Warning: Permanently added '[localhost]:20554' (ECDSA) to the list of known hosts. 2025/01/19 08:07:41 fuzzer started 2025/01/19 08:07:42 dialing manager at localhost:44245 syzkaller login: [ 68.491832] cgroup: Unknown subsys name 'net' [ 68.591508] cgroup: Unknown subsys name 'cpuset' [ 68.656017] cgroup: Unknown subsys name 'rlimit' [ 74.534238] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 08:07:58 syscalls: 2217 2025/01/19 08:07:58 code coverage: enabled 2025/01/19 08:07:58 comparison tracing: enabled 2025/01/19 08:07:58 extra coverage: enabled 2025/01/19 08:07:58 setuid sandbox: enabled 2025/01/19 08:07:58 namespace sandbox: enabled 2025/01/19 08:07:58 Android sandbox: enabled 2025/01/19 08:07:58 fault injection: enabled 2025/01/19 08:07:58 leak checking: enabled 2025/01/19 08:07:58 net packet injection: enabled 2025/01/19 08:07:58 net device setup: enabled 2025/01/19 08:07:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 08:07:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 08:07:58 USB emulation: enabled 2025/01/19 08:07:58 hci packet injection: enabled 2025/01/19 08:07:58 wifi device emulation: enabled 2025/01/19 08:07:58 802.15.4 emulation: enabled 2025/01/19 08:07:58 fetching corpus: 50, signal 27570/29079 (executing program) 2025/01/19 08:07:58 fetching corpus: 100, signal 37542/40162 (executing program) 2025/01/19 08:07:58 fetching corpus: 150, signal 43970/47570 (executing program) 2025/01/19 08:07:59 fetching corpus: 200, signal 47813/52282 (executing program) 2025/01/19 08:07:59 fetching corpus: 250, signal 53486/58522 (executing program) 2025/01/19 08:07:59 fetching corpus: 300, signal 56803/62423 (executing program) 2025/01/19 08:07:59 fetching corpus: 350, signal 61489/67444 (executing program) 2025/01/19 08:07:59 fetching corpus: 400, signal 64969/71256 (executing program) 2025/01/19 08:08:00 fetching corpus: 450, signal 68145/74737 (executing program) 2025/01/19 08:08:00 fetching corpus: 500, signal 72912/79377 (executing program) 2025/01/19 08:08:00 fetching corpus: 550, signal 76116/82544 (executing program) 2025/01/19 08:08:00 fetching corpus: 600, signal 79205/85509 (executing program) 2025/01/19 08:08:00 fetching corpus: 650, signal 81571/87802 (executing program) 2025/01/19 08:08:00 fetching corpus: 700, signal 83836/89992 (executing program) 2025/01/19 08:08:01 fetching corpus: 750, signal 86081/92073 (executing program) 2025/01/19 08:08:01 fetching corpus: 800, signal 88448/94181 (executing program) 2025/01/19 08:08:01 fetching corpus: 850, signal 90239/95769 (executing program) 2025/01/19 08:08:01 fetching corpus: 900, signal 91571/97012 (executing program) 2025/01/19 08:08:01 fetching corpus: 950, signal 93911/98844 (executing program) 2025/01/19 08:08:01 fetching corpus: 1000, signal 96002/100435 (executing program) 2025/01/19 08:08:01 fetching corpus: 1050, signal 96836/101136 (executing program) 2025/01/19 08:08:02 fetching corpus: 1100, signal 98034/102016 (executing program) 2025/01/19 08:08:02 fetching corpus: 1150, signal 99390/102991 (executing program) 2025/01/19 08:08:02 fetching corpus: 1200, signal 101246/104227 (executing program) 2025/01/19 08:08:02 fetching corpus: 1250, signal 102804/105189 (executing program) 2025/01/19 08:08:02 fetching corpus: 1300, signal 104464/106175 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106700 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106759 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106810 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106843 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106877 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106926 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/106971 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107013 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107060 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107103 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107143 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107189 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107244 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107292 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107340 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107392 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107442 (executing program) 2025/01/19 08:08:02 fetching corpus: 1338, signal 105354/107479 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107525 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107559 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107609 