Warning: Permanently added '[localhost]:40587' (ECDSA) to the list of known hosts. 2025/01/28 21:38:38 fuzzer started 2025/01/28 21:38:38 dialing manager at localhost:40187 syzkaller login: [ 62.928916] cgroup: Unknown subsys name 'net' [ 63.036615] cgroup: Unknown subsys name 'cpuset' [ 63.058913] cgroup: Unknown subsys name 'rlimit' [ 68.339875] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 21:38:57 syscalls: 2217 2025/01/28 21:38:57 code coverage: enabled 2025/01/28 21:38:57 comparison tracing: enabled 2025/01/28 21:38:57 extra coverage: enabled 2025/01/28 21:38:57 setuid sandbox: enabled 2025/01/28 21:38:57 namespace sandbox: enabled 2025/01/28 21:38:57 Android sandbox: enabled 2025/01/28 21:38:57 fault injection: enabled 2025/01/28 21:38:57 leak checking: enabled 2025/01/28 21:38:57 net packet injection: enabled 2025/01/28 21:38:57 net device setup: enabled 2025/01/28 21:38:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 21:38:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 21:38:57 USB emulation: enabled 2025/01/28 21:38:57 hci packet injection: enabled 2025/01/28 21:38:57 wifi device emulation: enabled 2025/01/28 21:38:57 802.15.4 emulation: enabled 2025/01/28 21:38:57 fetching corpus: 50, signal 21073/22410 (executing program) 2025/01/28 21:38:57 fetching corpus: 100, signal 28646/30910 (executing program) 2025/01/28 21:38:57 fetching corpus: 150, signal 32095/35190 (executing program) 2025/01/28 21:38:57 fetching corpus: 200, signal 35666/39391 (executing program) 2025/01/28 21:38:57 fetching corpus: 250, signal 36280/40868 (executing program) 2025/01/28 21:38:57 fetching corpus: 300, signal 37578/42864 (executing program) 2025/01/28 21:38:58 fetching corpus: 350, signal 39326/45120 (executing program) 2025/01/28 21:38:58 fetching corpus: 400, signal 40710/46990 (executing program) 2025/01/28 21:38:58 fetching corpus: 450, signal 41745/48536 (executing program) 2025/01/28 21:38:58 fetching corpus: 500, signal 44295/51091 (executing program) 2025/01/28 21:38:58 fetching corpus: 550, signal 45281/52422 (executing program) 2025/01/28 21:38:58 fetching corpus: 600, signal 46262/53671 (executing program) 2025/01/28 21:38:58 fetching corpus: 650, signal 46836/54656 (executing program) 2025/01/28 21:38:58 fetching corpus: 700, signal 47362/55564 (executing program) 2025/01/28 21:38:58 fetching corpus: 750, signal 47644/56303 (executing program) 2025/01/28 21:38:58 fetching corpus: 800, signal 48631/57393 (executing program) 2025/01/28 21:38:59 fetching corpus: 850, signal 49345/58277 (executing program) 2025/01/28 21:38:59 fetching corpus: 900, signal 49633/58956 (executing program) 2025/01/28 21:38:59 fetching corpus: 950, signal 49949/59610 (executing program) 2025/01/28 21:38:59 fetching corpus: 1000, signal 50815/60438 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/60950 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/61441 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/61895 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/62395 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/62917 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/63400 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/63863 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/64331 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/64816 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/65301 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/65767 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/66260 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/66741 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/66997 (executing program) 2025/01/28 21:38:59 fetching corpus: 1016, signal 50892/66997 (executing program) 2025/01/28 21:39:02 starting 8 fuzzer processes 21:39:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf11, 0x400000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x8, 0x8d34, 0x20, 0x5, 0x16, "e8b145cc1eac5044"}) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xffffffff, 0x260800) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/217}) ioctl$KDSKBLED(r1, 0x4b65, 0x7) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000240)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x460000, 0x0) r3 = signalfd(r2, &(0x7f00000002c0)={[0x2]}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000300)={0x4, 0xc90, 0x6, 0x7f, 0x9, "d448a244cf301acc2e41d04830fe9552698745"}) clone3(&(0x7f0000001540)={0x41060400, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x33}, &(0x7f0000000400)=""/251, 0xfb, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa, {r1}}, 0x58) pipe2$9p(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001600)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r7 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r5, &(0x7f0000001640)={r6, r7, 0x4}) r8 = openat2(r3, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x103900, 0x4, 0xd}, 0x18) ioctl$TIOCL_GETSHIFTSTATE(r8, 0x541c, &(0x7f0000001700)={0x6, 0x3}) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000001740)={0x2, 0x4, 0x1c}) pidfd_send_signal(r1, 0x1a, &(0x7f0000001780)={0xa, 0x7, 0x67}, 0x0) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000001800)=""/157) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) 