Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:5492' (ECDSA) to the list of known hosts. 2025/01/28 07:49:38 fuzzer started 2025/01/28 07:49:38 dialing manager at localhost:40883 syzkaller login: [ 61.650532] cgroup: Unknown subsys name 'net' [ 61.745664] cgroup: Unknown subsys name 'cpuset' [ 61.773703] cgroup: Unknown subsys name 'rlimit' [ 66.773483] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 07:49:54 syscalls: 2217 2025/01/28 07:49:54 code coverage: enabled 2025/01/28 07:49:54 comparison tracing: enabled 2025/01/28 07:49:54 extra coverage: enabled 2025/01/28 07:49:54 setuid sandbox: enabled 2025/01/28 07:49:54 namespace sandbox: enabled 2025/01/28 07:49:54 Android sandbox: enabled 2025/01/28 07:49:54 fault injection: enabled 2025/01/28 07:49:54 leak checking: enabled 2025/01/28 07:49:54 net packet injection: enabled 2025/01/28 07:49:54 net device setup: enabled 2025/01/28 07:49:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 07:49:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 07:49:54 USB emulation: enabled 2025/01/28 07:49:54 hci packet injection: enabled 2025/01/28 07:49:54 wifi device emulation: enabled 2025/01/28 07:49:54 802.15.4 emulation: enabled 2025/01/28 07:49:54 fetching corpus: 50, signal 14054/15518 (executing program) 2025/01/28 07:49:54 fetching corpus: 100, signal 17264/19976 (executing program) 2025/01/28 07:49:54 fetching corpus: 150, signal 19966/23723 (executing program) 2025/01/28 07:49:55 fetching corpus: 200, signal 22426/27067 (executing program) 2025/01/28 07:49:55 fetching corpus: 250, signal 23581/29163 (executing program) 2025/01/28 07:49:55 fetching corpus: 300, signal 24647/31121 (executing program) 2025/01/28 07:49:55 fetching corpus: 350, signal 25179/32546 (executing program) 2025/01/28 07:49:55 fetching corpus: 400, signal 26011/34117 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/35207 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/36195 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/37264 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/38269 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/39306 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/40326 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/41341 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/42357 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/43364 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/44365 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/45404 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/46432 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/47471 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/48512 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/49534 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/50583 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/51601 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/52631 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/53238 (executing program) 2025/01/28 07:49:55 fetching corpus: 403, signal 26026/53238 (executing program) 2025/01/28 07:49:59 starting 8 fuzzer processes 07:49:59 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) recvfrom(r1, &(0x7f00000000c0)=""/52, 0x34, 0x40000062, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) getpeername$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) getpeername$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc041) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008014}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x4000) setxattr$incfs_size(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)=0x3ff, 0x8, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={r1, 0x9, 0x7, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000005b40)={@dev, @empty, 0x0}, &(0x7f0000005b80)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000005bc0)={@loopback, 0xf, r4}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x28, 0x3f7, 0x4, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240400c4}, 0x50) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000005d00), 0x0, 0x0) recvfrom(r5, &(0x7f0000005d40)=""/224, 0xe0, 0x2000, &(0x7f0000005e40)=@phonet={0x23, 0x3f, 0x4}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000005ec0)='net/anycast6\x00') sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000005fc0)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f40)={0x10, 0x464, 0x4, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc840}, 0x4000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) 07:49:59 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x587002, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x16}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x43}, 0x4040090) getpeername$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=0x83) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r5, 0x208, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x844911d3966b73e3) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r9, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x800) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0xb1, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) 