Warning: Permanently added '[localhost]:47687' (ECDSA) to the list of known hosts. 2025/01/27 18:50:46 fuzzer started 2025/01/27 18:50:47 dialing manager at localhost:40883 syzkaller login: [ 68.236801] cgroup: Unknown subsys name 'net' [ 68.330558] cgroup: Unknown subsys name 'cpuset' [ 68.362820] cgroup: Unknown subsys name 'rlimit' [ 73.862894] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 18:51:04 syscalls: 227 2025/01/27 18:51:04 code coverage: enabled 2025/01/27 18:51:04 comparison tracing: enabled 2025/01/27 18:51:04 extra coverage: enabled 2025/01/27 18:51:04 setuid sandbox: enabled 2025/01/27 18:51:04 namespace sandbox: enabled 2025/01/27 18:51:04 Android sandbox: enabled 2025/01/27 18:51:04 fault injection: enabled 2025/01/27 18:51:04 leak checking: enabled 2025/01/27 18:51:04 net packet injection: enabled 2025/01/27 18:51:04 net device setup: enabled 2025/01/27 18:51:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 18:51:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 18:51:04 USB emulation: enabled 2025/01/27 18:51:04 hci packet injection: enabled 2025/01/27 18:51:04 wifi device emulation: enabled 2025/01/27 18:51:04 802.15.4 emulation: enabled 2025/01/27 18:51:04 fetching corpus: 0, signal 0/0 (executing program) 2025/01/27 18:51:06 starting 8 fuzzer processes 18:51:06 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/122) io_uring_setup(0x6820, &(0x7f0000000080)={0x0, 0x6f8e, 0x8, 0x2, 0x35a}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000100)=0x101) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)=[0x80, 0x1a]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x5, 0x3d, &(0x7f0000000200)="0bd0e0527adc67cea9fca3d1f7719a4c869d441f002c6ed8a6b7c727327a4d95743f3a360592adcc74cae5967996339986f81dd5c38671031fdeeef64e"}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000280)=""/233) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/17) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000003c0)={0x7, 0x20, 0x3ff, 0x80000000, "49cde5e16fa5e6f780993371c555588fd3ced996ffb8cd4e13270591999c38bf"}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x12b600, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000480)=""/37) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000004c0)=""/4096) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000014c0)=""/89) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001540)={0x67, 0x1d, 0x7, 0x8, "e1030925b766fe325a0062fe552e378079e16f2c21783c615318d5a0ed61c9fd"}) r3 = syz_io_uring_setup(0x6711, &(0x7f0000001580)={0x0, 0x801d, 0x8, 0x2, 0x104, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001600), &(0x7f0000001640)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001680)={0x80, 0x3f, 0x1ff, 0x1, 0x4, 0x6}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x80, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000084}, 0x24008890) 18:51:06 executing program 1: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x34}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3f}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x7, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x371f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x212200, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000002c0)=0x9, 0x4) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3e83}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x53, 0xac, "9a9b012ab5596be1a53f8918168e906af8498ec1fff4a19fe7b270a6c47704d4fe12c550b17bf03f06d6a7c4607c1a1e4f3c910e5acd26621b205692122026463d939e331610bf1671ecdc67ace990"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004811}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x554}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x21}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000800)={0x4, 0x2, 0x80, 0xec99, 0x8b2d, 0x9}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x500, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008091}, 0x30000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1840}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xb4, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bind$netlink(r0, &(0x7f0000000d40)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4054) 18:51:06 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getpolicy={0x260, 0x15, 0x20, 0x70bd2c, 0x25dfdbfe, {{@in6=@empty, @in6=@mcast2, 0x4e23, 0x6, 0x4e20, 0x0, 0x0, 0xc0, 0x0, 0xf8}, 0x6e6bb6, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@multicast1, 0x0, 0xa}}, @proto={0x5, 0x19, 0xf}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0x200}}, @migrate={0x1cc, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6c, 0x3, 0x0, 0x3500, 0xa, 0xa}, {@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, @in6=@mcast2, 0x33, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010100, @in=@remote, 0x33, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in=@loopback, @in6=@empty, @in6=@empty, @in6=@loopback, 0x0, 0x3, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in=@broadcast, @in=@empty, 0x2b, 0x0, 0x0, 0x3504, 0x2, 0x2}, {@in6=@local, @in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3c, 0x4, 0x0, 0x3505, 0x2, 0x2}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x20024840) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000440)=""/41) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x96f4e5d93102deff, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x1b}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x42000}, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000006c0)={0x3, 0xca, &(0x7f00000005c0)="840c737434825a2379ccfdac4029e145861045166b70024f31197e52eddfea1245077ec4d2e3ada443c0c297f7b0e42f1fe2e9eb501d84d76f85719566e572a720286677f6a899ea7e54595268f571711837de23af7de10413305beabcf8299e5e211654c4fd8603c5aec10c16ee90a198a498252135e8a46dbb90bdadabefb6259970c22eae7b3b41216529c8c4f7f072a66a0285c3e88602dbd2529db2f65b00484c4784d02c53c572e2c76566ed6ffe5388ac98443dd27602d3d32aa43aa40ad7b1690f02bebe2fad"}) r1 = socket(0x21, 0x0, 0xd64) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_IE={0xf7, 0x2a, [@ibss={0x6, 0x2, 0x6}, @measure_req={0x26, 0x47, {0x40, 0xff, 0x1, "95ab116f7349d8911effb0e9de469eaeca0732d84a443e0ebef3c69bd0b999b9ec76c2dd092800f0f0f2591117c0ae5e75a683b246c960f7f8f6eb2aabf123799be06db7"}}, @fast_bss_trans={0x37, 0xa4, {0x20, 