21:39:02 executing program 1: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x5, @rand_addr=0x64010100}}, 0x0, 0x0, 0x5, 0x0, "346664515abf87f0278c15e50e0a7386f7388aede97b4a9baa98aac3ac73b72136f974c8698ede79197758ab4f82670e1db7e043314a53a95750b09be9c4fc51fe6160c5f5c384c7432aa09eb27fdacb"}, 0xd8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "70d27cfc186bb278", "f3dbb7c25873b7142b610bd7f347f137", "cc4cb7b9", "15941896ffb44a83"}, 0x28) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r1, &(0x7f00000001c0)=@l2tp6, &(0x7f0000000240)=0x80) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @l2={0x1f, 0x33, @none, 0x3b6, 0x2}, @vsock={0x28, 0x0, 0x2710, @host}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0x3f, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)='macvtap0\x00', 0x1, 0x9, 0x40}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000340)={0x0, 0x61, 0x200}) r2 = openat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x48001, 0xa1) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000780)={@local, @mcast1, @private0, 0x7ff, 0x8780, 0x43d2, 0x100, 0x3, 0x2000080}) r3 = accept$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0}, &(0x7f0000000840)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) r5 = accept$packet(r3, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000900)=0x14) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000940)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) socketpair(0x2c, 0x4, 0x40, &(0x7f0000000980)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f00000009c0)=0x7, 0x4) setsockopt$packet_int(r6, 0x107, 0x2, &(0x7f0000000a00)=0x6, 0x4) setsockopt$packet_buf(r5, 0x107, 0xd, &(0x7f0000000a40)="e0f2fdb0bd6cdf08a01b81b722fa94e0d74cea4f3b92f2950899c49be3f23ad18e75", 0x22) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'sit0\x00', r4, 0x2f, 0x20, 0x2, 0x4, 0x0, @private1, @local, 0x7800, 0x8000, 0x63f7ff7, 0x7f4}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xc0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 21:39:02 executing program 2: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x2, 0x10, 0x3, 0x5, 0xfff, 0x4, 0x8403, 0x16, 0xfffffff9}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x80000001, 0xbe, 0x81, 0x4, 0x6, 0xc7db}, 0x0) clock_gettime(0x0, &(0x7f0000003e40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/49, 0x31}, {&(0x7f0000001140)=""/237, 0xed}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/199, 0xc7}, {&(0x7f0000001400)=""/84, 0x54}], 0x6, &(0x7f0000001500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001740)=[{&(0x7f0000001600)=""/108, 0x6c}, {&(0x7f0000001680)=""/156, 0x9c}], 0x2, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001840)=""/52, 0x34}], 0x1, &(0x7f00000018c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/10, 0xa}, {&(0x7f00000019c0)=""/37, 0x25}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/86, 0x56}, {&(0x7f0000001ac0)=""/204, 0xcc}], 0x5, &(0x7f0000001c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/149, 0x95}, {&(0x7f0000001dc0)=""/16, 0x10}], 0x2, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000003400)=[{&(0x7f0000001fc0)=""/93, 0x5d}, {&(0x7f0000002040)=""/14, 0xe}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/193, 0xc1}, {&(0x7f0000003180)=""/189, 0xbd}, {&(0x7f0000003240)=""/233, 0xe9}, {&(0x7f0000003340)=""/165, 0xa5}], 0x7, &(0x7f0000003480)}}, {{&(0x7f00000034c0), 0x6e, &(0x7f0000003740)=[{&(0x7f0000003540)=""/28, 0x1c}, {&(0x7f0000003580)=""/149, 0x95}, {&(0x7f0000003640)=""/195, 0xc3}], 0x3, &(0x7f0000003780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003800)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003880)=""/84, 0x54}, {&(0x7f0000003900)=""/46, 0x2e}], 0x2, &(0x7f0000003980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003a80), 0x0, &(0x7f0000003ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x140}}], 0x9, 0x0, &(0x7f0000003e80)={r0, r1+60000000}) sched_getattr(r12, &(0x7f0000003ec0)={0x38}, 0x38, 0x0) r13 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003f00), 0x10000, 0x0) fsetxattr$trusted_overlay_upper(r13, &(0x7f0000003f40), &(0x7f0000003f80)={0x0, 0xfb, 0x71, 0x2, 0x40, "667a74c4d8fbab08d04971c3cd7c0e80", "a71fe568a892fcf03f5415955c58c1a33dcedbbe72ea1980d9fadbbf6ec062933faed7864792c62cc494d562f71d662726f7ff0d0ad1fbe57361a68bdac7a2d2146ff7f68a74bf353ae06f80cc1ee5bb9d47e2c19512afd7501c06c2"}, 0x71, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sched_setattr(r5, &(0x7f0000004000)={0x38, 0x5, 0x4, 0x8, 0x4, 0x8000, 0x1, 0x7, 0x401, 0x6}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000004080)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), r14) sched_getattr(r5, &(0x7f00000040c0)={0x38}, 0x38, 0x0) sched_setattr(r4, &(0x7f0000004100)={0x38, 0x5, 0x10000045, 0xfffffff9, 0xc1, 0x94, 0x6, 0x5, 0x4, 0xa5}, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000004140)={0x0, 0x3, 0x1000, 0x3}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000004180)=0x0) sched_setattr(r15, &(0x7f00000041c0)={0x38, 0x5, 0x30000008, 0x1, 0x94e, 0x8001, 0x1, 0xfffffffffffffffb, 