07:49:59 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7fffffff, 0x100000000}) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20048804}, 0x4000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4fb2cb7c27d2b5ffb3506d4cc18a169a4fb02bb515c6a7f513"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x82, 0x3, "99f03816591c59948a7a9a6862af235ac02e7d8559a6bfb6f1ad8f538a05c189dc03a0f92507844766b78df1a71e0b505c36042b9f0618a5eb2e7d3d792d1afe1e4ec04cd0778b8df2c8797878dd40ae9d7b16a671bb17290e6822841faf8087ebef8a921cd3bfceb5de777e0ef3c9cbca4ba1948d0a94ee3229a56704ba"}, @TIPC_NLA_NODE_ID={0x77, 0x3, "e2804dfff2f23ba0bde5478e5805504735a260005ba9145a64b02c390122fc83efb7d9b66f8599edba916efc03bb2383710505766bbef437e90d11608eb8a3001d946edbe2ac07a1845e88e6416e3a35819d1240e5dbea2195ec74e0dcf2c14bc65d5d2c80b2a3329b136eea15b543c5fb92d7"}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ddd1c95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x8811}, 0x92) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000500)={{r0}, "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"}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80000000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3ff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) recvmmsg$unix(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000001740)=""/114, 0x72}], 0x2, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000018c0)=""/117, 0x75}, {&(0x7f0000001940)=""/170, 0xaa}], 0x2, &(0x7f0000001a40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001b40)=""/208, 0xd0}, {&(0x7f0000001c40)=""/131, 0x83}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/151, 0x97}, {&(0x7f0000002dc0)=""/171, 0xab}], 0x5}}, {{&(0x7f0000002f00), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002f80)=""/61, 0x3d}], 0x1, &(0x7f0000003000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000030c0), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000003140)=""/80, 0x50}], 0x1, &(0x7f0000003200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003340)=""/229, 0xe5}, {&(0x7f0000003440)=""/234, 0xea}, {&(0x7f0000003540)=""/174, 0xae}], 0x3, &(0x7f0000003640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x100, &(0x7f0000003840)) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x78, 0x0, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003a80)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003ac0)='/sys/module/pata_oldpiix', 0x200, 0x20) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x50, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000001) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003d00)={0x4, &(0x7f0000003cc0)=[{0x401, 0x51, 0x1, 0x8}, {0x9, 0x7, 0x40, 0x7}, {0x0, 0x6, 0xc6, 0x10000}, {0x8, 0x7, 0x4, 0x3}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003d40)={&(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003c40)="0569453aeaea5961922a6ccc208280c85da3c98b38d7ff86bb7998de22732d16143c7b17f4db55bdcc8210e6a8127a4167c11ef9354f3ef64c3250545c78df152cbf2fc5603c0bcf679c448f02ac7f9eb476940f1f8fa56abe4eb0551b2fe44af7d280815db0", 0x66, r9}, 0x68) ioctl(r5, 0x0, &(0x7f0000003dc0)="0368317bf544594591da4960078deeee60366ab76396fd4c0fd6ffb79f0053b6cb183deb205814e57db3fefb582de72147a4411174ee569b6c881d94c2f0162ae5876d3a3f9590afa69f4032a30252c78a1c8d26267b49195959b06260c7057a0b182089bdc495ef601b48d178d7e7008512624cdbf428c2c5cb475ddc980003158a7016a70243afa3f3e860bd7d49") r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ec0), 0xffffffffffffffff) [ 81.612059] audit: type=1400 audit(1738050599.118:7): avc: denied { execmem } for pid=279 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x1c, r10, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003fc0), 0x44840, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000004000)={{0x1, 0x1, 0x18, r3, {0x401, 0x5}}, './file0\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000004140)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004100)={&(0x7f0000004080)={0x6c, r10, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18000000, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44841}, 0x40000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004240)={&(0x7f00000041c0)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x24002805) 07:49:59 executing program 3: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f90}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xa000) sendfile(r0, r0, 0x0, 0x3) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4801) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3f}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x200480d0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000b40)=""/81, &(0x7f0000000bc0)=0x51) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x18, 0x3f9, 0x10, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20048004}, 0x40000) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x1, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c1}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0f9db167c9de37613912d8bd0b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) mknodat$loop(r0, &(0x7f0000001040)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x178, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 