0x3, "b13e66f7f0d74846cabd1faf67fd6ea2", "80f8152e9aaef576a289070a8f81f56b25b91279fd3d5658b58567d0b03c5647", "7a23d99168eed91d471bbb687f4f3e1d18abc6a691bdbb81825ff9b10958775a", [{0x2, 0x14, "57c8af0d5a510ee49aaef95ba30e23b364e6ad9f"}, {0x1, 0x28, "12099890424ccfd383f9c4262e9d65edb4661abe5f3864fd8ee40257d89b96ac579688c644d5400f"}, {0x4, 0x10, "4eb253275fb04b042b1ddc8faa1724c2"}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x26, 0x2a, [@challenge={0x10, 0x1, 0x27}, @challenge={0x10, 0x1, 0xe}, @ht={0x2d, 0x1a, {0x2b0a, 0x0, 0x4, 0x0, {0x1, 0x1ffa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0xffffffc1, 0x6}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x8, 0x34, @random="d696897a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x164}, 0x1, 0x0, 0x0, 0x8805}, 0x0) r2 = socket(0x1d, 0x3, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0x8c401, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xff, 0x53}, {0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x1f, 0x1}, {0x1, 0x7}, {0x9b, 0x6}, {0xaf, 0x3}, {0x3f, 0x1}, {0x4, 0x4}], "8ba8d457f101417b"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x3bd7ceec51cd6a25) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x7}, {0x0, 0x7}, {0x81, 0x1}, {0x5d, 0x3}, {0x5a, 0x4}, {0x1, 0x5}, {0x3f, 0x3}, {0x2, 0x6}, {0x80, 0x3}, {0x9, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x2}, {0x20, 0x2}, {0x3f, 0x3}, {0x20, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x81, 0x2}], "4ae45aeb791e5feb"}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044001}, 0x7d26322b8723c21c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000c00)=0xfff, 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ef7d941c2668"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x200400c0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000e40)={'ip6_vti0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', r3, 0x6, 0x0, 0x1, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8000, 0x1000, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', r3, 0x29, 0xba, 0x8, 0x7f, 0x6, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x1, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', r3, 0x29, 0x9, 0x3, 0x10000, 0x22, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000001080)={'syztnl1\x00', &(0x7f0000001000)={'ip6tnl0\x00', r3, 0x29, 0x1f, 0x1, 0xc276, 0x41, @private0, @loopback, 0x7, 0x20, 0x80, 0x7}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002500)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000024c0)={&(0x7f00000017c0)={0xcd8, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x600000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x9, 0x20, 0x1}, {0x3da, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0xcd8}}, 0x8010) 18:51:06 executing program 3: clock_gettime(0x3, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000040)=0x0) io_getevents(r0, 0x6, 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0) io_pgetevents(r0, 0x8, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) io_setup(0x3, &(0x7f00000002c0)=0x0) io_cancel(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000300)="8872d999933818d955a35ec6fdca2495a814f99491c2e1d238c81079f3fe435f4f61509bb38cfee13cd6533d811e2eae4bc86fe3db38c3e3b50ec4cf95e7f975aa65a3e0b2c2123bc796aeb995f3560ad465394badb694ebd1b80f", 0x5b, 0x8945, 0x0, 0x1}, &(0x7f00000003c0)) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000400)=""/185) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x80f, 0x3}) io_getevents(0x0, 0x58, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000640)="6339add70bdfe2bd8c018366edd9cbb297a6237c0a1fd9b92c82db241a836b654e36d69e1d0b006d22f5fdd2568cda196e86b64657878f774f7a4b020113e92f4c3903141c8108c732e409a6d03beb6e0787918ac8e134e449ab35091dd271c58f072f8f80b52aa9cd4a2da44134595abc81342d121c70dd0514364efc17b092daf36a9e54495276cd24654e62c792a0c467476382455a256dbad049c401b9a8387d91c72af5b495fc29b1461caa55b1788cc11ec11ca53b0b270db73419efc1e55f2ce9a7f81ae44e5b0b8bb79763b55aaefdeb72", 0xd5, 0xffffffffffffffdc, 0x0, 0x2}]) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x2) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000007c0)={0x1, 0xa, 0x8, 0x6, "92564a229706b64f107059663158fa0d5674ab1944b3c60f7b7a0a11bc3ca0d0"}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000880)=""/155) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) pselect6(0x40, &(0x7f0000000940)={0xdcc3, 0x3, 0xacef, 0x7, 0x20, 0x1, 0x5, 0x3}, &(0x7f0000000980)={0x4, 0x5c0, 0x6, 0x100, 0x1, 0x2, 0x3, 0x1}, &(0x7f00000009c0)={0x5, 0x0, 0xffffffff, 0x3, 0x81, 0x7, 0x492, 0x190a}, &(0x7f0000000a00)={0x0, 0x3938700}, &(0x7f0000000a80)={&(0x7f0000000a40), 0x8}) r5 = socket(0x28, 0x0, 0x7f4c8780) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000b40)={0x3, 0x0, &(0x7f0000000b00)=[r5, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x5) [ 87.412225] audit: type=1400 audit(1738003866.601:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:51:06 executing program 5: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/127) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0xe0500, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x4e8, 0x0, &(0x7f0000000180)=[r2, r3]}, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x70, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}, {0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "a2484f650c2a185c02f779684ff532ca1518f791204a1974047bb185415ff0b943b07e1a70fe78c7cfbb4e8551ba160397d270a98cb1e25a03ad20d5ece363768ab901a5441b18e0bd0b6557a8cfe9200b00efe06ab9f2"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1c, 0x2, "c94f48b4b14b57acc870c4ff428073bdbedb4a95499ca796"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7336}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000440), 0x8, 0x100) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f0000000480)={0x7, 0x5, 0x9, 0x4, 0x10000, 0x3f}) write$evdev(r0, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x4, 0x5, 0x1}, {{}, 0x0, 0x2, 0x5}], 0x30) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000540), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000580)) r8 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x73, 0x1f, 0x7fffffff, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f11, 0x7, 0x4, 0x80}}) 18:51:06 