Warning: Permanently added '[localhost]:44823' (ECDSA) to the list of known hosts. 2025/01/28 16:30:28 fuzzer started 2025/01/28 16:30:28 dialing manager at localhost:40187 syzkaller login: [ 68.289884] cgroup: Unknown subsys name 'net' [ 68.395362] cgroup: Unknown subsys name 'cpuset' [ 68.433649] cgroup: Unknown subsys name 'rlimit' [ 75.108121] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.402782] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 16:30:46 syscalls: 214 2025/01/28 16:30:46 code coverage: enabled 2025/01/28 16:30:46 comparison tracing: enabled 2025/01/28 16:30:46 extra coverage: enabled 2025/01/28 16:30:46 setuid sandbox: enabled 2025/01/28 16:30:46 namespace sandbox: enabled 2025/01/28 16:30:46 Android sandbox: enabled 2025/01/28 16:30:46 fault injection: enabled 2025/01/28 16:30:46 leak checking: enabled 2025/01/28 16:30:46 net packet injection: enabled 2025/01/28 16:30:46 net device setup: enabled 2025/01/28 16:30:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 16:30:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 16:30:46 USB emulation: enabled 2025/01/28 16:30:46 hci packet injection: enabled 2025/01/28 16:30:46 wifi device emulation: enabled 2025/01/28 16:30:46 802.15.4 emulation: enabled 2025/01/28 16:30:46 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 16:30:48 starting 8 fuzzer processes 16:30:48 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0xee01, 0xee00, 0x0, 0xee00, 0x54, 0x3}, 0x0, 0x0, 0x3f, 0x89, 0x53, 0x4, 0x800, 0x7f, 0x8, 0x91b, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2900}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4b21, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r0 = msgget(0x1, 0x244) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/158) prctl$PR_GET_SECUREBITS(0x1b) r1 = msgget$private(0x0, 0x40) r2 = getuid() r3 = fork() r4 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x1, r2, 0xee00, 0xee01, 0x0, 0x1, 0x7ff}, 0x0, 0x0, 0x4, 0x200, 0xc68, 0x6, 0x5, 0x8413, 0x1f, 0x3ef, r3, r4}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000300)=""/132) msgget(0x0, 0x100) geteuid() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1c0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}}, 0x4010) 16:30:48 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0xc841) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x8501b76c78c0755a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xcb5}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000600)='wpan3\x00') r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r10, 0x16, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x10) 16:30:48 executing program 2: r0 = socket(0x10, 0x800, 0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000180)={"5069ddbc2cb99e08d23e177105005b60", 0x0, r6, {0x1, 0x5}, {0x7, 0x80}, 0x1, [0x4, 0x6, 0x7ff, 0x7ff, 0x0, 0x3, 0x2, 0x401, 0x1, 0x4, 0x401, 0xfff, 0x634a792f, 0xfffffffffffffc00, 0x100, 0x1000]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000002c0)={r4, 0x2, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) write$cgroup_int(r7, &(0x7f0000000380)=0x4, 0x12) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r8 = syz_open_dev$mouse(&(0x7f0000000400), 0x1, 0x248000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r9) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x200001, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_any}, {@access_client}, {@afid={'afid', 0x3d, 0x5}}, {@privport}, {@fscache}, {@msize={'msize', 0x3d, 0xae}}], [{@fowner_lt}, {@fowner_lt}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, '\'^##})$'}}, {@euid_gt={'euid>', r2}}]}}) [ 88.296137] audit: type=1400 audit(1738081849.031:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:30:49 executing program 3: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004010) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x50000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x20, 0x9, 0x60, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, 0x20, 0x40, 0x2, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r0}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c801) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_IE={0x47, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x800, @void, @val=0x34, @void}}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x88}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x20, 0x6, @broadcast, 0x1, 0xfffff801, 0x8}}, @dsss={0x3, 0x1, 0x9}, @mesh_chsw={0x76, 0x6, {0xa3, 0xa6, 0x18, 0x9}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044051}, 0x840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x42}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004844) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd4}]}, @NL802154_ATTR_SEC_KEY={0x8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x4000001) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x268}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_HIDDEN_SSID={0x17, 