07:49:59 executing program 4: sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ec, 0x0, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4c}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99ee}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaa000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x48c49d6a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5310}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2dbd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x1ec}}, 0x44) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r1, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000600)={r0, 0x5, 0x8, 0x8}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4000000, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7bc7ba52a96f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5720f5b218b0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040004}, 0x4008090) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000980)={&(0x7f0000000780), 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x120, r4, 0x300, 0x3f, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2c44da66}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffffff00}, {0x6, 0x11, 0xfff}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000009c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000a00)='p', 0x1}, {&(0x7f0000000a40)="a1f97beb6355fbb9d386e4447fe266c5a07abf115c089e8e361bef25383acb14eaf9cb79296cc9d5eafccb174da9395d70901cb80441efa2bc7e6e85b2efc38ad80cf8d3d5c2c08597a6320ab1ada963c1d3703c0df33fdcf0f2e3ff46b41f4e757b0d3806f1112f763746cf6dc5de930487bfad76cea00289146eef1ca258d623f70f98673ae3530e2b891055cf971565007b4190a9fe314b5f238fce16141ab82aeeac86c1a97186a5c860cb33741b0463461285147c1098450d616ae47a09363971d5d969cb3d7b", 0xc9}, {&(0x7f0000000b40)="122c9776f83b3a1ce3b614012aa766e2bb1663d70ad3361fe33c5fa062e58207476f0fbfeeae95f117620ee80ce7cd18cfa29af3b9099761a9cb0eee4821f92baae02ed221b6aff18fd15cada4ed2afe9b9fd818dd51d9cc1eb163833be2a42cde314c0eef63c03fcdf931cd742b5a470079743d70daf31e665a9b236007a7ee3ac60f67e1d9f5c4038b1499dafaf91c354164622bf1034e111fff0bc0edb273fed1af0c1b6fecb47c2ee755b62f539e7013483098e06f2f2caebcf8e57e22dc3dfec9f57bff16194be97951b2", 0xcd}, {&(0x7f0000000c40)="f1dffcec5b31e1a0cdfbb65e3e0c8b65337008b2e5a97fd8fc65fc9169efc38c765a446407dd7516ce4feae4c65fb958181a2d206dfc5a03269015ce069a106239c6570007d05f8780159cb116dd9ee3f13e98dd12c6e2b4ccdf58ae", 0x5c}], 0x4, &(0x7f0000000d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2f202c90}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x6a, [@remote]}, @ssrr={0x89, 0xb, 0xf0, [@loopback, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x2, 0x6, "f0f04184"}, {0x1, 0x7, "f5623a0817"}, {0x2, 0xc, "581afe44e81fbf3f78ff"}, {0x5, 0xb, "57b0ae3627af12ebad"}, {0x5, 0xd, "d1518247a048a971b8c0b5"}, {0x886d5573ed261a8c, 0xd, "775404d4cc0089a10274d3"}, {0x6, 0x7, "14a30a9a42"}, {0x5, 0x10, "d8a751210bd21a52be7e2df2e286"}]}]}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x73, 0x0, 0x6, [0x3, 0x20, 0x8, 0x9, 0x8000, 0x6, 0x1000, 0x5, 0x6]}, @generic={0x94, 0xf, "767650de53fe83bb6811cf12e4"}, @timestamp_addr={0x44, 0x4c, 0xd0, 0x1, 0x8, [{@remote, 0x446}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@private=0xa010100, 0x9bba}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x6}, 0xb1ac}, {@multicast2, 0x1f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp={0x44, 0x24, 0x2b, 0x0, 0x2, [0x34, 0x5, 0x5, 0x9, 0x3, 0xffff, 0x1, 0xfffffffb]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x1f0}, 0x4000001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x74, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_PMKID={0x14, 0x55, "abd832c1a84c35140b23aaef51c3b7d3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9a1d27586c121329768c47cbcfa1f71e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "69456a999c7a8d5a5c8f9be89379f1c0"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000013c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x1d8, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x850}, 0x4040081) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r3) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x74, r9, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0xf, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x10) 07:49:59 executing program 5: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x5}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x8b6e, 0x9) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000500)={0xf3, 0x13, &(0x7f0000000100)}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000540)=""/71) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000600)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000640)={0x1, 0x1, 0x9}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000006c0)={0x6, 0x40}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) fchmod(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDADDIO(r4, 