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/154) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x24, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8081) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000280)=""/129) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000380)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x1f}, 0xec, 0x5, 0x8000, 0x2, 0x1a, 'syz1\x00', "ff77543ff801f94db3caec7e2f49809a5812b2b325b565650a90dcb5d029bb69", "02361eaedd56fca23c77d425be3ddc8254bcaa0e7d56c2ea61409e07e20b6aa0", [{0x5, 0x1, {0x3, 0x9}}, {0x9, 0x8, {0x3, 0xf349}}, {0x400, 0x0, {0x1, 0x81}}, {0x5, 0xa7d0, {0x3, 0x3}}, {0x0, 0xfffa, {0x1, 0x7}}, {0xbe, 0x800, {0x2, 0x4}}, {0x7ff, 0x3, {0x1, 0x3}}, {0x8000, 0x3, {0x2, 0x3}}, {0x1f, 0x8, {0x0, 0xffffffff}}, {0xfffc, 0xff, {0x1, 0x9}}, {0x2, 0x3488, {0x0, 0x3f4}}, {0x100, 0x79c5, {0x0, 0x7}}, {0x8, 0x7ff, {0x0, 0x5}}, {0x9, 0x1ff, {0x2, 0xd0}}, {0x1000, 0x8, {0x2, 0x8}}, {0x5, 0x101, {0x0, 0xfffffffe}}, {0x1, 0x6d, {0x3, 0x8}}, {0x400, 0x6, {0x2, 0x4}}, {0x7fff, 0x8, {0x3, 0xe4a}}, {0xce, 0xfffc, {0x1, 0x20ba}}, {0x2, 0x17, {0x1, 0xfffffffe}}, {0x2, 0x8, {0x0, 0xf8000000}}, {0x3, 0x8, {0x3, 0x4}}, {0x5, 0x8, {0x2, 0x3}}, {0x5, 0x2, {0x3, 0x9}}, {0xdc, 0xfff, {0x0, 0xf58}}, {0xff, 0x200, {0x3, 0x7}}, {0x1, 0x0, {0x2, 0xffffffff}}, {0x4, 0x89e, {0x1, 0x9}}, {0x40, 0x5, {0x0, 0x3}}, {0x6, 0x5, {0x2, 0x5}}, {0x2, 0x6, {0x1, 0x1000}}, {0x8, 0x2, {0x3, 0x8001}}, {0x3, 0x1ff, {0x1, 0x6}}, {0x6, 0x81, {0x2, 0xd7b6}}, {0x2, 0xfffa, {0x3, 0x1}}, {0x8, 0x0, {0x0, 0x6}}, {0x1, 0x8, {0x2, 0x2}}, {0x8, 0x8, {0x3, 0x2}}, {0x0, 0x3003, {0x1, 0x10001}}]}}}, {{0x254, 0x1, {{0xe6d645652f23dd16, 0x7}, 0x6, 0x5, 0xff59, 0x7, 0x1c, 'syz0\x00', "9c6f98c46a463dd4554f5013af1d5248fff1031807f4132dfc2a6fe1660bbeb6", "7400fb235077a52de39341f4bae1d4ac2ae7230d7e10eade3c4873a2f16fc462", [{0x5, 0xff, {0x1, 0x7c}}, {0x9, 0x3, {0x0, 0x5}}, {0xfe00, 0x40, {0x3, 0x4}}, {0x62, 0x1, {0x0, 0xe2}}, {0xfffa, 0x5, {0x2, 0x2b94992}}, {0x7ed0, 0x7ff, {0x0, 0x7}}, {0x101, 0x20, {0x2, 0x4}}, {0x4, 0x146e, {0x3, 0x1ff}}, {0x46, 0x91, {0x2, 0x100}}, {0x1, 0x5, {0x3, 0x9}}, {0x8000, 0x8000, {0x3, 0x2}}, {0x1, 0x2, {0x3, 0x80000000}}, {0x43c2, 0x0, {0x1, 0x6}}, {0x7, 0x4, {0x1, 0x72ee}}, {0x5, 0x8, {0x3, 0x7}}, {0xffff, 0xcd}, {0x9d, 0xb9, {0x3, 0x8}}, {0x1, 0x972, {0x0, 0x101}}, {0xfff, 0x4, {0x1, 0x2d}}, {0x64cd, 0x2, {0x1, 0x6}}, {0x9, 0x1, {0x1, 0x49b}}, {0x100, 0x8001, {0x0, 0x7}}, {0x1, 0x2, {0x1, 0x76e0}}, {0x1000, 0x1, {0x1, 0xff}}, {0x3, 0x1, {0x1, 0x7}}, {0x3f, 0x81, {0x2, 0x1}}, {0x4, 0x6, {0x3, 0x1}}, {0x40, 0x3, {0x3, 0x4}}, {0x7fff, 0x7fff, {0x2, 0xfffffff9}}, {0x4000, 0x101, {0x0, 0x6}}, {0xb7eb, 0xffff, {0x1, 0x10000}}, {0x1f, 0x7, {0x3}}, {0x8, 0x4, {0x2, 0x339}}, {0x8001, 0x2, {0x1}}, {0x2, 0x4b, {0x3, 0x2}}, {0x8, 0x28, {0x3, 0x6}}, {0x3, 0xf7e9, {0x2, 0x72}}, {0x47bb, 0x3ff, {0x0, 0x6}}, {0x9, 0x8000, {0x1, 0x7fff}}, {0xffff, 0x2, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x92, 0x2, 0x3f, 0x5, 0x6, 'syz1\x00', "a46effff175fda2c6fcb43a43ddbae3c8e29fe730b7b33d387ef6cfe23df143a", "fafc12e33546b1c95a5130ca8ec29d730ec44b4ad14eea79b3e247113d073228", [{0x20, 0x200, {0x1, 0x9}}, {0x4, 0x8, {0x3, 0x7ff}}, {0x8, 0x5, {0x2, 0x4a}}, {0x40, 0x14, {0x1, 0x7}}, {0x0, 0x6, {0x1, 0x7f}}, {0x8, 0x3, {0x0, 0xfffffffb}}, {0x7, 0x1, {0x2, 0x100}}, {0x5, 0x255, {0x1, 0x7}}, {0x4, 0x5, {0x0, 0x1}}, {0x7fff, 0x5a1, {0x1}}, {0x3f, 0xdb, {0x1, 0x3}}, {0x20, 0x80, {0x1, 0xec68}}, {0x9, 0x800, {0x1, 0xffff}}, {0x0, 0x1, {0x3, 0x5}}, {0x3, 0x40, {0x3, 0x7ff}}, {0x400, 0x3f, {0x3, 0x9}}, {0x0, 0x3, {0x1, 0x1}}, {0x7, 0x1ff, {0x3, 0x9}}, {0x7, 0x7, {0xab260657f5dabaa, 0x4}}, {0x1f, 0x0, {0x2, 0x564}}, {0x8, 0x0, {0x2, 0x3}}, {0x1, 0x0, {0x4, 0x4}}, {0x7, 0x8000, {0x2, 0x8}}, {0x2, 0x3ff, {0x1, 0x1000}}, {0x7, 0x9, {0x1, 0x5}}, {0x1000, 0x400, {0x1, 0x5}}, {0x8000, 0x9, {0x1, 0x7}}, {0x7, 0x9, {0x3, 0xffffffff}}, {0x7b, 0x4, {0x3, 0x7ff}}, {0x6, 0x400, {0x2, 0x100}}, {0x81, 0x101, {0x3, 0x2}}, {0x5, 0x7f, {0x3, 0x5}}, {0x8, 0x3, {0x0, 0x1f}}, {0x7dea, 0x3, {0x3, 0x5}}, {0x53, 0x8001, {0x2, 0x26c2}}, {0x3, 0x7, {0x3, 0x8001}}, {0x5, 0x101, {0x1, 0x50000000}}, {0x81, 0x8, {0x3, 0xffff}}, {0x5, 0x1, {0x2, 0x8001}}, {0x7fff, 0x0, {0x2, 0x909}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x440d1}, 0x20000002) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000b40)={0x2f8, 0x8, 0x88, 0x376}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000e40)=0x400, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x94}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x60}}, 0x4000800) r4 = syz_io_uring_setup(0x4560, &(0x7f0000000fc0)={0x0, 0xb453, 0x1, 0x1, 0x2d1, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000001180)=[{&(0x7f00000010c0)=""/170, 0xaa}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001280)={&(0x7f00000011c0), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000080) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xcc, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffa7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 18:51:06 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", ""]}, 0x28}}, 0x40015) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r3, 0x108, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b2bf324595b314561d09937e79b7338a"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4da2b4d7c33285ef7aad79bae9b0cf31"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK={0x14, 0xfe, "c5e7342b219d0bc192781c7689481508"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffff800}]}, 0x80}, 0x1, 0x0, 0x0, 0x4014}, 0xc040800) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000003c0)=0x1aa000, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x174, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4000}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_IE={0x112, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1f}}, @dsss={0x3, 0x1, 0xb5}, @perr={0x84, 0xfd, {0x3, 0x11, [@not_ext={{}, @device_a, 0x4, "", 0x6}, @not_ext={{}, @broadcast, 0x2, "", 0x3b}, @not_ext={{}, @device_b, 0x0, "", 0x29}, @ext={{}, @device_a, 0x81, @device_a, 0x1d}, @not_ext={{}, @device_b, 0xd6a7, "", 0x11}, @not_ext={{}, @device_a, 0x200, "", 0x39}, @not_ext={{}, @broadcast, 0x1ff, "", 0x3d}, @ext={{}, @broadcast, 0x3, @device_b, 0x11}, @not_ext={{}, @device_a, 0x10001, "", 0x25}, @not_ext={{}, @device_a, 0x4, "", 