0x4, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004240)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000004280)=r16) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r10, &(0x7f00000042c0)={0x20000008}) ioctl$FIOCLEX(r3, 0x5451) 21:39:02 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$cgroup_int(r0, &(0x7f0000000040)=0xff, 0x12) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) r4 = dup(r2) r5 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/lockd', 0x400, 0xc0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r7, @out_args}, './file0\x00'}) r8 = socket(0x26, 0x80005, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000300)={0x3, 0x1, 0x1a}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/3\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x80049367, &(0x7f0000000380)) readv(r1, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/61, 0x3d}], 0x2) 21:39:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private1, @in=@empty, 0x4e20, 0x8, 0x4e21, 0x9, 0x2, 0xa0, 0x0, 0x1a, 0x0, r2}, {0x80000001, 0x2, 0x3ff, 0x406, 0x6, 0x5, 0x7fffffff, 0x7fff}, {0x3f, 0x3, 0xd363, 0x1}, 0x2, 0x6e6bb8, 0x0, 0x1, 0x2, 0x1}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in=@local, 0x0, 0x1, 0x3, 0x20, 0x1c400, 0x4}}, 0xe8) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000001c0)={0x2, 0x7774, 0x6}, 0xc) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000001700)={'syztnl0\x00', &(0x7f0000001680)={'sit0\x00', 0x0, 0x2f, 0x0, 0x8, 0xd, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private2, 0x7, 0xe4b226e42cd8bf3a, 0x1, 0x22f}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x101}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001880)={0x1d4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x358}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdc0d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getpeername$unix(r3, &(0x7f0000001b00), &(0x7f0000001b80)=0x6e) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000001bc0)=0x4, 0x4) sendmsg$inet(r3, &(0x7f0000002000)={&(0x7f0000001c00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001c40)="1f9046032dcd14741a99cc76e9d330e5f8e294973047db02c581e2b70f068eec43002ccd96048ee5ff846905e63bac8871f95830171afc8a752aeb7fb2a378abd0a73aace94d44816e0586a9de24a14d1cadad1c57343cada732f58e74648c37518b4ec13416403eed22c5df892d46bc99ba5983005de1fb67ddfa43115bbd740b69382994936f9374fd2697bb858e2255ec64eec05143351ee06de424ead9350f34ed7dea7d40c50f444a5d837e433353", 0xb1}, {&(0x7f0000001d00)="4fc7c0cb84fbcdacb4c68a6a16e3035ee0a968b429154d8da06900b5d0e96792458e74246bad2c636644b91046cca3b73455c55eefa1f2b99a310a9e3b6fbb6bd1bbd555dc9ba9c8d1619859ff3d244d244b95a5e9b801ed11b6de342283cbf62cc48de074073692831e4c24a3a0", 0x6e}, {&(0x7f0000001d80)="974d5f4e3a75bbc49e7c8e152ea64591092d4c033ebbb1615f088e1b7affe5ecab36183499d420e41b81dd6989b0603d4f92062078ff0c04fb32bb7ecabbbabc7d45", 0x42}, {&(0x7f0000001e00)="5199155dc3130215b9929e49e57321f257d62635eab078ce910719dd7ef879cf5b8790e8e4e1aa7839ace539c1d4af25aaf2ad248fc8e3135f63228d631469070cfa582afbe9ab338905fcd56f25b0c11ef8759679ca53de1eee911728a7a965cdd6047e1e1e3e8a37d307b3cbed39e700907f45810013826fa43cae109a83c788b7a704a9b84928eb0f7acff3a2bb3fd5852e93425578d90c63506e7962aa55c52b883552806a2349b043c012e55dcdc0d9fd0bc75bfc3532fbef497fdc9cacb341a8a0d1e8910996b94fa03e08c9cb8d26cb0311ea71", 0xd7}], 0x4, &(0x7f0000001f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @rand_addr=0x64010101}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x65ba}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}], 0x98}, 0x48044) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002040)={r1, 0xf5, 0xb8a, 0x100}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r1) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x18, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c800}, 0x24008890) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000021c0)={'NETMAP\x00'}, &(0x7f0000002200)=0x1e) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000002240)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000002340)={&(0x7f0000002280)=""/138, 0x8a}) [ 86.275251] audit: type=1400 audit(1738100342.499:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:39:02 executing program 6: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xfff}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x1, 0x9, 0x20, 0x6}, {0x7, 0x8, 0x18, 0x20}, {0x4, 0x9, 0xbb, 0xdb}, {0x167, 0x7f, 0x8, 0x5}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) getgroups(0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) fchown(r1, 0xffffffffffffffff, r5) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) r6 = syz_open_dev$vcsa(&(0x7f0000000500), 0x2, 0x200001) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000540)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000580)=@generic={0x1, 0x6, 0x10001}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x9, 0x1, 0xfff, 0x26baea6, 0x8000, 0x401, 0x8, 0x0, 0x200, 0x8, 0x8, 0x100000000, 0x5a, 0x541}}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000015c0)={0x8, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x1, 