Warning: Permanently added '[localhost]:6287' (ECDSA) to the list of known hosts. 2025/01/29 03:13:36 fuzzer started 2025/01/29 03:13:37 dialing manager at localhost:40187 syzkaller login: [ 66.521566] cgroup: Unknown subsys name 'net' [ 66.651555] cgroup: Unknown subsys name 'cpuset' [ 66.683392] cgroup: Unknown subsys name 'rlimit' 2025/01/29 03:13:54 syscalls: 200 2025/01/29 03:13:54 code coverage: enabled 2025/01/29 03:13:54 comparison tracing: enabled 2025/01/29 03:13:54 extra coverage: enabled 2025/01/29 03:13:54 setuid sandbox: enabled 2025/01/29 03:13:54 namespace sandbox: enabled 2025/01/29 03:13:54 Android sandbox: enabled 2025/01/29 03:13:54 fault injection: enabled 2025/01/29 03:13:54 leak checking: enabled 2025/01/29 03:13:54 net packet injection: enabled 2025/01/29 03:13:54 net device setup: enabled 2025/01/29 03:13:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 03:13:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 03:13:54 USB emulation: enabled 2025/01/29 03:13:54 hci packet injection: enabled 2025/01/29 03:13:54 wifi device emulation: enabled 2025/01/29 03:13:54 802.15.4 emulation: enabled 2025/01/29 03:13:54 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 03:13:56 starting 8 fuzzer processes 03:13:56 executing program 0: sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10a, 0x69}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "654153aad0"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6f6220a20d"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x5800}, 0x80) clock_gettime(0x0, &(0x7f00000069c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/85, 0x55}], 0x3}, 0x8}, {{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/23, 0x17}], 0x3}, 0x8}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/144, 0x90}], 0x4}, 0x401}, {{&(0x7f0000002900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002980)}, {&(0x7f00000029c0)=""/246, 0xf6}, {&(0x7f0000002ac0)=""/10, 0xa}, {&(0x7f0000002b00)=""/34, 0x22}], 0x4, &(0x7f0000002b80)=""/51, 0x33}, 0x1ff}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002bc0)=""/151, 0x97}, {&(0x7f0000002c80)=""/15, 0xf}, {&(0x7f0000002cc0)=""/144, 0x90}, {&(0x7f0000002d80)=""/113, 0x71}, {&(0x7f0000002e00)=""/179, 0xb3}, {&(0x7f0000002ec0)=""/216, 0xd8}, {&(0x7f0000002fc0)=""/142, 0x8e}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/4096, 0x1000}], 0x9}, 0x2}, {{&(0x7f0000005140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006740)=[{&(0x7f00000051c0)=""/212, 0xd4}, {&(0x7f00000052c0)=""/87, 0x57}, {&(0x7f0000005340)=""/9, 0x9}, {&(0x7f0000005380)=""/156, 0x9c}, {&(0x7f0000005440)=""/178, 0xb2}, {&(0x7f0000005500)=""/135, 0x87}, {&(0x7f00000055c0)=""/76, 0x4c}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/247, 0xf7}], 0x9, &(0x7f0000006800)=""/51, 0x33}, 0x5}], 0x6, 0x20, &(0x7f0000006a00)={r0, r1+60000000}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000006a80), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000006b40)={&(0x7f0000006a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006b00)={&(0x7f0000006ac0)={0x40, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006b80), 0x410000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006c00), r2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000006cc0)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006c80)={&(0x7f0000006c40)={0x38, r6, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x55}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40400d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006e40)=@IORING_OP_WRITEV={0x2, 0x2, 0x4004, @fd=r5, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006d00)="d960fbc8b746dad28b57921af5412dc4f77403d51b0d456e55bba5fbefb3a01a54b61b45af39f2dcf8e5e82385f2a1b13b72c391e3e11c6c649f84bc9e3834a1f33f597e2d38c6657309b5455108b5303d0a9f7946b3bd1f49a0a972c63d3562261626f047f066d32fbbe9e36b4f1366151fc71e456fc3b3c168def456a6c47473f944d7a1fc6c1f250bbb30ba2032433ae32fb7148cab8b0014ba9c8a7b354f9048fb49a736343d30f90978e3280b2221eb2a6d178722127a3f5b96271ce9459a26877cfb13e0e77b75426fa0a996b63a923a09e09dd0132998e0ca01eb3ea7522a8eaa3b725bfed06461c9f7a2bb79c4", 0xf1}], 0x1, 0x1, 0x1, {0x1}}, 0xc5b) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000006ec0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000006f80)={&(0x7f0000006e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006f40)={&(0x7f0000006f00)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000070c0), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f00000072c0)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007280)={&(0x7f0000007100)={0x170, r9, 0x32, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6621, 0x72}}}}, [@NL80211_ATTR_FRAME={0x121, 0x33, @mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xa42}, @broadcast, @broadcast, @from_mac=@device_b, {0x0, 0xcd2}}, @ver_80211n={0x0, 0xff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb}, @val={0x2d, 0x1a, {0x40, 0x1, 0x2, 0x0, {0x8, 0x6, 0x0, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x40}}, @val={0x72, 0x6}, [{0xdd, 0xd0, "7814c66b28501bbb7fa88948fd7019c0254813959170682fb8a32bfacb26fa8a7ee9db7f3699f4af4691840b60fd064ac5d0e396b5cf94d5bd30ca0f4e0a91dc88e97a96c410e6918fbb5261abdd271e1b9b546aaf8c17e14e1cf1ce1abd90dbdcd0547020b64512bebf5099dc95e6852db2ac20ab740bf0712e6b2415ddc9f4096e776c2b2612b019f35846d471b00247bc177466d7a3b5d26388cd81b0a819008115c74fc5af94a33a215f6fa306bc8f5b7903e3378ff29b85134478038378a206dc627f22582b44e150b02c71d853"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) getpeername(r8, &(0x7f0000007300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000007380)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000007480)={&(0x7f00000073c0), 0xc, &(0x7f0000007440)={&(0x7f0000007400)={0x24, r7, 0xbff80dcc8eb710bc, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc428c9834552b612) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000007580)={&(0x7f00000074c0), 0xc, &(0x7f0000007540)={&(0x7f0000007500)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000007700)={&(0x7f00000075c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000076c0)={&(0x7f0000007640)={0x5c, 0x0, 0x502, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44010) 03:13:56 