0x1d}, @ext={{}, @broadcast, 0x80, @device_a, 0x1b}, @not_ext={{}, @device_a, 0xffffffff, "", 0xd}, @ext={{}, @device_a, 0x2, @broadcast, 0x10}, @ext={{}, @broadcast, 0x100, @device_a, 0x42}, @not_ext={{}, @device_a, 0x101, "", 0x28}, @not_ext={{}, @broadcast, 0x0, "", 0x37}, @not_ext={{}, @broadcast, 0xba3, "", 0x2b}]}}]}, @NL80211_ATTR_SSID={0xe, 0x34, @random="65f7249bf8cfac680722"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdec6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x174}, 0x1, 0x0, 0x0, 0x45}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000700)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r7 = socket$netlink(0x10, 0x3, 0x5) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r5, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fe2dc8abf05f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75b1b185f112"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080c4}, 0x240088c5) 18:51:06 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3dc, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14c, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfd, 0x60}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x4}, @tim={0x5, 0xdc, {0x1f, 0x91, 0x0, "212067852bc44d96cabffb194d47969aee13e76532a30590ce61d9a817d13b37741e2cc68ce17c4c01ceb0d48b07ee3460dca7686b6752e1f8e2653dbfade9b73338a6d2721d85d75189c674c4348a6dda552a41a6608fd7f560c66c02b6665a1401b088d18239f565e25f2f2efc9c989ca94b112721b162393a64cff0fc3e69a8c162b0ce7c4b2efb9afe975a711657b2e518e574c338945520f09a16ad76893f3960f9ed8d39838527ef62c87cb928ee46ce26f5cdf377cbff4cbc265f5d6438e5f30ecf771e479b928e7f37eeded5f5c804ab25f58e01c9"}}, @measure_req={0x26, 0x2c, {0x6, 0xc5, 0x2, "d8050def19de24495e845ed40ad62591f0b5b7f2fd150265480346ff3be45d7c601b44c7a32f0da158"}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3f, 0x20}}, @mic={0x8c, 0x10, {0x3aa, "42b52fc27f22", @short="01301c2a610b5187"}}, @ibss={0x6, 0x2, 0x8}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x274, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe9, 0x3, "a700f6922d6fce6ca657a47028c4753de183429d5ad484a44064d379d7ac6a0241d576ee60acb6736ae2ce0cccbbcfa312f9ddea70423dd478733b098cb7e3b30078d175ca159c6d42dd37ff9ebb546a804c991404d82395a4ed31781f66de1723a1f4b45ec8a508b9eb354ba7a82f2e1ee1653ec7a39c73176e398aff8e9b2ce2b462ede26bd0ff64eefd17f4d642043a52e0a85c835e00e69c8e94ddabef8a908a7152ffd56dd950c7440c92f734dfdd6680d3d5df9cb7f6c5fdbfe42a5e4f9ebd4b87252ec1926d5df1c21f2f641c1ea7b2062280c1decee2626d78db60e1e4fcb8b467"}, @NL80211_BAND_6GHZ={0xb8, 0x3, "f37acaefc5d4f2745934524d84ed07255a3c6791488dd1de68ee54dcb14e52cee8e8c9c7758c0f6b5ee50e67b1d2e3165259e0f7aee3b3f65f2231260e6bb52807034487c02d837cd77e38a11639d6e4847226cfd0549acb5f2366a81f34a7a238a525538dff129ff2272d4ed7d211cd333e076315cd311a165f32d3be943c47a28e7719c42f0816b8edf31dc6f95401e3c230e7698f17cff3784a29c3637a36b543287de2fa08a930e05936d04c20145d74580f"}, @NL80211_BAND_5GHZ={0xca, 0x1, "a31ff08f65d47d73b2a1b78e3caf67e1009e50a3bd2394afc4563cf466b1bb2d2393e0ee23eed6c4f219782ec207a90c8403cc6992eee277d7216131210cfb0a6880fcc32c5fc388bda30310f19e11004849f0566cb13a8b8c566e3252555318a820eb399765f75243b7303abb7f9bd91d39418df70c2234099d5a3b5317fe6276ae53706c36a4911a5d6e3cd3cd3aa7f6958e7517995908b6311402e3b23e57a04c0025c2d714a19c88db22db0cd33a0604256215a1379f3f0afb8df6a5cd61f699f42e7681"}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x40000000}, 0x4044) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80044004}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x19, 0x2, 0xe, @mcast2, @mcast2, 0x8000, 0x7, 0x8, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x160, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}}, 0x11) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000009c0)="54d516fb07e06236a3ee6f7c4a8404a102072caa043668eb107669f2bc41d236c7219b3c8883100c72af1100c1779f900392a1301aca35b543b366e558af9fc4e79f8367d3f6ca0d0b5b5dcf1fabf08e2d83d4e32ac498a9484a17f2619ee6834b060e0ac45a53a882dce6fe57566502fc9c7a466237b9a962b385b7d58958624c18aca9ddfa9e60a56c07fcfd1abb40", 0x90) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'syztnl1\x00', r1, 0x0, 0x40, 0x3, 0xdd3b, 0x4, @mcast1, @empty, 0x10, 0x700, 0xffffffff, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'sit0\x00', r4, 0x29, 0x6, 0x1, 0x9, 0x20, @remote, @mcast1, 0x40, 0x8, 0x9, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x5, 0x5, 0x0, @rand_addr=' \x01\x00', @private0, 0x7800, 0x10, 0x85c, 0x2}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d80)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000e80)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000000ec0)={0x494, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b5e}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000001440)={'ip6tnl0\x00', r2, 0x2f, 0x9, 0x6, 0x6, 0x6c, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x80cf, 0x10000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x0, 0x3, 0x12, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x650, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'syztnl0\x00', r1, 0x4, 0x37, 0x1, 0x8, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x10, 0x6, 0x6a0}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001780)={0x374, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r13}, {0x160, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x1, 0x9, 0x8}, {0x6, 0x4, 0xff, 0xffffffff}, {0x8, 0x72, 0x0, 0xcd0}, {0xf9, 0x3, 0x3f, 0x65}, {0x0, 0x5, 0x2, 0x6}, {0x8001, 0x3f, 0x3, 0x9285}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) [ 