0x4b34, 0x8001) r5 = fcntl$dupfd(r4, 0x406, r0) recvmmsg$unix(r5, &(0x7f0000000a40)=[{{&(0x7f0000000740), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/115, 0x73}, {&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000980)=""/85, 0x55}], 0x4}}], 0x1, 0x40000061, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000a80)={0x0, 0x1f, 0x0, [0xc98c, 0xffff, 0x1, 0x2, 0x2], [0xfffffffffffffff8, 0x6, 0x1c0, 0xfffffffffffffffe, 0x7, 0xf98, 0x0, 0x1, 0x100000000, 0x8, 0xfffffffffffffff7, 0xffffffffffffff70, 0x3, 0x7ff, 0xd2c8, 0x8, 0x1, 0x4, 0x7ff, 0x9, 0x401, 0x9, 0x20, 0x7ff, 0x9, 0x8, 0x9, 0x2, 0x7, 0x7ff, 0x1, 0x2, 0xca, 0x7, 0x4, 0xd50, 0xfffffffffffffff8, 0x6, 0x0, 0x7fffffff, 0xff, 0x1, 0x10001, 0x4, 0x2, 0x100000001, 0x3f, 0x4, 0x1f, 0x461, 0x90, 0x6, 0x3, 0x7, 0x9, 0x6346575b, 0x401, 0x9, 0x20a, 0x40, 0x0, 0x40, 0x3f, 0x9, 0xa2, 0x1, 0x6, 0x2e, 0x7, 0x18, 0xeb5, 0x8, 0x69, 0x8, 0x9, 0x8, 0xffffffffffffffbb, 0x400, 0x0, 0x7fffffff, 0x9, 0x4, 0xef8, 0x6, 0x4, 0x2, 0xbe0c, 0x9, 0x9, 0x0, 0x2, 0x4, 0x100000001, 0xdbbf, 0x7fffffff, 0x1ff, 0xc35, 0x8001, 0x0, 0x5, 0xa0, 0x46b3, 0x8, 0x7, 0x8, 0xd1b7, 0x8, 0x0, 0x8, 0xb906, 0x4, 0x200, 0x6, 0x101, 0xe5cc, 0x3, 0x3ebd, 0x0, 0x0, 0xffffffffffffff80, 0xb2b0]}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000ec0)={0x3ff, 0xec, 0xff, 0x0, 0x1, "e86799e9bb26c98a"}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000f00)=0x4, 0x4) 07:49:59 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/159) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) open_by_handle_at(r1, &(0x7f00000001c0)=@reiserfs_3={0xc, 0x3, {0x6, 0x101}}, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x258, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x83, 0x39}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xffffffff}]}, @NL80211_ATTR_USE_RRM={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x24, 0x115, "f29977583479e4c62b86ececbaffb31eb719f85d9f474d8b468bf42ae96ad865"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x48, 0x115, "9c0ff0e888042d75f9920feb8981faa4c5710a6523379cecf831f46f2f14be17f1720aa4da783b54cee31650ccda02e039b8b874873e66095f0f318d8e5ba833721086bd"}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac02, 0xfac06, 0xfac0d, 0xfac0a, 0xfac0a]}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x2, 0x0, {0x6, 0x1f7f, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x1, 0x7ff, 0x2}}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac09, 0xfac0b, 0xfac08, 0xfac04, 0xfac0a, 0xfac12, 0xfac07]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x840) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r4 = openat$cgroup_ro(r0, &(0x7f0000000640)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0xa02, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44845}, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r5, &(0x7f0000000780)=""/220, 0xdc, 0x72) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000008c0)) r8 = dup3(r6, r5, 0x80000) ioctl$BLKIOOPT(r8, 0x1279, &(0x7f0000000900)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='net/igmp\x00') ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000980)) 07:49:59 executing program 7: prctl$PR_PAC_RESET_KEYS(0x36, 0x1b) prctl$PR_PAC_RESET_KEYS(0x36, 0x5) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) prctl$PR_PAC_RESET_KEYS(0x36, 0x13) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x1b) prctl$PR_PAC_RESET_KEYS(0x36, 0xf) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x12) prctl$PR_PAC_RESET_KEYS(0x36, 0x6) prctl$PR_PAC_RESET_KEYS(0x36, 0x39856be0014c8a51) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x11) prctl$PR_PAC_RESET_KEYS(0x36, 0x1c) prctl$PR_PAC_RESET_KEYS(0x36, 0xe) [ 83.190575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.197890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.203618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.210900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.216313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.219396] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.221566] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.223992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.229705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.231190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.235708] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.239844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.253802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.258679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.261358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.280972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.285847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.303722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.305551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.320815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.323001] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.325388] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.327477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.329623