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24048804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000084) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x14, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x8004) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c005}, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x407, 0x46}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e7eb253d1f98ec83ce00a0af24"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2928bc30fd"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "71efa29a867c594f99c480d137"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e799f80f5827942b8dea337bbe"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x66}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0a1daa5953"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "67928dc0"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x41) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4090) socketpair(0x2a, 0x4, 0xfffffffa, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x24}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000090}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20044000) 03:13:56 executing program 2: waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000000)) waitid(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x1000000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)={0x4ac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x47a, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_a, @random="d929e74e33db", @device_b, {0x0, 0x3}}, {0x4, 0x1, 0x2, 0x0, 0x7}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1}, {0x80}, @device_a, @device_a, @random="f66285c79eeb", {0xf, 0x3}}, {0x9, 0x1, 0x2, 0x1, 0x6}}}, @a_msdu=[{@broadcast, @broadcast, 0xd6, "76f70d8706fe0c776dc20df3a62b60dad2cdb19059c2202e2debc159498f4955d8da82999fd8463780e6ee879505d11873bb52e4ee42efe1714d09df51a4f906594accc38d21e5da0d6dc4b280c32f1b698b177c8f9fe52a97fd9ca810c18883627e78a2b738f5d23c50b0e46bd38d37c5bcbe0083cb2500f790740c63d3b07b8f1d0a260e2ab269ff30f0ba71dab10a90cb116562dd1f06667cce8d81f5495993d1f432089785a6774d4c3662ae568f9e9df5174e8a8e550e86bac3c3a9ed868b48828e26cdf42c73dd573931231a40b9e13a972351"}, {@device_a, @device_b, 0xa7, "92d94d179287d5701a47a02d22d69a7c2526438142b54e7561298fa78596956565282687afdc4b9ea9293833de4c99a019b941fa37acac13a47e68e14c07004c01ee2a84d1171262d9c2970b50640796e60669d61964f4044cd159af347ed3303bab29eb6640cceddff0efbb0fafe6bb22a336c169b1ba965ca130f572a6f4426220d9467fcfcc312e29daa52d77e89a71a592847e548aac8988a4ce0af4e7faeeb3849dfe2651"}, {@broadcast, @broadcast, 0xf3, "2bb31340e62aa52508b00b20096da5fcf083608c73bdca65b6816aa5cfc9b05a709eddfcffced093abe4870a18906d39dba1ec20e38fc6def81e0ebf64d8fd2bf766beeaa1bcf26ce920b2182aea259630d6e3da211561c5420a2493c15d2cafd8c47fd07a2880f23dedcc144401d869cb9a5c6c8ed574e0462d43690a7a1bcb7bfb6f076590f539f84915cb65f3b69a695fd3fd7a200c0160f17d052dfa020bb0cba7b090414687471927583c475fa93cee670d108de75993cfdf4b3f576793215b87da9ab18b81a649fa13fc957e5aac6470d7966d6798dfa9c71e639f3d6cdf690236084c3a21519c7dc287ebfbd45b63a9"}, {@broadcast, @device_a, 0xd9, "572f0d452861eb068bdad58184b956b571e1a3851351df516478bdf3928b24ac7e527dceae2a52800a5e48130c36ece5cf4299e7356faedbf26d3a860dc05754f6295d2ac151853f762c51d08cb61cfda3b4dc0f4230fdfe2287dbca4e746c6dfb072bd826549c8f9661c79e4cfbc66b550e1c8af59f7c331654920d516f72da850fe1fe1cdb877ee019e693cf3d2c047ee4235bb7950871da01b532ca0f7e7cc540cba4f232e7e30e47b60c2f9d3b4dbb412b15297faf65b1575e81fda7d3cd5db8336ff86a693544b8138d5092d09ca8083009dbe6ddfe29"}, {@broadcast, @device_a, 0x21, "6168cc44f2234c2f74cbf44c7e2a1891a41444f34d468644eb446d2c6af1608c1e"}, {@device_b, @broadcast, 0x3f, "59923c60dcf14ab05d914e40ce5c7cdf9fd79669d9bb1680aa6f1f96825fc09475cf608f381f9b602954f4d56615af1effa39cf9754cc069ec53b6bcb20070"}, {@device_a, @broadcast, 0x26, "c38cdfe018923fabdea2b2e5ce905c7a26701a055529b4424f44d9ebfeb22328b236c8c2f5f4"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6000}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x40000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4050) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x20000010) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000c40)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000e40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/198, 0xc6, 0x0, &(0x7f0000000d80)=""/129, 0x81}, &(0x7f0000000e80)=0x40) socketpair(0x2a, 0x2, 0xa11, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10062044}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x24, r7, 0x81d, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002c40)={'batadv_slave_1\x00'}) [ 85.986344] audit: type=1400 audit(1738120436.787:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:13:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c051}, 0x20000041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000140)={'ip6gretap0\x00', @ifru_addrs=@phonet}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) getpeername(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000240)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x1}, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x54f}, @device_b, @random="cf140fd775e0"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x6}, @broadcast}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x4100, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x6, &(0x7f0000000640)=""/205, &(0x7f0000000740)=0xcd) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044040) socketpair(0x5, 0x6, 0xf060, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000900)="21d35c08598c402a0ca519f70e024115", 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x179b1037, 0x6b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000a40)="767daaa43d0bcb9f3236e91b317be843", 0x10) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x851}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4050040) 03:13:56 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb1d, 0x3d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x400) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x511, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044004}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x11, 0x0, "249a69cc797bb1f6e15a7eebe458347be82f60b83d22455d3b06f77603506dfc99550ce8d305ac1ef36b3b426075b63f58d1e10e676eb6cbddec350ff48c92034e7b07a9179da18ede9e12c7bf674897"}, 0xd8) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x33c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x37, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0xa}, 