88.925576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.928277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.932770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.936007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.938398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.940984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.954321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.956309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.961656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.961934] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.964793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.967449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.043592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.047334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.049576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.057515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.060459] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.062096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.248073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.253494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.255464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.260540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.285577] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.296572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.301378] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.305362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.311640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.316393] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.318606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.325626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.333674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.335837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.342038] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.354376] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.365252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.368755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.390453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.407635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.409287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.432795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.435274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.445806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.445950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.450952] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.453549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.464613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.478211] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.486994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.062779] Bluetooth: hci0: command tx timeout [ 91.064368] Bluetooth: hci1: command tx timeout [ 91.126589] Bluetooth: hci2: command tx timeout [ 91.381541] Bluetooth: hci4: command tx timeout [ 91.381702] Bluetooth: hci5: command tx timeout [ 91.445384] Bluetooth: hci3: command tx timeout [ 91.573377] Bluetooth: hci7: command tx timeout [ 91.574849] Bluetooth: hci6: command tx timeout [ 93.109347] Bluetooth: hci1: command tx timeout [ 93.109846] Bluetooth: hci0: command tx timeout [ 93.176181] Bluetooth: hci2: command tx timeout [ 93.429444] Bluetooth: hci5: command tx timeout [ 93.431030] Bluetooth: hci4: command tx timeout [ 93.493233] Bluetooth: hci3: command tx timeout [ 93.621270] Bluetooth: hci6: command tx timeout [ 93.622276] Bluetooth: hci7: command tx timeout [ 95.157334] Bluetooth: hci0: command tx timeout [ 95.158455] Bluetooth: hci1: command tx timeout [ 95.221212] Bluetooth: hci2: command tx timeout [ 95.477521] Bluetooth: hci4: command tx timeout [ 95.477540] Bluetooth: hci5: command tx timeout [ 95.541276] Bluetooth: hci3: command tx timeout [ 95.669334] Bluetooth: hci7: command tx timeout [ 95.669467] Bluetooth: hci6: command tx timeout [ 97.205356] Bluetooth: hci1: command tx timeout [ 97.205378] Bluetooth: hci0: command tx timeout [ 97.269211] Bluetooth: hci2: command tx timeout [ 97.525324] Bluetooth: hci5: command tx timeout [ 97.525398] Bluetooth: hci4: command tx timeout [ 97.589214] Bluetooth: hci3: command tx timeout [ 97.717237] Bluetooth: hci7: command tx timeout [ 97.717682] Bluetooth: hci6: command tx timeout [ 151.776352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.779698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.791300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.792454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.798703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.800743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.807007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.824533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.830078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.833473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.837545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.839567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.856881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.858733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.861613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.865827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.874960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.878191] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.884609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.886297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.890692] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.909715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.916779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.922033] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.928916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.934244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.947710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.951290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.953627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.963706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.966911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.976666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.978610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.982547] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.993970] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.995397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.004467] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.007695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.012730] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.014303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.050784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.055328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.078740] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.090392] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.119639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.142555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.174983] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.192576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.909214] Bluetooth: hci0: command tx timeout [ 153.973249] Bluetooth: hci2: command tx timeout [ 153.974254] Bluetooth: hci1: command tx timeout [ 154.037237] Bluetooth: hci3: command tx timeout [ 154.101431] Bluetooth: hci6: command tx timeout [ 154.102385] Bluetooth: hci4: command tx timeout [ 154.102432] Bluetooth: hci5: command tx timeout [ 154.357240] Bluetooth: hci7: command tx timeout [ 155.957359] Bluetooth: hci0: command tx timeout [ 156.021255] Bluetooth: hci1: command tx timeout [ 156.021281] Bluetooth: hci2: command tx timeout [ 156.085514] Bluetooth: hci3: command tx timeout [ 156.149538] Bluetooth: hci6: command tx timeout [ 156.150654] Bluetooth: hci4: command tx timeout [ 156.151182] Bluetooth: hci5: command tx timeout [ 156.405304] Bluetooth: hci7: command tx timeout [ 158.006414] Bluetooth: hci0: command tx timeout [ 158.069503] Bluetooth: hci1: command tx timeout [ 158.070682] Bluetooth: hci2: command tx timeout [ 158.134285] Bluetooth: hci3: command tx timeout [ 158.197774] Bluetooth: hci5: command tx timeout [ 158.198765] Bluetooth: hci4: command tx timeout [ 158.198817] Bluetooth: hci6: command tx timeout [ 158.453290] Bluetooth: hci7: command tx timeout [ 160.053307] Bluetooth: hci0: command tx timeout [ 160.117304] Bluetooth: hci2: command tx timeout [ 160.117451] Bluetooth: hci1: command tx timeout [ 160.181280] Bluetooth: hci3: command tx timeout [ 160.245622] Bluetooth: hci5: command tx timeout [ 160.246724] Bluetooth: hci4: command tx timeout [ 160.247161] Bluetooth: hci6: command tx timeout [ 160.502360] Bluetooth: hci7: command tx timeout [ 213.717300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.718856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.720750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.727277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.729737] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.734352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.837752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.841493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.844955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.850984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.854642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.858526] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.894927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.904440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.908309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.909267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.914494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.915854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.921694] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.921827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.925461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.945348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.950371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.954687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.098476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.102480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.146989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.151360] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.157326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.162391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.172721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.182871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.186352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.202510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.217226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.260456] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.262407] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.277608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.283063] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.286308] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.287255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.291269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.292475] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.337458] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.362331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.386672] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.403897] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.408409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.797845] Bluetooth: hci0: command tx timeout [ 215.927361] Bluetooth: hci1: command tx timeout [ 215.990987] Bluetooth: hci2: command tx timeout [ 216.054289] Bluetooth: hci3: command tx timeout [ 216.245179] Bluetooth: hci4: command tx timeout [ 216.373550] Bluetooth: hci6: command tx timeout [ 216.374604] Bluetooth: hci5: command tx timeout [ 216.566220] Bluetooth: hci7: command tx timeout [ 217.846232] Bluetooth: hci0: command tx timeout [ 217.974223] Bluetooth: hci1: command tx timeout [ 218.037205] Bluetooth: hci2: command tx timeout [ 218.101161] Bluetooth: hci3: command tx timeout [ 218.293694] Bluetooth: hci4: command tx timeout [ 218.422206] Bluetooth: hci6: command tx timeout [ 218.422658] Bluetooth: hci5: command tx timeout [ 218.614216] Bluetooth: hci7: command tx timeout [ 219.893232] Bluetooth: hci0: command tx timeout [ 220.021349] Bluetooth: hci1: command tx timeout [ 220.085558] Bluetooth: hci2: command tx timeout [ 220.151526] Bluetooth: hci3: command tx timeout [ 220.341228] Bluetooth: hci4: command tx timeout [ 220.469265] Bluetooth: hci5: command tx timeout [ 220.470259] Bluetooth: hci6: command tx timeout [ 220.661875] Bluetooth: hci7: command tx timeout [ 221.942163] Bluetooth: hci0: command tx timeout [ 222.070756] Bluetooth: hci1: command tx timeout [ 222.133301] Bluetooth: hci2: command tx timeout [ 222.197249] Bluetooth: hci3: command tx timeout [ 222.390179] Bluetooth: hci4: command tx timeout [ 222.517194] Bluetooth: hci5: command tx timeout [ 222.517678] Bluetooth: hci6: command tx timeout [ 222.710201] Bluetooth: hci7: command tx timeout [ 274.139855] [ 