0x5f [ 216.432572] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.432611] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 216.432649] ? srso_return_thunk+0x5/0x5f [ 216.432705] ? srso_return_thunk+0x5/0x5f [ 216.432761] ? synchronize_rcu+0x1ff/0x260 [ 216.432804] ieee80211_unregister_hw+0x55/0x3a0 [ 216.432849] hwsim_exit_net+0x3a0/0x730 [ 216.432891] ? __pfx_hwsim_exit_net+0x10/0x10 [ 216.432932] ? srso_return_thunk+0x5/0x5f [ 216.432988] ? netdev_run_todo+0x788/0x1040 [ 216.433035] ? srso_return_thunk+0x5/0x5f [ 216.433093] ? __pfx_hwsim_exit_net+0x10/0x10 [ 216.433136] ops_exit_list+0xb3/0x180 [ 216.433178] cleanup_net+0x546/0xad0 [ 216.433223] ? __pfx_cleanup_net+0x10/0x10 [ 216.433277] process_one_work+0x8ee/0x1a10 [ 216.433343] ? __pfx_lock_acquire+0x10/0x10 [ 216.433388] ? __pfx_process_one_work+0x10/0x10 [ 216.433448] ? srso_return_thunk+0x5/0x5f [ 216.433504] ? move_linked_works+0x172/0x270 [ 216.433549] ? srso_return_thunk+0x5/0x5f [ 216.433604] ? assign_work+0x196/0x240 [ 216.433663] worker_thread+0x674/0xe70 [ 216.433722] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.433774] ? __pfx_worker_thread+0x10/0x10 [ 216.433835] kthread+0x3ab/0x720 [ 216.433887] ? __pfx_kthread+0x10/0x10 [ 216.433940] ? srso_return_thunk+0x5/0x5f [ 216.433996] ? finish_task_switch.isra.0+0x206/0x840 [ 216.434047] ? __pfx_kthread+0x10/0x10 [ 216.434102] ret_from_fork+0x48/0x80 [ 216.434133] ? __pfx_kthread+0x10/0x10 [ 216.434187] ret_from_fork_asm+0x1a/0x30 [ 216.434254] [ 217.993197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.999216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.001551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.008036] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.010314] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.014168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.135531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.137578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.142930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.147351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.149545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.152245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.197270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.200244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.202219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.205453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.207541] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.209101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.262432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.267852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.270168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.272867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.278222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.280158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.327063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.329449] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.331736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.335702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.338431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.340782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.341723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.344074] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.345717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.382963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.392840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.396063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.397990] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.399776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.400712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.410691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.430893] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.432959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.434721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.438881] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.440563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.560804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.574974] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.604797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.045755] Bluetooth: hci0: command tx timeout [ 220.174741] Bluetooth: hci1: command tx timeout [ 220.237829] Bluetooth: hci2: command tx timeout [ 220.301792] Bluetooth: hci3: command tx timeout [ 220.365682] Bluetooth: hci5: command tx timeout [ 220.433630] Bluetooth: hci4: command tx timeout [ 220.558657] Bluetooth: hci7: command tx timeout [ 220.685704] Bluetooth: hci6: command tx timeout [ 222.094663] Bluetooth: hci0: command tx timeout [ 222.223686] Bluetooth: hci1: command tx timeout [ 222.286668] Bluetooth: hci2: command tx timeout [ 222.350694] Bluetooth: hci3: command tx timeout [ 222.415650] Bluetooth: hci5: command tx timeout [ 222.477734] Bluetooth: hci4: command tx timeout [ 222.607737] Bluetooth: hci7: command tx timeout [ 222.733734] Bluetooth: hci6: command tx timeout [ 224.141742] Bluetooth: hci0: command tx timeout [ 224.269653] Bluetooth: hci1: command tx timeout [ 224.335755] Bluetooth: hci2: command tx timeout [ 224.399883] Bluetooth: hci3: command tx timeout [ 224.461906] Bluetooth: hci5: command tx timeout [ 224.525650] Bluetooth: hci4: command tx timeout [ 224.653652] Bluetooth: hci7: command tx timeout [ 224.781650] Bluetooth: hci6: command tx timeout [ 226.189653] Bluetooth: hci0: command tx timeout [ 226.317950] Bluetooth: hci1: command tx timeout [ 226.382759] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 23:14:07 Registers: info registers vcpu 0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001712046 R10=000000000000002f R11=2f72656b726f776b R12=000000000000002f R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdf2a1ec9f8 CR3=0000000034d18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff0000ff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055ee364bb240000055ee364e89a0 XMM06=00000000000000000000000300000004 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88803b5a6000 RBX=ffff88800e33cde0 RCX=ffffffff81429a4a RDX=ffff88801b03e8c0 RSI=0000000000000001 RDI=ffffffff85c56bc8 RBP=ffffffff85c56bc8 RSP=ffff88800c0cfda0 R8 =0000000000000000 R9 =ffffed1001e50500 R10=ffff88800f282807 R11=0000000000000532 R12=ffff88803b5a4758 R13=ffff88800e33cde0 R14=ffff88800f269bc0 R15=0000000000000082 RIP=ffffffff81aeebf0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00c47d000 CR3=000000000dd9e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041110a0000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000