0x1f, 0x4, @device_a, 0x8000, 0x3}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x6, 0x0, {0x8000, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x6, 0x7}}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x277, 0xf, [@measure_req={0x26, 0xd3, {0x7, 0x4, 0x10, "54c199a8aaf4bd60746360050b23ca8ef01cfa1816a0327cc046532cc97faacd1dbdcda082e5271ffb13e0ceac3fad886bca16ec9f6cd1bc26f8586babc19fbba60cddc986256c30c772229fe5b03b8c5d5a83fdef533bcacbf25fe0d7946572783d557fda62ec8065e69af622655833f9f7bed7cb8bf9ac7a81b78b4db2ccb3cf62b80e74a3308bd30b726cc6422c5323cb835ff3f649dd6a42f5f401d88ffb565fc92c07e659bffb1f9c83807f2abadd72a6c87c7f178084853e42a99dce4ba064a1ac9a88ce481b556f4dfe318e82"}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x80, 0xff, @device_b, 0x1, 0x7, 0x4}}, @peer_mgmt={0x75, 0x4, {0x1, 0xc41, @void, @void, @void}}, @random_vendor={0xdd, 0xe9, "3dd01d6a160760357894e8d099c229d2c7a0fa44816d491df05e9e6698f4ddbacf057a5edaa6276122ec5c0468150b26041dc0f8461e58b6155a74409b0c79dddeeb6918cf7d9b7080356ebbf5f1980f920a7976692b959b3f8131b7b1b9a3cde02e08326b0f72e00cf8eae872290e70d09a869c75dd53b813c31892be317a48716efb793ff3a693f1168a87f77a17e82d07ccca0e60279a3796890c93a4344d93db9650a79b4d8a1e79dde5f173a363a5d10ebaef4f72056f9752baf263449e3458cfdf0ed7d37faef9c24ce929f4931970bad8be6e3fd1ec9c0d0a111540a0d97c04878c501f6836"}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x88, "8597919cf630c0616c6006cb06033e6b136ae50be4be2eb9e98d698da257bd952023a77d3f57187d4da65ad96b601e46b6b1c1270fcea1b464a7d90e85a42da63ebbe6e1ead0ed1d070ef76a860030a737fdc956a0e479d427d3dcce9e7793140d8ddd0fd3e03a7adfbf7f892b8c228f169ba756e293aefa375b86c08aaece8b18932e6ef3edc696"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x5d, 0x80, [@chsw_timing={0x68, 0x4, {0x4, 0xf2}}, @random_vendor={0xdd, 0x48, "a8d945e8fcec862723a06dbe161300ec6743833f63a68a2066898f167c175f9dd0aecf074caa13e1910fe3a01097ffa3a90b6ee50f1b87d2e5431fec94e2d6cc0473f59c17152234"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xfa, 0x40}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x44044}, 0x41) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000a00)={@in6={{0xa, 0x4e20, 0x0, @mcast1, 0x4}}, 0x0, 0x0, 0x41, 0x0, "2fab3346b698fbdfcd4462fdafd525accacfcd3ccb0bbe6707ff3a1ca4a474cfaa61d142997ebc276ee7b3e46a74be4e281a44c6f7db931cc77f267429aa5ba1e32959bb7737e1011eb799a10faf9eb9"}, 0xd8) socketpair(0x10, 0x4, 0xffffffdf, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000d00)=@req={0x28, &(0x7f0000000cc0)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000c80)={0xffff, 0x0, 0x2, 0x2, 0x5, 0x400, 0x3f}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)=""/149, 0x95}, {&(0x7f0000000e00)=""/240, 0xf0}, {&(0x7f0000000f00)=""/238, 0xee}, {&(0x7f0000001000)=""/225, 0xe1}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/61, 0x3d}, {&(0x7f0000001180)=""/9, 0x9}], 0x7}, 0xfffffc01}, {{&(0x7f0000001240)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/148, 0x94}, {&(0x7f0000001380)=""/113, 0x71}, {&(0x7f0000001400)=""/2, 0x2}, {&(0x7f0000001440)=""/246, 0xf6}, {&(0x7f0000001540)=""/7, 0x7}], 0x5, &(0x7f0000001600)=""/19, 0x13}, 0x7}, {{&(0x7f0000001640)=@x25={0x9, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/83, 0x53}, {&(0x7f0000001740)=""/215, 0xd7}], 0x2, &(0x7f0000001880)=""/224, 0xe0}, 0xfffffffb}, {{&(0x7f0000001980)=@qipcrtr, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001a00)=""/27, 0x1b}, {&(0x7f0000001a40)=""/142, 0x8e}, {&(0x7f0000001b00)=""/196, 0xc4}, {&(0x7f0000001c00)=""/205, 0xcd}, {&(0x7f0000001d00)=""/228, 0xe4}, {&(0x7f0000001e00)=""/225, 0xe1}, {&(0x7f0000001f00)=""/100, 0x64}, {&(0x7f0000001f80)=""/94, 0x5e}, {&(0x7f0000002000)=""/158, 0x9e}], 0x9, &(0x7f0000002180)=""/219, 0xdb}, 0x9}], 0x4, 0x20a0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002380), 0x2040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x30, r6, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000023c0), 0x4) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 03:13:56 executing program 5: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0xd1, 0x840040) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x980) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000100)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/74, 0x4a, 0x0, &(0x7f00000001c0)=""/244, 0xf4}, &(0x7f0000000300)=0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000900)=[@sack_perm, @timestamp], 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940), 0x488780, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1e36) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000b00)={@in6={{0xa, 0x4e21, 0x80000001, @private2, 0x4}}, 0x0, 0x0, 0x2f, 0x0, "797e94a00c2185d1c35a33724cdfc4723d45355c87cc1f7ae0de11d0cc5907e4f118e47aeee93476f5427069378daaf21bef033267fe452bbaed54023be31109242490c3ff7eca71e620f957b4b6220c"}, 0xd8) syz_open_dev$rtc(&(0x7f0000000c00), 0x7f, 0x180) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000cc0)="10c5d50d4ccb824293e1e6aa40274da3", 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002540), 0x80000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002580)='lp\x00', 0x3) 03:13:56 executing program 6: getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/22, 0x16}], 0x1, &(0x7f0000000180)=""/4096, 0x1000}, 0x401}, {{&(0x7f0000001180)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/39, 0x27}], 0x2, &(0x7f0000002280)=""/130, 0x82}, 0x40}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002340)=""/161, 0xa1}, {&(0x7f0000002400)=""/3, 0x3}, {&(0x7f0000002440)=""/177, 0xb1}], 0x3, &(0x7f0000002540)=""/47, 0x2f}, 0x7}, {{&(0x7f0000002580)=@caif=@dbg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002600)=""/172, 0xac}], 0x1, &(0x7f0000002700)=""/170, 0xaa}, 0x200}], 0x4, 0x2, &(0x7f00000028c0)={0x0, 0x3938700}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc46f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000002a40)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002b40), 0x210080, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002b80)={{{@in=@empty}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000002c80)=0xe8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000002dc0)={&(0x7f0000002cc0), 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000002e00)) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x28, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffc3c8, 