274.140088] ====================================================== [ 274.140570] WARNING: possible circular locking dependency detected [ 274.141089] 6.13.0-next-20250124 #1 Not tainted [ 274.141461] ------------------------------------------------------ [ 274.141938] kworker/u8:0/11 is trying to acquire lock: [ 274.145800] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.146649] [ 274.146649] but task is already holding lock: [ 274.147107] ffff888023e80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 274.147921] [ 274.147921] which lock already depends on the new lock. [ 274.147921] [ 274.148580] [ 274.148580] the existing dependency chain (in reverse order) is: [ 274.149200] [ 274.149200] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 274.149779] __mutex_lock+0x13d/0xb50 [ 274.150185] wiphy_register+0x1b2e/0x25d0 [ 274.150600] ieee80211_register_hw+0x23a4/0x3d60 [ 274.151045] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 274.151508] init_mac80211_hwsim+0x389/0x870 [ 274.151938] do_one_initcall+0xf9/0x640 [ 274.152336] kernel_init_freeable+0x53d/0x7a0 [ 274.152774] kernel_init+0x1e/0x2d0 [ 274.153121] ret_from_fork+0x48/0x80 [ 274.153475] ret_from_fork_asm+0x1a/0x30 [ 274.153878] [ 274.153878] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 274.154420] __lock_acquire+0x29fd/0x4580 [ 274.154859] lock_acquire+0x19b/0x520 [ 274.155257] __mutex_lock+0x13d/0xb50 [ 274.155664] unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.156216] unregister_netdevice_queue+0x224/0x2e0 [ 274.156706] _cfg80211_unregister_wdev+0x57b/0x700 [ 274.157200] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 274.157691] ieee80211_unregister_hw+0x55/0x3a0 [ 274.158156] hwsim_exit_net+0x3a0/0x730 [ 274.158575] ops_exit_list+0xb3/0x180 [ 274.158981] cleanup_net+0x546/0xad0 [ 274.159380] process_one_work+0x8ee/0x1a10 [ 274.159831] worker_thread+0x674/0xe70 [ 274.160246] kthread+0x3ab/0x720 [ 274.160615] ret_from_fork+0x48/0x80 [ 274.160991] ret_from_fork_asm+0x1a/0x30 [ 274.161416] [ 274.161416] other info that might help us debug this: [ 274.161416] [ 274.162047] Possible unsafe locking scenario: [ 274.162047] [ 274.162543] CPU0 CPU1 [ 274.162932] ---- ---- [ 274.163322] lock(&rdev->wiphy.mtx); [ 274.163666] lock(rtnl_mutex); [ 274.164161] lock(&rdev->wiphy.mtx); [ 274.164699] lock(rtnl_mutex); [ 274.164999] [ 274.164999] *** DEADLOCK *** [ 274.164999] [ 274.165615] 4 locks held by kworker/u8:0/11: [ 274.166088] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 274.167037] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 274.167841] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 274.168592] #3: ffff888023e80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 274.169508] [ 274.169508] stack backtrace: [ 274.169878] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 274.169915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 274.169938] Workqueue: netns cleanup_net [ 274.169979] Call Trace: [ 274.169988] [ 274.170000] dump_stack_lvl+0xca/0x120 [ 274.170058] print_circular_bug+0x47b/0x750 [ 274.170105] check_noncircular+0x2e9/0x3c0 [ 274.170145] ? srso_return_thunk+0x5/0x5f [ 274.170202] ? __pfx_check_noncircular+0x10/0x10 [ 274.170244] ? hlock_class+0x4e/0x130 [ 274.170274] ? mark_lock+0xac/0xed0 [ 274.170314] ? srso_return_thunk+0x5/0x5f [ 274.170369] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 274.170415] ? lockdep_lock+0xba/0x1b0 [ 274.170482] ? __pfx_lockdep_lock+0x10/0x10 [ 274.170544] __lock_acquire+0x29fd/0x4580 [ 274.170598] ? __pfx___lock_acquire+0x10/0x10 [ 274.170641] ? lock_release+0x20f/0x6f0 [ 274.170685] ? __pfx_lock_release+0x10/0x10 [ 274.170733] lock_acquire+0x19b/0x520 [ 274.170776] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.170825] ? __pfx_lock_acquire+0x10/0x10 [ 274.170870] ? srso_return_thunk+0x5/0x5f [ 274.170925] ? lock_release+0x20f/0x6f0 [ 274.170969] ? srso_return_thunk+0x5/0x5f [ 274.171024] ? lock_is_held_type+0x9e/0x120 [ 274.171079] ? srso_return_thunk+0x5/0x5f [ 274.171138] __mutex_lock+0x13d/0xb50 [ 274.171190] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.171235] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.171281] ? srso_return_thunk+0x5/0x5f [ 274.171336] ? synchronize_rcu_expedited+0x38a/0x420 [ 274.171381] ? __pfx___mutex_lock+0x10/0x10 [ 274.171435] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.171489] ? srso_return_thunk+0x5/0x5f [ 274.171544] ? kasan_quarantine_put+0x84/0x1e0 [ 274.171605] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 274.171640] ? srso_return_thunk+0x5/0x5f [ 274.171700] unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.171745] ? __virt_addr_valid+0x2e8/0x5d0 [ 274.171798] ? __pfx_lock_release+0x10/0x10 [ 274.171843] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 274.171889] ? find_held_lock+0x2c/0x110 [ 274.171947] ? srso_return_thunk+0x5/0x5f [ 274.172004] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 274.172065] ? srso_return_thunk+0x5/0x5f [ 274.172120] ? lock_release+0x20f/0x6f0 [ 274.172165] ? __pfx_lock_release+0x10/0x10 [ 274.172208] ? srso_return_thunk+0x5/0x5f [ 274.172263] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.172310] ? srso_return_thunk+0x5/0x5f [ 274.172371] unregister_netdevice_queue+0x224/0x2e0 [ 274.172414] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 274.172457] ? up_write+0x195/0x520 [ 274.172512] _cfg80211_unregister_wdev+0x57b/0x700 [ 274.172564] ? srso_return_thunk+0x5/0x5f [ 274.172623] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 274.172662] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 274.172700] ? srso_return_thunk+0x5/0x5f [ 274.172755] ? srso_return_thunk+0x5/0x5f [ 274.172810] ? synchronize_rcu+0x1ff/0x260 [ 274.172853] ieee80211_unregister_hw+0x55/0x3a0 [ 274.172916] hwsim_exit_net+0x3a0/0x730 [ 274.172958] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.173005] ? srso_return_thunk+0x5/0x5f [ 274.173060] ? netdev_run_todo+0x788/0x1040 [ 274.173110] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.173153] ops_exit_list+0xb3/0x180 [ 274.173195] cleanup_net+0x546/0xad0 [ 274.173240] ? __pfx_cleanup_net+0x10/0x10 [ 274.173293] process_one_work+0x8ee/0x1a10 [ 274.173359] ? __pfx_lock_acquire+0x10/0x10 [ 274.173403] ? __pfx_process_one_work+0x10/0x10 [ 274.173462] ? srso_return_thunk+0x5/0x5f [ 