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.331681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.333430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.337955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.349090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.352530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.354280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.356080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.361693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.361786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.364591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.366613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.368889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.371781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.372120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.378377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.384712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.387829] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.388230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.390969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.393688] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.395536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.402711] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.418453] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.447427] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.337800] Bluetooth: hci1: command tx timeout [ 85.337814] Bluetooth: hci0: command tx timeout [ 85.402045] Bluetooth: hci5: command tx timeout [ 85.402069] Bluetooth: hci2: command tx timeout [ 85.466311] Bluetooth: hci6: command tx timeout [ 85.466390] Bluetooth: hci7: command tx timeout [ 85.467594] Bluetooth: hci3: command tx timeout [ 85.529387] Bluetooth: hci4: command tx timeout [ 87.385389] Bluetooth: hci1: command tx timeout [ 87.386451] Bluetooth: hci0: command tx timeout [ 87.449233] Bluetooth: hci2: command tx timeout [ 87.450550] Bluetooth: hci5: command tx timeout [ 87.513258] Bluetooth: hci7: command tx timeout [ 87.513416] Bluetooth: hci6: command tx timeout [ 87.514350] Bluetooth: hci3: command tx timeout [ 87.580183] Bluetooth: hci4: command tx timeout [ 89.434235] Bluetooth: hci0: command tx timeout [ 89.434252] Bluetooth: hci1: command tx timeout [ 89.498396] Bluetooth: hci5: command tx timeout [ 89.498427] Bluetooth: hci2: command tx timeout [ 89.561234] Bluetooth: hci6: command tx timeout [ 89.561318] Bluetooth: hci3: command tx timeout [ 89.561703] Bluetooth: hci7: command tx timeout [ 89.625228] Bluetooth: hci4: command tx timeout [ 91.482212] Bluetooth: hci0: command tx timeout [ 91.482693] Bluetooth: hci1: command tx timeout [ 91.545313] Bluetooth: hci5: command tx timeout [ 91.545768] Bluetooth: hci2: command tx timeout [ 91.609232] Bluetooth: hci6: command tx timeout [ 91.609681] Bluetooth: hci7: command tx timeout [ 91.610184] Bluetooth: hci3: command tx timeout [ 91.673197] Bluetooth: hci4: command tx timeout [ 145.318638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.324037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.326337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.330069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.332807] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.335990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.379321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.381001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.398388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.401611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.408501] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.409969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.445684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.447544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.449000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.454744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.460385] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.461884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.472034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.474473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.477410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.488235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.498064] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.501531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.503028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.504009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.512435] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.528343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.530435] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.536539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.539670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.539820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.541767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.548563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.549703