0x8}}}}, ["", ""]}, 0x28}}, 0x2004c880) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000002f40), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003000)={'wg2\x00'}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000003040), 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r1) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x57}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 03:13:56 executing program 7: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x13, 0xffffffffffffffff, 0xb4ae0000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x10, 0xffffffffffffffff, 0xcf787000) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, r0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfe23}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8011) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x102, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048094}, 0x14040000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2f3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x30000, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r1, 0x128, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x63, 0x1f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x962}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x40) [ 87.330787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.334035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.336282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.340848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.342790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.343903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.392710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.396184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.397398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.398931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.401978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.403679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.406403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.409941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.411398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.416418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.423399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.424762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.482966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.484874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.488361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.489709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.493368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.495286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.510950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.511981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.517758] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.519436] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.520962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.522024] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.525316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.532221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.552441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.598761] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.601810] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.606434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.627580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.636342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.637438] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.667444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.674477] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.681498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.702235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.720899] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.733457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.754504] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.767459] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.770585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.363974] Bluetooth: hci0: command tx timeout [ 89.427252] Bluetooth: hci2: command tx timeout [ 89.491227] Bluetooth: hci1: command tx timeout [ 89.556212] Bluetooth: hci4: command tx timeout [ 89.619351] Bluetooth: hci3: command tx timeout [ 89.683195] Bluetooth: hci5: command tx timeout [ 89.747195] Bluetooth: hci6: command tx timeout [ 89.811790] Bluetooth: hci7: command tx timeout [ 91.412939] Bluetooth: hci0: command tx timeout [ 91.476188] Bluetooth: hci2: command tx timeout [ 91.540383] Bluetooth: hci1: command tx timeout [ 91.604351] Bluetooth: hci4: command tx timeout [ 91.670112] Bluetooth: hci3: command tx timeout [ 91.732159] Bluetooth: hci5: command tx timeout [ 91.798191] Bluetooth: hci6: command tx timeout [ 91.860127] Bluetooth: hci7: command tx timeout [ 93.460179] Bluetooth: hci0: command tx timeout [ 93.524249] Bluetooth: hci2: command tx timeout [ 93.588216] Bluetooth: hci1: command tx timeout [ 93.652626] Bluetooth: hci4: command tx timeout [ 93.716138] Bluetooth: hci3: command tx timeout [ 93.780332] Bluetooth: hci5: command tx timeout [ 93.844841] Bluetooth: hci6: command tx timeout [ 93.908159] Bluetooth: hci7: command tx timeout [ 95.507175] Bluetooth: hci0: command tx timeout [ 95.571300] Bluetooth: hci2: command tx timeout [ 95.638115] Bluetooth: hci1: command tx timeout [ 95.700281] Bluetooth: hci4: command tx timeout [ 95.764142] Bluetooth: hci3: command tx timeout [ 95.828168] Bluetooth: hci5: command tx timeout [ 95.892126] Bluetooth: hci6: command tx timeout [ 95.956133] Bluetooth: hci7: command tx timeout [ 