0x5, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x310) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001980)='/proc/locks\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x1010, &(0x7f00000019c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@access_user}, {@cache_loose}, {@version_L}, {}, {@access_user}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) r8 = creat(&(0x7f0000001b80)='./file0\x00', 0x11) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000001bc0)) 21:39:02 executing program 5: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0xc010) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240001c0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x180, 0xd, 0x9, 0x5, 0x70bd26, 0x25dfdbfe, {0xc, 0x0, 0x9}, [@nested={0x95, 0x6b, 0x0, 0x1, [@typed={0x18, 0x96, 0x0, 0x0, @binary="049bd87576f87096b87564008d3763b8f60d0905"}, @generic="2d080b838c160391b83d1c19d1d178ada14607d0758441be99ae45b05094cfdf410d4b9ff992185ce4875f16", @generic="9596a4ce2425c421445f4af9ad3596e99b07e97ac3212406db464c32ea86edaa7353aca9677a942515ebe782fe", @typed={0xa, 0x41, 0x0, 0x0, @str='\\@/#@\x00'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x36, 0x0, 0x0, @binary="52180b221629d983"}]}, @generic="095c44d4620ad54621f9f6675d67ec06c16bad74aae6eebe4d5f1f2b5807cd99b59a8e52bb4bba105b300fae40a6f2539e0d8d3798f9f0aafdbb9bbf7862316f7140b5087934206f30fba2b3772e996d4c7fec52d831749cf948b4920838e0cc51d85b7af1b29299ebeb1df7", @typed={0x8, 0x66, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x20}, @typed={0x8, 0x63, 0x0, 0x0, @uid=r2}, @nested={0x51, 0x52, 0x0, 0x1, [@generic="ae7bd6e12dcf298ab8e7aed7a6b079c181c58bf0df2a083823376a6b2be5e4ee6aad278b41859a0d95679a8b994f0f2b1681af5eeff89f54569349dbb5fe34eed1c9329feda52f552dd9fe2164"]}]}, 0x180}, 0x1, 0x0, 0x0, 0x2400c041}, 0x8080) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0xe53, 0x0, 0xdf0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x200}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4400}, 0x4040040) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f00000007c0)=0x1) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) recvmmsg$unix(r3, &(0x7f0000003980)=[{{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/76, 0x4c}, {&(0x7f0000000980)=""/130, 0x82}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/23, 0x17}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d40)=""/41, 0x29}, {&(0x7f0000000d80)=""/155, 0x9b}, {&(0x7f0000000e40)=""/14, 0xe}, {&(0x7f0000000e80)=""/8, 0x8}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/49, 0x31}], 0x1, &(0x7f0000000f80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000001040)=""/163, 0xa3}, {&(0x7f0000001100)=""/52, 0x34}], 0x2}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/137, 0x89}], 0x2, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002340)=""/187, 0xbb}], 0x1, &(0x7f0000002440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002480)=""/99, 0x63}, {&(0x7f0000002500)=""/103, 0x67}, {&(0x7f0000002580)=""/44, 0x2c}, {&(0x7f00000025c0)=""/208, 0xd0}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000003740), 0x6e, &(0x7f0000003900)=[{&(0x7f00000037c0)=""/143, 0x8f}, {&(0x7f0000003880)=""/95, 0x5f}], 0x2, &(0x7f0000003940)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0xa, 0x100, &(0x7f0000003c00)) r9 = fcntl$dupfd(r3, 0x0, r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000003cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x2c, r4, 0x310, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x881) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x48005}, 0x40000) r10 = signalfd(r8, &(0x7f0000003e00)={[0x9e71]}, 0x8) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x54, 0xe, 0x6, 0xc03, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) flock(r10, 0x0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008892}, 0x4088810) 21:39:02 executing program 7: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004004) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2148}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x12c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xe4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xcc, 0xb, "c93c84e7cdaa4f4f7e292059bc4bc745c72847fdbd4f9d829adae71e001b242bc3eeb992aa84ee426cfd45ffe16e0fc09c28874ffa282b730eaf068fc8212e5bda6ee5b646cee06a7fbeb6fa29f6409187e8e258bf6df931c7a15ff0f56df32d4966cb8e8ef257c1f3e97d706e7e976ae8c733d75b981e1157309eb3f17b95654518baaf227d38739738a231c5eb19464606f9f79f137bd12436745062eda653ca4439fec188d910776acbb6bfa0f85834fb87c3bc641c71355c48a6790bac259a322e7cb66c10e1"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffd}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24040840}, 0x48044) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc, 0xa8, @random="5d79084d026d2999"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40054) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000010) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x10400, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044004}, 0x24008000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000f40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b40)={0x38c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "ee3f918207ebf9"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4e, 