0x7e, @random="e4b1237e8d79cbdffcd4afe0a11667f4483e70"}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40840) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa0, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x7c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x600000007}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd0, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1269}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x73fb6d70}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10008080}, 0x20000004) syz_genetlink_get_family_id$fou(&(0x7f0000001180), 0xffffffffffffffff) 16:30:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x900000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@access_uid={'access', 0x3d, r2}}], [{@subj_role={'subj_role', 0x3d, '\'.'}}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x9c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x240080a1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x40201, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) geteuid() sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x40850) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x884) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4894}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r10 = perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x3f, 0x3, 0x8, 0x80, 0x0, 0x2, 0x21, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000a00), 0x2}, 0x2, 0x1f, 0xbb, 0x9, 0xffff, 0x10001, 0x9, 0x0, 0xc2c8, 0x0, 0x933}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000000ac0)={"4f43a679f30eb07aa00230e37628d068", r4, r3, {0x400, 0x6}, {0xa, 0x39a}, 0xfffffffffffffffa, [0xffffffffffffffff, 0x1, 0x7, 0x7, 0x0, 0x7ff, 0x1, 0x0, 0x3, 0xb5e6, 0x100000001, 0x9, 0x100000000, 0x760, 0x1f, 0x20]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r10, {r1, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000c00)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r9, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r11, 0xc0189376, &(0x7f0000000e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x144}}, './file0\x00'}) 16:30:49 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040055}, 0x20040004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3f41a02c6d21cde1}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80031840}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r3, 0x900, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x410) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 16:30:49 executing program 6: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11021020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40900}, 0xc015) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004854) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x7fffffff, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40048084}, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7f, 0x80000001, 0x1, @local, @empty, 0x8, 0x7800, 0x1, 0x401}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x128, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x90}, 0x81) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg(r6, &(0x7f0000001f40)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="391a6635ac", 0x5}, {&(0x7f0000001b00)="4a30ae76634ea2e4f34acfdf8a38203a80f23d45", 0x14}, {&(0x7f0000001b40)="a4fde2568b256c20294eb285dc6fb2e1696763667514ba68250efc35d406d9bb509dda1b9751f6883103dccfe7a8b19f989fe1b493f3e34aca430526a8", 0x3d}, {&(0x7f0000001b80)="f63575b5e3750fb804e01b00ab537d9c3520976d27e357650ae7e03b264f8d1f0ece106d4690adcdc3c4fe29edc451589c67fce702d7d721e072e4975603da4b75c7d8d69ee2d50289b08936a19569997f172b6b23bce9b701086ae58d9aa7ade21b89b0da164babce3f7bd64c9417b459b0ec20df6f5af6d88aba2a8615bcb33b7ddc902252ea3d07d7880ccc2f32ffc042afc59bfe5074aa3deb8f84d0102b73fd78bedd2ef5facd19fd5000d76c012b5d6422c5fa4ef38df9307e77f9a0b1428a27ab6c2652a2af9460828a5c8b27c6418d51f4ac9fb65bb7ea058dbdf638", 0xe0}, {&(0x7f0000001c80)="d2772a01c8ff99af8f4f7e49abff655656719a2778682c590b487eed60661de1e40a533059955b8376", 0x29}, {&(0x7f0000001cc0)="ad2a83cc5ae3990a2fe4864f4e3ac2398a0411c53e560cbc0930365b4e2c846a12260940685f81d3e971d59f3cad041651449739832a784c0f5cde6ac8b7011e4432d50ac82dc0e8052d814495e7d62c21fbd69e45ed810761f787af050521476fc6014b0e9ee4d919aed87b2f67a5532f91ae7929411f0c24f1ca16d45be7a051a9e1801f2b04a759f253a2d3d4a1145467681501614f93fc62d3cd4c1b5ad60c9ec0e6022854c886e6c0a1c8b16648e4fd8e7f8b6b04e5f2ee75da3c493876c9381e5990de5db7fb13bb146d", 0xcd}, {&(0x7f0000001dc0)="4d110bf9eb438c60b803b028242d72abb9b33d585069e617000b930bae0533224ee41acc8b03e1003bc398dbcf6f9720d154b0edc06f42746ad98898c88f13c372ab0dda57804fb9347e970b2cbeeda3a2f268773a521074e1172c6b3054053fbab00125d8ba550904ed4da486e45ea4aff0264ccc770ec217", 0x79}], 0x8, &(0x7f0000001ec0)=[{0x50, 0x0, 0x1000, "3d79ece64881efe8657361419344c62844e71149d8c2d6559340563dd76e929e4bb19cddac0268f3b8fdef968e967b001941ed96d5626cd73633151881"}], 0x50}, 