149.934973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.938723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.942515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.953655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.958513] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.959879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.063440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.065416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.066373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.068567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.070788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.076334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.076987] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.078429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.080975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.095601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.106304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.107563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.219572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.230658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.234706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.251736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.291811] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.293143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.307161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.357439] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.364135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.369697] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.375077] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.376333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.378378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.383426] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.384449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.390508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.404271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.405606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.428122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.431303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.432578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.448464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.450304] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.451534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.715885] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.752500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.791844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.850568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.886938] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.898376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.021114] Bluetooth: hci0: command tx timeout [ 152.147228] Bluetooth: hci1: command tx timeout [ 152.148179] Bluetooth: hci2: command tx timeout [ 152.403161] Bluetooth: hci4: command tx timeout [ 152.404261] Bluetooth: hci3: command tx timeout [ 152.467223] Bluetooth: hci5: command tx timeout [ 152.723238] Bluetooth: hci6: command tx timeout [ 152.980261] Bluetooth: hci7: command tx timeout [ 154.067207] Bluetooth: hci0: command tx timeout [ 154.195229] Bluetooth: hci1: command tx timeout [ 154.196198] Bluetooth: hci2: command tx timeout [ 154.451282] Bluetooth: hci3: command tx timeout [ 154.452100] Bluetooth: hci4: command tx timeout [ 154.515382] Bluetooth: hci5: command tx timeout [ 154.771200] Bluetooth: hci6: command tx timeout [ 155.029102] Bluetooth: hci7: command tx timeout [ 156.115223] Bluetooth: hci0: command tx timeout [ 156.244118] Bluetooth: hci1: command tx timeout [ 156.244823] Bluetooth: hci2: command tx timeout [ 156.499304] Bluetooth: hci3: command tx timeout [ 156.500376] Bluetooth: hci4: command tx timeout [ 156.563317] Bluetooth: hci5: command tx timeout [ 156.819251] Bluetooth: hci6: command tx timeout [ 157.075231] Bluetooth: hci7: command tx timeout [ 158.163700] Bluetooth: hci0: command tx timeout [ 158.291781] Bluetooth: hci2: command tx timeout [ 158.292248] Bluetooth: hci1: command tx timeout [ 158.547161] Bluetooth: hci4: command tx timeout [ 158.547649] Bluetooth: hci3: command tx timeout [ 158.612097] Bluetooth: hci5: command tx timeout [ 158.867129] Bluetooth: hci6: command tx timeout [ 159.123186] Bluetooth: hci7: command tx timeout [ 212.388872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.390271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.394219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.395338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.397608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.401116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.403609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.405594] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.407068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.450369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.469972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.478855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.517798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.525720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.528370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.530591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.532420] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.543825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.579376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.586358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.589446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.597669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.603437] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.605647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.606564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.611637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.648732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.656411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.657579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.662515] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.663411] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.678228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.682570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.712264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.720444] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.730189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.762291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.814521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.816441] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.822638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.822808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.826927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.835309] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.838928] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.840593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.840605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.841930] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.843786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.483308] Bluetooth: hci0: command tx timeout [ 214.547101] Bluetooth: hci1: command tx timeout [ 214.611115] Bluetooth: hci2: command tx timeout [ 214.675258] Bluetooth: hci4: command tx timeout [ 214.739410] Bluetooth: hci3: command tx timeout [ 214.995774] Bluetooth: hci7: command tx timeout [ 215.060140] Bluetooth: hci5: command tx timeout [ 215.123231] Bluetooth: hci6: command tx timeout [ 216.531105] Bluetooth: hci0: command tx timeout [ 216.595112] Bluetooth: hci1: command tx timeout [ 216.659215] Bluetooth: hci2: command tx timeout [ 216.725077] Bluetooth: hci4: command tx timeout [ 216.787148] Bluetooth: hci3: command tx timeout [ 217.043431] Bluetooth: hci7: command tx timeout [ 217.107106] Bluetooth: hci5: command tx timeout [ 217.172226] Bluetooth: hci6: command tx timeout [ 218.579140] Bluetooth: hci0: command tx timeout [ 218.643190] Bluetooth: hci1: command tx timeout [ 218.707128] Bluetooth: hci2: command tx timeout [ 218.771186] Bluetooth: hci4: command tx timeout [ 218.835091] Bluetooth: hci3: command tx timeout [ 219.093136] Bluetooth: hci7: command tx timeout [ 219.155201] Bluetooth: hci5: command tx timeout [ 219.219198] Bluetooth: hci6: command tx timeout [ 220.627443] Bluetooth: hci0: command tx timeout [ 220.691150] Bluetooth: hci1: command tx timeout [ 220.755143] Bluetooth: hci2: command tx timeout [ 220.819234] Bluetooth: hci4: command tx timeout [ 220.883355] Bluetooth: hci3: command tx timeout [ 221.139441] Bluetooth: hci7: command tx timeout [ 221.203164] Bluetooth: hci5: command tx timeout [ 221.267175] Bluetooth: hci6: command tx timeout [ 273.041429] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 274.924492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.927414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.931336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.941340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.943935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.947721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.039749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.043217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.045366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.052348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.061139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.062533] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.179579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.184655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.190241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.195745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.200859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.203336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.254674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.256124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.257748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.259280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.260909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.264299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.265305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.266539] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.269253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.270501] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.276619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.278201] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.294682] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.324474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.327494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.364860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.367257] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.368719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.378898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.383180] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.388233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.420689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.428200] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.432195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.437182] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.448616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.487389] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.489287] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.493519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.494908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.011127] Bluetooth: hci0: command tx timeout [ 277.140138] Bluetooth: hci1: command tx timeout [ 277.267144] Bluetooth: hci2: command tx timeout [ 277.395243] Bluetooth: hci3: command tx timeout [ 277.460138] Bluetooth: hci6: command tx timeout [ 277.524755] Bluetooth: hci5: command tx timeout [ 277.587203] Bluetooth: hci7: command tx timeout [ 277.589352] Bluetooth: hci4: command tx timeout [ 279.059079] Bluetooth: hci0: command tx timeout [ 279.187097] Bluetooth: hci1: command tx timeout [ 279.318183] Bluetooth: hci2: command tx timeout [ 279.443341] Bluetooth: hci3: command tx timeout [ 279.508122] Bluetooth: hci6: command tx timeout [ 279.571114] Bluetooth: hci5: command tx timeout [ 279.635112] Bluetooth: hci4: command tx timeout [ 279.635145] Bluetooth: hci7: command tx timeout [ 281.107109] Bluetooth: hci0: command tx timeout [ 281.235149] Bluetooth: hci1: command tx timeout [ 281.363177] Bluetooth: hci2: command tx timeout [ 281.491114] Bluetooth: hci3: command tx timeout [ 281.555107] Bluetooth: hci6: command tx timeout [ 281.619098] Bluetooth: hci5: command tx timeout [ 281.683194] Bluetooth: hci7: command tx timeout [ 281.683212] Bluetooth: hci4: command tx timeout [ 283.158045] Bluetooth: hci0: command tx timeout [ 283.283072] Bluetooth: hci1: command tx timeout [ 283.412121] Bluetooth: hci2: command tx timeout [ 283.540099] Bluetooth: hci3: command tx timeout [ 