0xfc, "6445e4de0e7ad8e4e603d328b3c7905a9d25483d9e25bf9723c9c0dfd5e36d71ed2e1bed7bb505b2f959838b36698836c47778e36bfd9a05b6ccbde2281933c80db458c050aa1744ec09"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd70c}, @NL80211_ATTR_FILS_ERP_REALM={0xee, 0xfa, "032da85da8639daa8177ceb3a5705ce126f3c30e72ddb27f5c39de84b546c198aa07976101b6688890195b0cc754a818e22c064190c767158575f76ea8a90ea9bff7823a9d586157cd0094db300e470cf164dcfdd5979c3f4be63de6df149363a477c78dc4df822ab1fc46ba048b7a21a4344f615470041a687f61d2dbd7f0279a1176f3bbb193a5082014b3183d36d16fb0e47480005cb422e9c5e2dc35622758822b5269b8aa1936676930f932c1c1ee5e72d77ca67d43dc36f311974b132a0f0a812dfc9568fcc42d1061308933a118741f61d25fc963eeafb25227fd98ac4a2c7b0640f9b1d95559"}, @NL80211_ATTR_FILS_ERP_RRK={0x85, 0xfc, "db066e9790579b08c42f407c82d0ae125ab10ea9f1738ced0b2d98734558b2cfce9ab85371a919166137c36ecf913849e1bf33ebb4849298b0b02e26fdd6d6b4f9d6b996c4445d6372910e732193fd5698904ec851cce4478e03176a0a7d6ac3000feb1c075f6a0ab480997c114d0850c47b3eabe918cf4130a2663dd95af32126"}, @NL80211_ATTR_FILS_ERP_REALM={0x16, 0xfa, "227d6fc12d39838e30b5250724094a332367"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x800}], @NL80211_ATTR_IE={0x166, 0x2a, [@mic={0x8c, 0x18, {0x37f, "ae41b0cfd532", @long="6fcc3b527c0dd7873bd07304a7ccc760"}}, @random={0x9, 0x4d, "73452158d3a048869190b51d789574b79cc3c32001aea8a1569334d781129a3466aa3c2f61af83a8f8cffb5f99c586a9f4808b34e14053100e945b98c08a51d2dd7436a9839c13278056f862d9"}, @erp={0x2a, 0x1, {0x1}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x9c}, @rann={0x7e, 0x15, {{0x1, 0x2d}, 0x9, 0x0, @broadcast, 0x3ff, 0xc97, 0x1000}}, @tim={0x5, 0xb3, {0x0, 0x1b, 0x5, "2c7b0f271c839bf29e28bd9d281a41cca33bd97c8881e19c715cbc6797ec705fb9995fefc21c81d5c33b2fc324f0f32c9b1709b42626f30b40a8aac083d84c0e20183ebdc938032fe0c9449a9c67bdfb2401ed87cbec565f41266d74924e775f8ad73472245d81b7502eef8930693068cc401662c1de8d65a38766871b35c35f5f1827925fdd5af754e2c417f0619f99c19c4b704c42cf564af73361cd795ab712e077aeaa729380086d5a1908413835"}}, @challenge={0x10, 0x1, 0xaa}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0x6, 0xbd}}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x42ee}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c042}, 0x800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000001540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000001180)={0x360, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffb378}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63de}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bacc6f8e47806350f07434a35e88594698e04634d40a4feb9bfe3217cb4e14ba18"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "c47eee3c3b3426fbb4c466252500949eda760f32d2"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "84055bf977b8fb55b310bdf8a42d152e99a3ea20e7e0d1c8604c72248ac026"}}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "e826117ce634d2994e87c1a411ee1ccf90e9b23bc8e7a29379c626030cd809a05d44123a04503ee5346ef819ea20fa1d31802489fd5a676f20149be91a2fcbfa19c22aad117b57f6111e32b05c454c42a310f255c85c5871048c1ebc175656309aec1c61ea745b72909fc7e3b71d3f5f5adf41c984a53b0202cf620ff4563ef7a89e2a95dd81a4967dd7a4e09467ddfede7a1ff7662afa6ac65453c19aecb44d00cc85cefc7b7cb0b485108d5881034031681d853a5aec52649fad6819da20ee8e5588274fa52af9e5eff5f44babfbf926e0695fd10d13ee0f6f20d184449c"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ef8d198af1b02ab21667606f352def368d6748d57e14"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd8}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r3) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) [ 87.690832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.696249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.700772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.718200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.721311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.728162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.734510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.736682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.739214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.741174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.743928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.747321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.749989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.752799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.755546] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.757773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.763981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.766313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.768069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.790014] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.792314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.796609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.810843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.812127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.819236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.824758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.826214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.829743