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.566463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.568299] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.570208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.573923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.580229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.580923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.583265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.591364] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.592039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.596099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.613245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.614466] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.617657] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.353222] Bluetooth: hci0: command tx timeout [ 147.481262] Bluetooth: hci2: command tx timeout [ 147.481870] Bluetooth: hci1: command tx timeout [ 147.545205] Bluetooth: hci3: command tx timeout [ 147.609309] Bluetooth: hci4: command tx timeout [ 147.673207] Bluetooth: hci6: command tx timeout [ 147.673763] Bluetooth: hci7: command tx timeout [ 147.737234] Bluetooth: hci5: command tx timeout [ 149.401255] Bluetooth: hci0: command tx timeout [ 149.529238] Bluetooth: hci1: command tx timeout [ 149.529681] Bluetooth: hci2: command tx timeout [ 149.593180] Bluetooth: hci3: command tx timeout [ 149.657903] Bluetooth: hci4: command tx timeout [ 149.721275] Bluetooth: hci7: command tx timeout [ 149.721714] Bluetooth: hci6: command tx timeout [ 149.785339] Bluetooth: hci5: command tx timeout [ 151.449318] Bluetooth: hci0: command tx timeout [ 151.578187] Bluetooth: hci2: command tx timeout [ 151.578647] Bluetooth: hci1: command tx timeout [ 151.641314] Bluetooth: hci3: command tx timeout [ 151.705624] Bluetooth: hci4: command tx timeout [ 151.769223] Bluetooth: hci6: command tx timeout [ 151.769671] Bluetooth: hci7: command tx timeout [ 151.833423] Bluetooth: hci5: command tx timeout [ 153.497209] Bluetooth: hci0: command tx timeout [ 153.625205] Bluetooth: hci1: command tx timeout [ 153.625643] Bluetooth: hci2: command tx timeout [ 153.689695] Bluetooth: hci3: command tx timeout [ 153.753323] Bluetooth: hci4: command tx timeout [ 153.817267] Bluetooth: hci6: command tx timeout [ 153.817700] Bluetooth: hci7: command tx timeout [ 153.882147] Bluetooth: hci5: command tx timeout [ 201.476375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.477052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.736757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.738537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.506300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.506924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.768281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.768935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.035875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.036589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:52:00 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000000)={0x0, 0xb}, 0x20) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 07:52:00 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) accept$unix(r5, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) [ 203.265754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.266794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:52:01 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) accept$unix(r5, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) [ 203.522242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.522881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.731949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.732984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:52:01 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) accept$unix(r5, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) [ 203.932745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.933445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:52:01 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) accept$unix(r5, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) 07:52:01 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) [ 204.245395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.246051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:52:01 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) 07:52:02 executing program 2: pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) timerfd_gettime(r0, &(0x7f00000014c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xaf48]}, 0x8, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40) syz_io_uring_setup(0x346e, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 204.651288] [ 204.651512] ====================================================== [ 204.652022] WARNING: possible circular locking dependency detected [ 204.652540] 6.13.0-next-20250124 #1 Not tainted [ 204.652937] ------------------------------------------------------ [ 204.653448] kworker/u8:0/11 is trying to acquire lock: [ 204.654748] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.656853] [ 