0x4004801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000002000)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000002080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r9) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, 0x0, 0x310, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040800}, 0x20048090) 16:30:49 executing program 7: write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x3, 0x2, 0x3, "6d8e1702960d7b551801e11a24d0ef7e556f652e9205d9a2932bc8a61cf1bf3ac94fa5ce177b1b79c825fead412229fb9a1973b78c317a8182a566430e997aedc1eef23fa70a7534e5f84cec23bb5bc5ad0e23cb5dd3ebcf24ec5531878ab38c024932d3b38fcdd7017a2044ff16ba33136b5f663375c8ff98d397a156f2c0fc286cf0bb4eb86412c41044bfe801074be47426c95970fcd1359198edd7dbde3a2d24ea"}, 0xb3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2953}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x5, 0x1, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x1, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x3, 0x687c, 0x21, @remote, @mcast2, 0x700, 0x7800, 0x1, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d8, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0xaf7a9a319a6155a4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x150, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6f, 0x5b, "d58ec662593cfb53491fd6f0f86722b26ec29ef6ac7f84a6886ab17be39643a9017483991b0183d8212f6f5ef8f7ca07b2c1ed04bb8508f8f5a472c5abe6047f3ef424819614aa2d26558f2e19a6e520c17e54af3649ed8cdd935e3c48dc8e90a8b401f273c2156b8530d8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}, @NL80211_ATTR_FRAME_MATCH={0xac, 0x5b, "ee2bb709b9c921e1d867cd202d1572a78a08e28a4d951df548b4ff51171474c057eb9723ef161eb6f601866fcf17630a2b0f8627ebad96fa4a00dbe6f75049a6040a9f4894d4233df777a80b44eafce3db4add2ddd7d554da9e4e4f05b8f5809c29a0cecc5e8280324c99de9d8194d1dce3ca236c135dea5de838d1d73247a840445b87ea6060a36a61cc6e17fd5111086163fafcb0f716f6d4f342c939ee946fe3d51bdd1363a06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x99}]}, 0x150}}, 0x20004001) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8090) prctl$PR_GET_SECUREBITS(0x1b) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x54) r11 = shmget(0x2, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r11, 0xd, &(0x7f0000000d40)=""/62) [ 89.526167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.535077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.542053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.552180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.557333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.559678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.589824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.593759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.602830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.609454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.613146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.618250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.774371] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.785672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.790713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.792458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.798973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.800994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.818001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.824067] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.834003] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.834975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.842391] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.857710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.866900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.873302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.874815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.890510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.902423] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.905503] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.023033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.027175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.029092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.034432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.037107] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.038972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.067436] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.085189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.086511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.089165] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.091008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.093372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.101717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.104819] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.107904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.133950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.150746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.170000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.613408] Bluetooth: hci0: command tx timeout [ 91.675173] Bluetooth: hci1: command tx timeout [ 91.930774] Bluetooth: hci3: command tx timeout [ 91.995641] Bluetooth: hci2: command tx timeout [ 91.996422] Bluetooth: hci4: command tx timeout [ 92.059614] Bluetooth: hci5: command tx timeout [ 92.187681] Bluetooth: hci6: command tx timeout [ 92.314633] Bluetooth: hci7: command tx timeout [ 93.658886] Bluetooth: hci0: command tx timeout [ 93.722874] Bluetooth: hci1: command tx timeout [ 93.978852] Bluetooth: hci3: command tx timeout [ 94.043068] Bluetooth: hci4: command tx timeout [ 94.043945] Bluetooth: hci2: command tx timeout [ 94.106986] Bluetooth: hci5: command tx timeout [ 94.234668] Bluetooth: hci6: command tx timeout [ 94.362960] Bluetooth: hci7: command tx timeout [ 95.706654] Bluetooth: hci0: command tx timeout [ 95.771736] Bluetooth: hci1: command tx timeout [ 96.026823] Bluetooth: hci3: command tx timeout [ 96.092600] Bluetooth: hci2: command tx timeout [ 96.093018] Bluetooth: hci4: command tx timeout [ 96.154604] Bluetooth: hci5: command tx timeout [ 96.282821] Bluetooth: hci6: command tx timeout [ 96.410653] Bluetooth: hci7: command tx timeout [ 97.754647] Bluetooth: hci0: command tx timeout [ 97.818763] Bluetooth: hci1: command tx timeout [ 98.074641] Bluetooth: hci3: command tx timeout [ 98.138714] Bluetooth: hci4: command tx timeout [ 98.139177] Bluetooth: hci2: command tx timeout [ 98.202724] Bluetooth: hci5: command tx timeout [ 98.330634] Bluetooth: hci6: command tx timeout [ 98.458607] Bluetooth: hci7: command tx timeout [ 147.306159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.307340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.524980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.525932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.794878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.796216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.197139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.198063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.954577] syz-executor.4 (282) used greatest stack depth: 23296 bytes left [ 148.989047] [ 148.989293] ====================================================== [ 148.989820] WARNING: possible circular locking dependency detected [ 148.990357] 6.13.0-next-20250128 #1 Not tainted [ 148.990751] ------------------------------------------------------ [ 148.991906] kworker/u8:1/65 is trying to acquire lock: [ 148.993094] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.995149] [ 148.995149] but task is already holding lock: [ 148.996651] ffff88800e438768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 148.998715] [ 148.998715] which lock already depends on the new lock. [ 148.998715] [ 148.999717] [ 148.999717] the existing dependency chain (in reverse order) is: [ 149.000328] [ 149.000328] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 149.000894] __mutex_lock+0x13d/0xb50 [ 149.001305] wiphy_register+0x1b2e/0x25d0 [ 149.001742] ieee80211_register_hw+0x23a4/0x3d60 [ 149.002222] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 149.002716] init_mac80211_hwsim+0x389/0x870 [ 149.003174] do_one_initcall+0xf9/0x640 [ 149.003599] kernel_init_freeable+0x53d/0x7a0 [ 149.004059] kernel_init+0x1e/0x2d0 [ 149.004429] ret_from_fork+0x48/0x80 [ 149.004805] ret_from_fork_asm+0x1a/0x30 [ 149.005231] [ 149.005231] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 149.005765] __lock_acquire+0x29fd/0x4580 [ 149.006197] lock_acquire+0x19b/0x520 [ 149.006593] __mutex_lock+0x13d/0xb50 [ 149.006994] unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.007531] unregister_netdevice_queue+0x224/0x2e0 [ 149.008022] _cfg80211_unregister_wdev+0x57b/0x700 [ 149.008505] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 149.008986] ieee80211_unregister_hw+0x55/0x3a0 [ 149.009445] hwsim_exit_net+0x3a0/0x730 [ 149.009852] ops_exit_list+0xb3/0x180 [ 149.010248] cleanup_net+0x546/0xad0 [ 149.010629] process_one_work+0x8ee/0x1a10 [ 149.011077] worker_thread+0x674/0xe70 [ 149.011492] kthread+0x3ab/0x720 [ 149.011861] ret_from_fork+0x48/0x80 [ 149.012236] ret_from_fork_asm+0x1a/0x30 [ 149.012660] [ 149.012660] other info that might help us debug this: [ 149.012660] [ 149.013305] Possible unsafe locking scenario: [ 149.013305] [ 149.013798] CPU0 CPU1 [ 149.014195] ---- ---- [ 149.014580] lock(&rdev->wiphy.mtx); [ 149.014924] lock(rtnl_mutex); [ 149.015420] lock(&rdev->wiphy.mtx); [ 149.015952] lock(rtnl_mutex); [ 149.016258] [ 149.016258] *** DEADLOCK *** [ 149.016258] [ 149.016750] 4 locks held by kworker/u8:1/65: [ 149.017130] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 149.018010] #1: ffff88800bcd7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 149.018857] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 149.019638] #3: ffff88800e438768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 