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.831358] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.836066] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.839907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.851079] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.853055] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.856023] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.861738] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.866197] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.868000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.889611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.891241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.906745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.911632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.913848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.922668] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.923999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.928789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.956971] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.961751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.967783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.823043] Bluetooth: hci3: command tx timeout [ 89.886496] Bluetooth: hci0: command tx timeout [ 89.887521] Bluetooth: hci1: command tx timeout [ 89.951631] Bluetooth: hci4: command tx timeout [ 89.951701] Bluetooth: hci2: command tx timeout [ 90.015019] Bluetooth: hci7: command tx timeout [ 90.016041] Bluetooth: hci6: command tx timeout [ 90.016489] Bluetooth: hci5: command tx timeout [ 91.870490] Bluetooth: hci3: command tx timeout [ 91.934797] Bluetooth: hci1: command tx timeout [ 91.934940] Bluetooth: hci0: command tx timeout [ 91.998551] Bluetooth: hci4: command tx timeout [ 91.999522] Bluetooth: hci2: command tx timeout [ 92.062939] Bluetooth: hci5: command tx timeout [ 92.063002] Bluetooth: hci7: command tx timeout [ 92.064145] Bluetooth: hci6: command tx timeout [ 93.918493] Bluetooth: hci3: command tx timeout [ 93.982566] Bluetooth: hci0: command tx timeout [ 93.983614] Bluetooth: hci1: command tx timeout [ 94.046594] Bluetooth: hci2: command tx timeout [ 94.047497] Bluetooth: hci4: command tx timeout [ 94.110472] Bluetooth: hci7: command tx timeout [ 94.110922] Bluetooth: hci5: command tx timeout [ 94.111190] Bluetooth: hci6: command tx timeout [ 95.967475] Bluetooth: hci3: command tx timeout [ 96.030522] Bluetooth: hci1: command tx timeout [ 96.030971] Bluetooth: hci0: command tx timeout [ 96.095552] Bluetooth: hci4: command tx timeout [ 96.096007] Bluetooth: hci2: command tx timeout [ 96.158524] Bluetooth: hci5: command tx timeout [ 96.158992] Bluetooth: hci6: command tx timeout [ 96.159477] Bluetooth: hci7: command tx timeout [ 145.416240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.417660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.770431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.771109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.096874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.097929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.668608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.669261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.107780] [ 147.108001] ====================================================== [ 147.108508] WARNING: possible circular locking dependency detected [ 147.109018] 6.13.0-next-20250128 #1 Not tainted [ 147.109412] ------------------------------------------------------ [ 147.110591] kworker/u8:1/65 is trying to acquire lock: [ 147.111749] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.114147] [ 147.114147] but task is already holding lock: [ 147.115380] ffff888018fc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 147.117443] [ 147.117443] which lock already depends on the new lock. [ 147.117443] [ 147.118104] [ 147.118104] the existing dependency chain (in reverse order) is: [ 147.118701] [ 147.118701] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 147.119257] __mutex_lock+0x13d/0xb50 [ 147.119652] wiphy_register+0x1b2e/0x25d0 [ 147.120075] ieee80211_register_hw+0x23a4/0x3d60 [ 147.120534] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 147.121014] init_mac80211_hwsim+0x389/0x870 [ 147.121464] do_one_initcall+0xf9/0x640 [ 147.121884] kernel_init_freeable+0x53d/0x7a0 [ 147.122341] kernel_init+0x1e/0x2d0 [ 147.122702] ret_from_fork+0x48/0x80 [ 147.123070] ret_from_fork_asm+0x1a/0x30 [ 147.123488] [ 147.123488] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 147.124007] __lock_acquire+0x29fd/0x4580 [ 147.124421] lock_acquire+0x19b/0x520 [ 147.124804] __mutex_lock+0x13d/0xb50 [ 147.125196] unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.125728] unregister_netdevice_queue+0x224/0x2e0 [ 147.126200] _cfg80211_unregister_wdev+0x57b/0x700 [ 147.126676] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 147.127146] ieee80211_unregister_hw+0x55/0x3a0 [ 147.127596] hwsim_exit_net+0x3a0/0x730 [ 147.127989] ops_exit_list+0xb3/0x180 [ 147.128371] cleanup_net+0x546/0xad0 [ 147.128747] process_one_work+0x8ee/0x1a10 [ 147.129182] worker_thread+0x674/0xe70 [ 