204.656853] but task is already holding lock: [ 204.658533] ffff88803b018768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 204.660513] [ 204.660513] which lock already depends on the new lock. [ 204.660513] [ 204.661704] [ 204.661704] the existing dependency chain (in reverse order) is: [ 204.662309] [ 204.662309] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 204.662854] __mutex_lock+0x13d/0xb50 [ 204.663236] wiphy_register+0x1b2e/0x25d0 [ 204.663641] ieee80211_register_hw+0x23a4/0x3d60 [ 204.664081] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 204.664544] init_mac80211_hwsim+0x389/0x870 [ 204.664974] do_one_initcall+0xf9/0x640 [ 204.665372] kernel_init_freeable+0x53d/0x7a0 [ 204.665813] kernel_init+0x1e/0x2d0 [ 204.666162] ret_from_fork+0x48/0x80 [ 204.666515] ret_from_fork_asm+0x1a/0x30 [ 204.666919] [ 204.666919] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 204.667434] __lock_acquire+0x29fd/0x4580 [ 204.667853] lock_acquire+0x19b/0x520 [ 204.668240] __mutex_lock+0x13d/0xb50 [ 204.668637] unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.669169] unregister_netdevice_queue+0x224/0x2e0 [ 204.669648] _cfg80211_unregister_wdev+0x57b/0x700 [ 204.670140] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 204.670617] ieee80211_unregister_hw+0x55/0x3a0 [ 204.671068] hwsim_exit_net+0x3a0/0x730 [ 204.671469] ops_exit_list+0xb3/0x180 [ 204.671854] cleanup_net+0x546/0xad0 [ 204.672234] process_one_work+0x8ee/0x1a10 [ 204.672673] worker_thread+0x674/0xe70 [ 204.673084] kthread+0x3ab/0x720 [ 204.673449] ret_from_fork+0x48/0x80 [ 204.673829] ret_from_fork_asm+0x1a/0x30 [ 204.674262] [ 204.674262] other info that might help us debug this: [ 204.674262] [ 204.674887] Possible unsafe locking scenario: [ 204.674887] [ 204.675380] CPU0 CPU1 [ 204.675753] ---- ---- [ 204.676117] lock(&rdev->wiphy.mtx); [ 204.676442] lock(rtnl_mutex); [ 204.676909] lock(&rdev->wiphy.mtx); [ 204.677412] lock(rtnl_mutex); [ 204.677715] [ 204.677715] *** DEADLOCK *** [ 204.677715] [ 204.678194] 4 locks held by kworker/u8:0/11: [ 204.678552] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 204.679377] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 204.680171] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 204.680916] #3: ffff88803b018768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 204.681756] [ 204.681756] stack backtrace: [ 204.682109] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 204.682146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 204.682168] Workqueue: netns cleanup_net [ 204.682209] Call Trace: [ 204.682218] [ 204.682230] dump_stack_lvl+0xca/0x120 [ 204.682287] print_circular_bug+0x47b/0x750 [ 204.682333] check_noncircular+0x2e9/0x3c0 [ 204.682375] ? __pfx_check_noncircular+0x10/0x10 [ 204.682419] ? srso_return_thunk+0x5/0x5f [ 204.682475] ? find_held_lock+0x2c/0x110 [ 204.682534] ? lockdep_lock+0xba/0x1b0 [ 204.682591] ? __pfx_lockdep_lock+0x10/0x10 [ 204.682653] __lock_acquire+0x29fd/0x4580 [ 204.682706] ? __pfx___lock_acquire+0x10/0x10 [ 204.682751] ? __pfx_try_to_wake_up+0x10/0x10 [ 204.682799] lock_acquire+0x19b/0x520 [ 204.682842] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.682891] ? __pfx_lock_acquire+0x10/0x10 [ 204.682938] ? srso_return_thunk+0x5/0x5f [ 204.682993] ? lock_is_held_type+0x9e/0x120 [ 204.683047] ? srso_return_thunk+0x5/0x5f [ 204.683106] __mutex_lock+0x13d/0xb50 [ 204.683158] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.683203] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.683249] ? srso_return_thunk+0x5/0x5f [ 204.683304] ? synchronize_rcu_expedited+0x38a/0x420 [ 204.683348] ? __pfx___mutex_lock+0x10/0x10 [ 204.683402] ? srso_return_thunk+0x5/0x5f [ 204.683459] ? srso_return_thunk+0x5/0x5f [ 204.683514] ? kasan_quarantine_put+0x84/0x1e0 [ 204.683575] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 204.683610] ? srso_return_thunk+0x5/0x5f [ 204.683669] unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.683715] ? __virt_addr_valid+0x2e8/0x5d0 [ 204.683768] ? __pfx_lock_release+0x10/0x10 [ 204.683812] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 204.683858] ? find_held_lock+0x2c/0x110 [ 204.683916] ? srso_return_thunk+0x5/0x5f [ 204.683973] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 204.684034] ? srso_return_thunk+0x5/0x5f [ 204.684089] ? lock_release+0x20f/0x6f0 [ 204.684133] ? __pfx_lock_release+0x10/0x10 [ 204.684176] ? srso_return_thunk+0x5/0x5f [ 204.684231] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 204.684278] ? srso_return_thunk+0x5/0x5f [ 204.684339] unregister_netdevice_queue+0x224/0x2e0 [ 204.684382] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 204.684426] ? up_write+0x195/0x520 [ 204.684481] _cfg80211_unregister_wdev+0x57b/0x700 [ 204.684532] ? srso_return_thunk+0x5/0x5f [ 204.684591] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 204.684630] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 204.684668] ? srso_return_thunk+0x5/0x5f [ 204.684723] ? srso_return_thunk+0x5/0x5f [ 204.684778] ? synchronize_rcu+0x1ff/0x260 [ 