149.020516] [ 149.020516] stack backtrace: [ 149.020892] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250128 #1 [ 149.020929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 149.020952] Workqueue: netns cleanup_net [ 149.020993] Call Trace: [ 149.021002] [ 149.021014] dump_stack_lvl+0xca/0x120 [ 149.021073] print_circular_bug+0x47b/0x750 [ 149.021119] check_noncircular+0x2e9/0x3c0 [ 149.021161] ? __pfx_check_noncircular+0x10/0x10 [ 149.021203] ? hlock_class+0x4e/0x130 [ 149.021233] ? mark_lock+0xac/0xed0 [ 149.021273] ? srso_return_thunk+0x5/0x5f [ 149.021329] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 149.021375] ? lockdep_lock+0xba/0x1b0 [ 149.021433] ? __pfx_lockdep_lock+0x10/0x10 [ 149.021495] __lock_acquire+0x29fd/0x4580 [ 149.021549] ? __pfx___lock_acquire+0x10/0x10 [ 149.021592] ? lock_release+0x20f/0x6f0 [ 149.021636] ? __pfx_lock_release+0x10/0x10 [ 149.021684] lock_acquire+0x19b/0x520 [ 149.021727] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.021776] ? __pfx_lock_acquire+0x10/0x10 [ 149.021821] ? srso_return_thunk+0x5/0x5f [ 149.021877] ? lock_release+0x20f/0x6f0 [ 149.021920] ? srso_return_thunk+0x5/0x5f [ 149.021976] ? lock_is_held_type+0x9e/0x120 [ 149.022031] ? srso_return_thunk+0x5/0x5f [ 149.022098] __mutex_lock+0x13d/0xb50 [ 149.022150] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.022196] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.022242] ? srso_return_thunk+0x5/0x5f [ 149.022297] ? synchronize_rcu_expedited+0x38a/0x420 [ 149.022342] ? __pfx___mutex_lock+0x10/0x10 [ 149.022396] ? __pfx_autoremove_wake_function+0x10/0x10 [ 149.022451] ? srso_return_thunk+0x5/0x5f [ 149.022507] ? kasan_quarantine_put+0x84/0x1e0 [ 149.022568] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 149.022603] ? srso_return_thunk+0x5/0x5f [ 149.022663] unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.022709] ? __virt_addr_valid+0x2e8/0x5d0 [ 149.022762] ? __pfx_lock_release+0x10/0x10 [ 149.022807] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 149.022853] ? find_held_lock+0x2c/0x110 [ 149.022911] ? srso_return_thunk+0x5/0x5f [ 149.022969] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 149.023030] ? srso_return_thunk+0x5/0x5f [ 149.023086] ? lock_release+0x20f/0x6f0 [ 149.023130] ? __pfx_lock_release+0x10/0x10 [ 149.023173] ? srso_return_thunk+0x5/0x5f [ 149.023228] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 149.023276] ? srso_return_thunk+0x5/0x5f [ 149.023337] unregister_netdevice_queue+0x224/0x2e0 [ 149.023381] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 149.023424] ? up_write+0x195/0x520 [ 149.023480] _cfg80211_unregister_wdev+0x57b/0x700 [ 149.023532] ? srso_return_thunk+0x5/0x5f [ 149.023592] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 149.023631] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 149.023669] ? srso_return_thunk+0x5/0x5f [ 149.023725] ? srso_return_thunk+0x5/0x5f [ 149.023781] ? synchronize_rcu+0x1ff/0x260 [ 149.023823] ieee80211_unregister_hw+0x55/0x3a0 [ 149.023868] hwsim_exit_net+0x3a0/0x730 [ 149.023910] ? __pfx_hwsim_exit_net+0x10/0x10 [ 149.023951] ? srso_return_thunk+0x5/0x5f [ 149.024007] ? netdev_run_todo+0x788/0x1040 [ 149.024056] ? __pfx_hwsim_exit_net+0x10/0x10 [ 149.024098] ops_exit_list+0xb3/0x180 [ 149.024141] cleanup_net+0x546/0xad0 [ 149.024186] ? __pfx_cleanup_net+0x10/0x10 [ 149.024239] process_one_work+0x8ee/0x1a10 [ 149.024305] ? __pfx_lock_acquire+0x10/0x10 [ 149.024349] ? __pfx_process_one_work+0x10/0x10 [ 149.024413] ? srso_return_thunk+0x5/0x5f [ 149.024469] ? move_linked_works+0x172/0x270 [ 149.024514] ? srso_return_thunk+0x5/0x5f [ 149.024569] ? assign_work+0x196/0x240 [ 149.024627] worker_thread+0x674/0xe70 [ 149.024685] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 149.024737] ? srso_return_thunk+0x5/0x5f [ 149.024792] ? __pfx_worker_thread+0x10/0x10 [ 149.024852] kthread+0x3ab/0x720 [ 149.024904] ? __pfx_kthread+0x10/0x10 [ 149.024956] ? srso_return_thunk+0x5/0x5f [ 149.025012] ? finish_task_switch.isra.0+0x206/0x840 [ 149.025063] ? __pfx_kthread+0x10/0x10 [ 149.025117] ret_from_fork+0x48/0x80 [ 149.025148] ? __pfx_kthread+0x10/0x10 [ 149.025201] ret_from_fork_asm+0x1a/0x30 [ 149.025267] [ 151.729600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.730326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.731902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.737061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.739248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.745132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.748412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.752843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.756597] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.758091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.760163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.762415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.778235