283.603201] Bluetooth: hci6: command tx timeout [ 283.668077] Bluetooth: hci5: command tx timeout [ 283.731204] Bluetooth: hci7: command tx timeout [ 283.731660] Bluetooth: hci4: command tx timeout [ 334.899520] [ 334.899729] ====================================================== [ 334.900271] WARNING: possible circular locking dependency detected [ 334.900794] 6.13.0-next-20250128 #1 Not tainted [ 334.901202] ------------------------------------------------------ [ 334.902015] kworker/u8:1/65 is trying to acquire lock: [ 334.908046] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.910336] [ 334.910336] but task is already holding lock: [ 334.911400] ffff888035058768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 334.912778] [ 334.912778] which lock already depends on the new lock. [ 334.912778] [ 334.913872] [ 334.913872] the existing dependency chain (in reverse order) is: [ 334.914905] [ 334.914905] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 334.915647] __mutex_lock+0x13d/0xb50 [ 334.916151] wiphy_register+0x1b2e/0x25d0 [ 334.916689] ieee80211_register_hw+0x23a4/0x3d60 [ 334.917263] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 334.917878] init_mac80211_hwsim+0x389/0x870 [ 334.918443] do_one_initcall+0xf9/0x640 [ 334.918998] kernel_init_freeable+0x53d/0x7a0 [ 334.919580] kernel_init+0x1e/0x2d0 [ 334.920048] ret_from_fork+0x48/0x80 [ 334.920520] ret_from_fork_asm+0x1a/0x30 [ 334.921049] [ 334.921049] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 334.921709] __lock_acquire+0x29fd/0x4580 [ 334.922244] lock_acquire+0x19b/0x520 [ 334.922746] __mutex_lock+0x13d/0xb50 [ 334.923253] unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.923924] unregister_netdevice_queue+0x224/0x2e0 [ 334.924536] _cfg80211_unregister_wdev+0x57b/0x700 [ 334.925124] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 334.925704] ieee80211_unregister_hw+0x55/0x3a0 [ 334.926268] hwsim_exit_net+0x3a0/0x730 [ 334.926771] ops_exit_list+0xb3/0x180 [ 334.927258] cleanup_net+0x546/0xad0 [ 334.927731] process_one_work+0x8ee/0x1a10 [ 334.928285] worker_thread+0x674/0xe70 [ 334.928812] kthread+0x3ab/0x720 [ 334.929261] ret_from_fork+0x48/0x80 [ 334.929706] ret_from_fork_asm+0x1a/0x30 [ 334.930217] [ 334.930217] other info that might help us debug this: [ 334.930217] [ 334.931007] Possible unsafe locking scenario: [ 334.931007] [ 334.931606] CPU0 CPU1 [ 334.932087] ---- ---- [ 334.932564] lock(&rdev->wiphy.mtx); [ 334.932983] lock(rtnl_mutex); [ 334.933596] lock(&rdev->wiphy.mtx); [ 334.934248] lock(rtnl_mutex); [ 334.934623] [ 334.934623] *** DEADLOCK *** [ 334.934623] [ 334.935255] 4 locks held by kworker/u8:1/65: [ 334.935729] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 334.936826] #1: ffff88800ed8fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 334.937857] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 334.938824] #3: ffff888035058768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 334.939886] [ 334.939886] stack backtrace: [ 334.940339] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250128 #1 [ 334.940384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 334.940411] Workqueue: netns cleanup_net [ 334.940461] Call Trace: [ 334.940473] [ 334.940487] dump_stack_lvl+0xca/0x120 [ 334.940558] print_circular_bug+0x47b/0x750 [ 334.940614] check_noncircular+0x2e9/0x3c0 [ 334.940663] ? lock_repin_lock+0x207/0x320 [ 334.940735] ? __pfx_check_noncircular+0x10/0x10 [ 334.940784] ? hlock_class+0x4e/0x130 [ 334.940822] ? mark_lock+0xac/0xed0 [ 334.940869] ? __pfx_lock_repin_lock+0x10/0x10 [ 334.940938] ? timerqueue_del+0x83/0x150 [ 334.940989] ? lockdep_lock+0xba/0x1b0 [ 334.941058] ? __pfx_lockdep_lock+0x10/0x10 [ 334.941132] __lock_acquire+0x29fd/0x4580 [ 334.941195] ? __pfx___lock_acquire+0x10/0x10 [ 334.941246] ? lock_release+0x20f/0x6f0 [ 334.941297] ? __pfx_lock_release+0x10/0x10 [ 334.941353] lock_acquire+0x19b/0x520 [ 334.941405] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.941465] ? __pfx_lock_acquire+0x10/0x10 [ 334.941519] ? srso_return_thunk+0x5/0x5f [ 334.941586] ? lock_release+0x20f/0x6f0 [ 334.941637] ? srso_return_thunk+0x5/0x5f [ 334.941704] ? lock_is_held_type+0x9e/0x120 [ 334.941771] ? srso_return_thunk+0x5/0x5f [ 334.941841] __mutex_lock+0x13d/0xb50 [ 334.941905] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.941959] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.942015] ? srso_return_thunk+0x5/0x5f [ 334.942082] ? synchronize_rcu_expedited+0x38a/0x420 [ 334.942134] ? __pfx___mutex_lock+0x10/0x10 [ 334.942199] ? __pfx_autoremove_wake_function+0x10/0x10 [ 334.942264] ? srso_return_thunk+0x5/0x5f [ 334.942332] ? kasan_quarantine_put+0x84/0x1e0 [ 334.942405] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.942446] ? srso_return_thunk+0x5/0x5f [ 334.942518] unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.942573] ? __virt_addr_valid+0x2e8/0x5d0 [ 334.942636] ? __pfx_lock_release+0x10/0x10 [ 334.942691] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 334.942752] ? find_held_lock+0x2c/0x110 [ 334.942810] ? srso_return_thunk+0x5/0x5f [ 334.942868] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 334.942929] ? srso_return_thunk+0x5/0x5f [ 334.942985] ? lock_release+0x20f/0x6f0 [ 334.943029] ? __pfx_lock_release+0x10/0x10 [ 334.943072] ? srso_return_thunk+0x5/0x5f [ 334.943128] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 334.943175] ? srso_return_thunk+0x5/0x5f [ 334.943236] unregister_netdevice_queue+0x224/0x2e0 [ 334.943280] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 334.943324] ? up_write+0x195/0x520 [ 334.943379] _cfg80211_unregister_wdev+0x57b/0x700 [ 334.943432] ? srso_return_thunk+0x5/0x5f [ 334.943492] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 334.943532] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 334.943571] ? srso_return_thunk+0x5/0x5f [ 334.943626] ? srso_return_thunk+0x5/0x5f [ 334.943682] ? synchronize_rcu+0x1ff/0x260 [ 334.943725] ieee80211_unregister_hw+0x55/0x3a0 [ 334.943770] hwsim_exit_net+0x3a0/0x730 [ 334.943812] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.943853] ? srso_return_thunk+0x5/0x5f [ 334.943908] ? netdev_run_todo+0x788/0x1040 [ 334.943958] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.944001] ops_exit_list+0xb3/0x180 [ 334.944043] cleanup_net+0x546/0xad0 [ 334.944088] ? __pfx_cleanup_net+0x10/0x10 [ 