274.173517] ? move_linked_works+0x172/0x270 [ 274.173562] ? srso_return_thunk+0x5/0x5f [ 274.173616] ? assign_work+0x196/0x240 [ 274.173674] worker_thread+0x674/0xe70 [ 274.173732] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.173784] ? __pfx_worker_thread+0x10/0x10 [ 274.173844] kthread+0x3ab/0x720 [ 274.173896] ? __pfx_kthread+0x10/0x10 [ 274.173947] ? srso_return_thunk+0x5/0x5f [ 274.174002] ? finish_task_switch.isra.0+0x206/0x840 [ 274.174054] ? __pfx_kthread+0x10/0x10 [ 274.174108] ret_from_fork+0x48/0x80 [ 274.174139] ? __pfx_kthread+0x10/0x10 [ 274.174192] ret_from_fork_asm+0x1a/0x30 [ 274.174258] [ 275.850354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.861374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.863522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.870634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.873466] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.875748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.914892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.918382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.922317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.926381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.929772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.932235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.038428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.041824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.046854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.051999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.056269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.058050] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.162743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.170879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.177647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.184323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.185029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.192007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.200313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.207388] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.209170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.213293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.216474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.219491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.233552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.237459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.238881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.240754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.243637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.244795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.249419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.251479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.253920] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.257219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.266884] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.269608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.453987] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.459755] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.495352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.552206] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.560553] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.569552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.941453] Bluetooth: hci1: command tx timeout [ 277.942396] Bluetooth: hci0: command tx timeout [ 278.133236] Bluetooth: hci2: command tx timeout [ 278.325459] Bluetooth: hci4: command tx timeout [ 278.326234] Bluetooth: hci5: command tx timeout [ 278.326287] Bluetooth: hci3: command tx timeout [ 278.453201] Bluetooth: hci6: command tx timeout [ 278.646336] Bluetooth: hci7: command tx timeout [ 279.989234] Bluetooth: hci0: command tx timeout [ 279.990331] Bluetooth: hci1: command tx timeout [ 280.181199] Bluetooth: hci2: command tx timeout [ 280.373191] Bluetooth: hci4: command tx timeout [ 280.374784] Bluetooth: hci3: command tx timeout [ 280.375228] Bluetooth: hci5: command tx timeout [ 280.501206] Bluetooth: hci6: command tx timeout [ 280.693132] Bluetooth: hci7: command tx timeout [ 282.038202] Bluetooth: hci1: command tx timeout [ 282.038689] Bluetooth: hci0: command tx timeout [ 282.229188] Bluetooth: hci2: command tx timeout [ 282.422127] Bluetooth: hci3: command tx timeout [ 282.422580] Bluetooth: hci5: command tx timeout [ 282.422990] Bluetooth: hci4: command tx timeout [ 282.549243] Bluetooth: hci6: command tx timeout [ 282.741213] Bluetooth: hci7: command tx timeout [ 284.085280] Bluetooth: hci1: command tx timeout [ 284.086063] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 18:54:13 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095decc8 R8 =0000000000000000 R9 =ffffed1001d93046 R10=00000000000fe503 R11=2f72656b726f776b R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d2e66 R15=dffffc0000000000 RIP=ffffffff8283f125 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f983a9e3588 CR3=000000000ead6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6fa7f9ef6af1f5883d43a36d89a1465f XMM02=00000000000fe908a3797342f9eb3dd9 XMM03=00000000001313b868a8aee3740b9fad XMM04=4ea5fa7a0f963b3100000000000ae988 XMM05=92131ea6c061e6d60000000000147718 XMM06=9f165a4fe6c971ad0000000000137ba0 XMM07=711fbe8126c5d3440000000000137a98 XMM08=68a8aee3740b9fad00000000000fea28 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888011fbcc68 RCX=ffffffff81429a4a RDX=1ffff11001e66280 RSI=0000000000000008 RDI=ffff88800f331400 RBP=0000000000040257 RSP=ffff88800f5dfdd0 R8 =0000000000000000 R9 =ffffed1001e66280 R10=ffff88800f331407 R11=0000000000000001 R12=ffff888011fbcc69 R13=ffff888011fc2940 R14=ffff88800acc5340 R15=0000000000000082 RIP=ffffffff81aefb34 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562e1e13c1e8 CR3=000000000bff0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffffffffffffffffffffff XMM03=742d626f6a0064656465656363757320 XMM04=0000562e1e11e7700000562e1e184e10 XMM05=00000002000000050000562e1e1afa20 XMM06=697665640030006563697665642e3669 XMM07=00000000000000000000000000000000 XMM08=00000000003638323032646161383334 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000