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.783764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.788143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.794378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.795631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.797752] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.798928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.800484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.802492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.815464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.819238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.820953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.886937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.891073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.893605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.897924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.901788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.903394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.938878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.945787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.947272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.957088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.960816] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.966777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.045959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.049691] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.056843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.070333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.083921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.098879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.107784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.114813] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.116349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.131794] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.150904] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.153813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.818631] Bluetooth: hci0: command tx timeout [ 153.819117] Bluetooth: hci1: command tx timeout [ 153.882596] Bluetooth: hci3: command tx timeout [ 153.883063] Bluetooth: hci2: command tx timeout [ 154.010632] Bluetooth: hci4: command tx timeout [ 154.075658] Bluetooth: hci5: command tx timeout [ 154.202600] Bluetooth: hci7: command tx timeout [ 154.203078] Bluetooth: hci6: command tx timeout [ 155.868551] Bluetooth: hci0: command tx timeout [ 155.869047] Bluetooth: hci1: command tx timeout [ 155.930704] Bluetooth: hci2: command tx timeout [ 155.931194] Bluetooth: hci3: command tx timeout [ 156.059577] Bluetooth: hci4: command tx timeout [ 156.123742] Bluetooth: hci5: command tx timeout [ 156.251644] Bluetooth: hci6: command tx timeout [ 156.252130] Bluetooth: hci7: command tx timeout [ 157.914644] Bluetooth: hci1: command tx timeout [ 157.915119] Bluetooth: hci0: command tx timeout [ 157.979634] Bluetooth: hci3: command tx timeout [ 157.980119] Bluetooth: hci2: command tx timeout [ 158.108597] Bluetooth: hci4: command tx timeout [ 158.170885] Bluetooth: hci5: command tx timeout [ 158.298712] Bluetooth: hci6: command tx timeout [ 158.299184] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:31:49 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283f380 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bcd6d28 R8 =0000000000000001 R9 =ffffed100179ad96 R10=0000000000000000 R11=3a6b636f6c206762 R12=0000000000000041 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283f3d5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562a31ccdea8 CR3=000000000f04e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000057bc0e3ba838b012 XMM02=000000000000000033bac000b8ab5998 XMM03=31483033614a2e72656c6c616b7a7973 XMM04=78650a006873616d7320636578650a00 XMM05=7420636578650a007364656573206365 XMM06=007a7a7566206365786509006c61746f XMM07=006574616469646e616320636578650e XMM08=650800737472617473657220726f7475 XMM09=6d7320636578650a006e656720636578 XMM10=00736465657320636578650a00687361 XMM11=65786509006c61746f7420636578650a XMM12=6e616320636578650e007a7a75662063 XMM13=69727420636578650b00657461646964 XMM14=696d696e696d20636578650d00656761 XMM15=000073746e696820636578650a00657a info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42d00 RCX=ffffffff81664972 RDX=ffff88802de60000 RSI=ffffffff8166494c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88802de6f7c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c85a1 R13=ffff88806ce42d08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166494e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2edb9f040 CR3=0000000015c66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000031000000302f716d2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005608ea183f4000005608ea15d810 XMM06=00005608ea1d84c00000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000