334.944143] process_one_work+0x8ee/0x1a10 [ 334.944208] ? __pfx_lock_acquire+0x10/0x10 [ 334.944253] ? __pfx_process_one_work+0x10/0x10 [ 334.944312] ? srso_return_thunk+0x5/0x5f [ 334.944367] ? move_linked_works+0x172/0x270 [ 334.944412] ? srso_return_thunk+0x5/0x5f [ 334.944468] ? assign_work+0x196/0x240 [ 334.944525] worker_thread+0x674/0xe70 [ 334.944584] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 334.944636] ? srso_return_thunk+0x5/0x5f [ 334.944692] ? __pfx_worker_thread+0x10/0x10 [ 334.944752] kthread+0x3ab/0x720 [ 334.944804] ? __pfx_kthread+0x10/0x10 [ 334.944856] ? srso_return_thunk+0x5/0x5f [ 334.944911] ? finish_task_switch.isra.0+0x206/0x840 [ 334.944963] ? __pfx_kthread+0x10/0x10 [ 334.945017] ret_from_fork+0x48/0x80 [ 334.945048] ? __pfx_kthread+0x10/0x10 [ 334.945106] ret_from_fork_asm+0x1a/0x30 [ 334.945173] [ 336.475561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.478476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.484423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.495883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.499219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.501327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.610577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.614410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.616359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.619714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.622743] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.624586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.799120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.801140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.808500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.812074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.819282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.821304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.886736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.888426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.890324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.899381] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.901289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.903816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.905521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.920306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.930561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.943529] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.951320] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.952820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.954245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.960935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.970278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.972931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.996121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.997496] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.001832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.041146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.057743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.059836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.061634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.066213] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.067960] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.072874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.074592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.145064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.147953] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.149892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.515082] Bluetooth: hci0: command tx timeout [ 338.643156] Bluetooth: hci1: command tx timeout [ 338.899736] Bluetooth: hci2: command tx timeout [ 338.963601] Bluetooth: hci3: command tx timeout [ 339.091073] Bluetooth: hci6: command tx timeout [ 339.219167] Bluetooth: hci7: command tx timeout [ 339.219657] Bluetooth: hci4: command tx timeout [ 339.220233] Bluetooth: hci5: command tx timeout [ 340.564023] Bluetooth: hci0: command tx timeout [ 340.692125] Bluetooth: hci1: command tx timeout [ 340.947125] Bluetooth: hci2: command tx timeout [ 341.011069] Bluetooth: hci3: command tx timeout [ 341.139081] Bluetooth: hci6: command tx timeout [ 341.269158] Bluetooth: hci7: command tx timeout [ 341.270113] Bluetooth: hci4: command tx timeout [ 341.270969] Bluetooth: hci5: command tx timeout [ 342.611309] Bluetooth: hci0: command tx timeout [ 342.741053] Bluetooth: hci1: command tx timeout [ 342.995171] Bluetooth: hci2: command tx timeout [ 343.059962] Bluetooth: hci3: command tx timeout [ 343.187236] Bluetooth: hci6: command tx timeout [ 343.315251] Bluetooth: hci5: command tx timeout [ 343.315943] Bluetooth: hci7: command tx timeout [ 343.318049] Bluetooth: hci4: command tx timeout [ 344.661042] Bluetooth: hci0: command tx timeout [ 344.787081] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 03:18:05 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8f9d7 RDX=ffffed100d9c6c53 RSI=0000000000000004 RDI=ffffffff814b1cca RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c52 R10=ffff88806ce36293 R11=0000000000000001 R12=ffffffff864044d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a9097e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561dec2bb250 CR3=000000000eeb2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=0000561dec3090b00000561dec2b4ec0 XMM05=0000561dec2c973000000000000000ff XMM06=697665640031006563697665642e3369 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800ed8ed20 R8 =0000000000000000 R9 =ffffed10015fc046 R10=0000000000000061 R11=2f72656b726f776b R12=0000000000000061 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc9d62a6688 CR3=0000000009ef4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c00001c670000000c00024cc00 XMM04=000000c00024c7b0000000c00024c840 XMM05=000000c00024cd20000000c00024cc30 XMM06=000000c00024cc00000000c00024cc60 XMM07=000000c00001c610000000c00001c670 XMM08=000000c00001c620000000c00001c660 XMM09=000000c00001c630000000c00001c650 XMM10=000000c00001c240000000c00001c640 XMM11=000000c00001c260000000c00001c250 XMM12=000000c00001cb40000000c00001cb30 XMM13=000000c00001d020000000c00001d010 XMM14=000000c00001c290000000c00001d030 XMM15=000000c00001c740000000c00001c750