147.129588] kthread+0x3ab/0x720 [ 147.129958] ret_from_fork+0x48/0x80 [ 147.130324] ret_from_fork_asm+0x1a/0x30 [ 147.130741] [ 147.130741] other info that might help us debug this: [ 147.130741] [ 147.131374] Possible unsafe locking scenario: [ 147.131374] [ 147.131856] CPU0 CPU1 [ 147.132234] ---- ---- [ 147.132611] lock(&rdev->wiphy.mtx); [ 147.132948] lock(rtnl_mutex); [ 147.133433] lock(&rdev->wiphy.mtx); [ 147.133965] lock(rtnl_mutex); [ 147.134266] [ 147.134266] *** DEADLOCK *** [ 147.134266] [ 147.134752] 4 locks held by kworker/u8:1/65: [ 147.135122] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 147.135991] #1: ffff88800ecb7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 147.136819] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 147.137587] #3: ffff888018fc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 147.138465] [ 147.138465] stack backtrace: [ 147.138838] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250128 #1 [ 147.138875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 147.138896] Workqueue: netns cleanup_net [ 147.138937] Call Trace: [ 147.138947] [ 147.138958] dump_stack_lvl+0xca/0x120 [ 147.139016] print_circular_bug+0x47b/0x750 [ 147.139062] check_noncircular+0x2e9/0x3c0 [ 147.139102] ? srso_return_thunk+0x5/0x5f [ 147.139159] ? __pfx_check_noncircular+0x10/0x10 [ 147.139200] ? hlock_class+0x4e/0x130 [ 147.139230] ? mark_lock+0xac/0xed0 [ 147.139270] ? srso_return_thunk+0x5/0x5f [ 147.139325] ? sched_clock+0x37/0x60 [ 147.139382] ? lockdep_lock+0xba/0x1b0 [ 147.139439] ? __pfx_lockdep_lock+0x10/0x10 [ 147.139501] __lock_acquire+0x29fd/0x4580 [ 147.139554] ? __pfx___lock_acquire+0x10/0x10 [ 147.139597] ? lock_release+0x20f/0x6f0 [ 147.139641] ? __pfx_lock_release+0x10/0x10 [ 147.139689] lock_acquire+0x19b/0x520 [ 147.139732] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.139781] ? __pfx_lock_acquire+0x10/0x10 [ 147.139825] ? srso_return_thunk+0x5/0x5f [ 147.139881] ? lock_release+0x20f/0x6f0 [ 147.139924] ? srso_return_thunk+0x5/0x5f [ 147.139980] ? lock_is_held_type+0x9e/0x120 [ 147.140035] ? srso_return_thunk+0x5/0x5f [ 147.140094] __mutex_lock+0x13d/0xb50 [ 147.140146] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.140191] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.140237] ? srso_return_thunk+0x5/0x5f [ 147.140293] ? synchronize_rcu_expedited+0x38a/0x420 [ 147.140336] ? __pfx___mutex_lock+0x10/0x10 [ 147.140390] ? __pfx_autoremove_wake_function+0x10/0x10 [ 147.140445] ? srso_return_thunk+0x5/0x5f [ 147.140500] ? kasan_quarantine_put+0x84/0x1e0 [ 147.140560] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 147.140595] ? srso_return_thunk+0x5/0x5f [ 147.140655] unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.140700] ? __virt_addr_valid+0x2e8/0x5d0 [ 147.140753] ? __pfx_lock_release+0x10/0x10 [ 147.140798] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 147.140844] ? find_held_lock+0x2c/0x110 [ 147.140901] ? srso_return_thunk+0x5/0x5f [ 147.140959] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 147.141019] ? srso_return_thunk+0x5/0x5f [ 147.141074] ? lock_release+0x20f/0x6f0 [ 147.141118] ? __pfx_lock_release+0x10/0x10 [ 147.141161] ? srso_return_thunk+0x5/0x5f [ 147.141216] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 147.141264] ? srso_return_thunk+0x5/0x5f [ 147.141324] unregister_netdevice_queue+0x224/0x2e0 [ 147.141368] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 147.141411] ? up_write+0x195/0x520 [ 147.141466] _cfg80211_unregister_wdev+0x57b/0x700 [ 147.141518] ? srso_return_thunk+0x5/0x5f [ 147.141577] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 147.141624] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 147.141663] ? srso_return_thunk+0x5/0x5f [ 147.141718] ? srso_return_thunk+0x5/0x5f [ 147.141773] ? synchronize_rcu+0x1ff/0x260 [ 147.141816] ieee80211_unregister_hw+0x55/0x3a0 [ 147.141861] hwsim_exit_net+0x3a0/0x730 [ 147.141903] ? __pfx_hwsim_exit_net+0x10/0x10 [ 147.141943] ? srso_return_thunk+0x5/0x5f [ 147.141998] ? netdev_run_todo+0x788/0x1040 [ 147.142047] ? __pfx_hwsim_exit_net+0x10/0x10 [ 147.142090] ops_exit_list+0xb3/0x180 [ 147.142132] cleanup_net+0x546/0xad0 [ 147.142177] ? __pfx_cleanup_net+0x10/0x10 [ 147.142230] process_one_work+0x8ee/0x1a10 [ 147.142295] ? __pfx_lock_acquire+0x10/0x10 [ 147.142339] ? __pfx_process_one_work+0x10/0x10 [ 147.142398] ? srso_return_thunk+0x5/0x5f [ 147.142453] ? move_linked_works+0x172/0x270 [ 147.142498] ? srso_return_thunk+0x5/0x5f [ 147.142553] ? assign_work+0x196/0x240 [ 147.142610] worker_thread+0x674/0xe70 [ 147.142668] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 147.142719] ? srso_return_thunk+0x5/0x5f [ 147.142775] ? __pfx_worker_thread+0x10/0x10 [ 147.142834] kthread+0x3ab/0x720 [ 147.142885] ? __pfx_kthread+0x10/0x10 [ 147.142937] ? srso_return_thunk+0x5/0x5f [ 147.142992] ? finish_task_switch.isra.0+0x206/0x840 [ 147.143043] ? __pfx_kthread+0x10/0x10 [ 147.143097] ret_from_fork+0x48/0x80 [ 147.143128] ? __pfx_kthread+0x10/0x10 [ 147.143180] ret_from_fork_asm+0x1a/0x30 [ 147.143246] [ 