204.684821] ieee80211_unregister_hw+0x55/0x3a0 [ 204.684865] hwsim_exit_net+0x3a0/0x730 [ 204.684907] ? __pfx_hwsim_exit_net+0x10/0x10 [ 204.684948] ? srso_return_thunk+0x5/0x5f [ 204.685004] ? netdev_run_todo+0x788/0x1040 [ 204.685057] ? __pfx_hwsim_exit_net+0x10/0x10 [ 204.685100] ops_exit_list+0xb3/0x180 [ 204.685142] cleanup_net+0x546/0xad0 [ 204.685186] ? __pfx_cleanup_net+0x10/0x10 [ 204.685240] process_one_work+0x8ee/0x1a10 [ 204.685305] ? __pfx_lock_acquire+0x10/0x10 [ 204.685350] ? __pfx_process_one_work+0x10/0x10 [ 204.685408] ? srso_return_thunk+0x5/0x5f [ 204.685463] ? move_linked_works+0x172/0x270 [ 204.685508] ? srso_return_thunk+0x5/0x5f [ 204.685562] ? assign_work+0x196/0x240 [ 204.685620] worker_thread+0x674/0xe70 [ 204.685678] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 204.685740] ? __pfx_worker_thread+0x10/0x10 [ 204.685799] kthread+0x3ab/0x720 [ 204.685851] ? __pfx_kthread+0x10/0x10 [ 204.685902] ? srso_return_thunk+0x5/0x5f [ 204.685957] ? finish_task_switch.isra.0+0x206/0x840 [ 204.686008] ? __pfx_kthread+0x10/0x10 [ 204.686062] ret_from_fork+0x48/0x80 [ 204.686093] ? __pfx_kthread+0x10/0x10 [ 204.686146] ret_from_fork_asm+0x1a/0x30 [ 204.686212] [ 206.759652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.760926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.764397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.765842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.767300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.768530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.077599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.078605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.081084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.085425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.087387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.088401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.140872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.150581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.156812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.161367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.163071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.165233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.167467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.169040] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.171302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.172791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.175556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.177251] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.179924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.182446] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.184273] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.186820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.211460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.214771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.221012] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.226049] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.236846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.243202] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.255193] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.263244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 208.793619] Bluetooth: hci1: command tx timeout [ 209.113157] Bluetooth: hci2: command tx timeout [ 209.241262] Bluetooth: hci6: command tx timeout [ 209.241699] Bluetooth: hci5: command tx timeout [ 209.305186] Bluetooth: hci7: command tx timeout [ 209.306228] Bluetooth: hci4: command tx timeout [ 210.841205] Bluetooth: hci1: command tx timeout [ 211.161628] Bluetooth: hci2: command tx timeout [ 211.289379] Bluetooth: hci6: command tx timeout [ 211.289813] Bluetooth: hci5: command tx timeout [ 211.353235] Bluetooth: hci4: command tx timeout [ 211.353646] Bluetooth: hci7: command tx timeout [ 212.889150] Bluetooth: hci1: command tx timeout [ 213.210123] Bluetooth: hci2: command tx timeout [ 213.337175] Bluetooth: hci5: command tx timeout [ 213.337616] Bluetooth: hci6: command tx timeout [ 213.401164] Bluetooth: hci7: command tx timeout [ 213.401597] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 07:52:02 Registers: info registers vcpu 0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed10016c3046 R10=0000000000000073 R11=3a6b636f6c206762 R12=0000000000000073 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9727d543c0 CR3=0000000038f46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f9607e7e8ac RCX=ffffffff8150248e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff8880276b1fbc RBP=00007f9607e7e8ac RSP=ffff888030f274f8 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=ffffffff864043d7 R11=0000000000000003 R12=ffff888030f27600 R13=0000000000000000 R14=ffff8880276b1bc0 R15=0000000000000000 RIP=ffffffff81421f0a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe4832ad808 CR3=0000000032744000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00524f52524500400000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000