149.543983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.548458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.550299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.557068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.562899] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.564757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.612846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.625774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.633651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.645643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.652680] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.655798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.738249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.747235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.751016] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.753090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.756780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.762722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.763016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.765805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.767705] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.770619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.774946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.779187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.793444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.797591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.813467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.815138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.816275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.817819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.876915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.890911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.891612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.892653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.893463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.894974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.896116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.897090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.950694] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.978991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.994192] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.996731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.002910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.007841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.009970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.012943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.015658] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.017478] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.647431] Bluetooth: hci0: command tx timeout [ 151.710489] Bluetooth: hci1: command tx timeout [ 151.838741] Bluetooth: hci4: command tx timeout [ 151.839227] Bluetooth: hci3: command tx timeout [ 151.839249] Bluetooth: hci2: command tx timeout [ 151.967451] Bluetooth: hci6: command tx timeout [ 152.095230] Bluetooth: hci7: command tx timeout [ 152.095363] Bluetooth: hci5: command tx timeout [ 153.695460] Bluetooth: hci0: command tx timeout [ 153.758426] Bluetooth: hci1: command tx timeout [ 153.886460] Bluetooth: hci4: command tx timeout [ 153.886502] Bluetooth: hci2: command tx timeout [ 153.886938] Bluetooth: hci3: command tx timeout [ 154.016411] Bluetooth: hci6: command tx timeout [ 154.142457] Bluetooth: hci7: command tx timeout [ 154.142525] Bluetooth: hci5: command tx timeout [ 155.743325] Bluetooth: hci0: command tx timeout [ 155.806444] Bluetooth: hci1: command tx timeout [ 155.935422] Bluetooth: hci4: command tx timeout [ 155.935907] Bluetooth: hci2: command tx timeout [ 155.936314] Bluetooth: hci3: command tx timeout [ 156.062460] Bluetooth: hci6: command tx timeout [ 156.190506] Bluetooth: hci5: command tx timeout [ 156.191094] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:40:03 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf412c0 RCX=ffffffff81664972 RDX=ffff88801670b780 RSI=ffffffff8166494c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88803a7777c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9e8259 R13=ffff88806cf412c8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166494e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f654d942000 CR3=0000000016b78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000001300000008000055a459dba830 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=4145525f4b434f4c425f57485f4c4c49 XMM05=46520068746f6f7465756c623d455059 XMM06=414e5f4c4c494b4652006c6c696b6672 XMM07=66722f346963682f68746f6f7465756c XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800ecb6c90 R8 =0000000000000000 R9 =ffffed100134f046 R10=0000000000000072 R11=3038383866666666 R12=0000000000000072 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005636c36d1fd8 CR3=0000000013744000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff0000000d000055a459df63a0 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=4c414954494e495f4345535500313638 XMM06=59545645440068746f6f7465756c623d XMM07=63682f346963682f68746f6f7465756c XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000