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107655 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107704 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107749 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107806 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107862 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107922 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107965 (executing program) 2025/01/19 08:08:03 fetching corpus: 1338, signal 105354/107965 (executing program) 2025/01/19 08:08:05 starting 8 fuzzer processes 08:08:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x71a, 0xff, "ce6e0186c4d7e96653de1547aa5e0c42fc3a92", 0x40, 0x9}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x3ff, 0x0, 0xf800, 0xfff, 0xc, "bd074420e4455fa0"}) r2 = epoll_create1(0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendfile(r2, r3, &(0x7f0000000240)=0x3, 0x3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x800) ioctl$KDDISABIO(r4, 0x4b37) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000002c0)) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) ioctl(r2, 0x80, &(0x7f0000000340)="d8ad61a7f8b3e9d55748baafde142a5f47d8ff2dc9466d36a07d20f500f946b9bc348ca051cf7914aeb8cf14c39a7c00d06dc581c563beedb381a8763a35b15be5f2c9e9a4f3f8b8d637b0fd28") syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x3, &(0x7f0000000600)=[{&(0x7f0000000440)="0459ae1a92a49fe47ed358c790c25ec687d8504f951138783f95577c3dcb87b8fa97c7158dfef14685a4026b27716b49830424129d46f044965f07c3c5a14cb9c7acc076b8e8629ff4d55aee7e08b64800052d124c3c5136a8895228fbb128ca774fe569b3845e52137632dbd362535e1b6e8f59677f3341a26b8c813e68900b5d8c7aeaae8d485b7a2380008196a85eef8d5416c17b68aef45b087fb7e43afcb057bc352a92a455f575996f2ba29a", 0xaf, 0x2}, {&(0x7f0000000500)="95fe3a04118fb287d3adbafb5701921cb37c6c6148655ec81d1063ce", 0x1c, 0x7}, {&(0x7f0000000540)="540747b94ee24b5b8e13194d43bbb8d5f0551934676d60d0df144bb0e097a19f84ba17f03b3ba14ece498e425af6bd689ced5db584dd1c8534608f58855e92f163f026359249229e713fa42daa59e2d74bd754b6d0208682b386dc468fbe6e095cf987c02729573acdf1560fc0e6c46aa601015972779e51f57da41a4fd8ab0d20", 0x81, 0x7fff}], 0x880024, &(0x7f0000000680)={[{'^#{!].:\xe2$\x90'}, {'trusted.overlay.redirect\x00'}], [{@fsname={'fsname', 0x3d, '-{'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{[^[(\xd9'}}, {@subj_user={'subj_user', 0x3d, 'trusted.overlay.redirect\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) 08:08:05 executing program 2: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xffffffffffffff7f) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)=':\xd7\x00', &(0x7f00000000c0)='--\x00', 0x0) fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsetxattr$security_capability(r2, &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x80, 0x6}, {0x5, 0x235e}], 0xee00}, 0x18, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x8, 0x62, 0xfffffffffffffffe, 0x7f, 0x3ff}, {0x8001, 0xfffffaca, 0x8001, 0xc4, 0x8, 0xfffffffffffffffa}], ['\x00']}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) recvmmsg(r2, &(0x7f0000002600)=[{{&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/179, 0xb3}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/75, 0x4b}], 0x4, &(0x7f0000002500)=""/203, 0xcb}, 0xffffff2d}], 0x1, 0x40000000, &(0x7f0000002640)={0x77359400}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000002680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r3, &(0x7f00000026c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000002b40)=[{&(0x7f0000002740)=""/99, 0x63}, {&(0x7f00000027c0)=""/76, 0x4c}, {&(0x7f0000002840)=""/243, 0xf3}, {&(0x7f0000002940)=""/50, 0x32}, {&(0x7f0000002980)=""/68, 0x44}, {&(0x7f0000002a00)=""/53, 0x35}, {&(0x7f0000002a40)=""/216, 0xd8}], 0x7) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000002bc0)='syzkaller0\x00') ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000002c00)={0x3, 0x0, 0x2}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000002c40)) 08:08:05 executing program 1: r0 = pidfd_open(0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x55}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x3, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000016c0), 0xa0941, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001e40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001740)={0x6a0, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x33c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x324, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x5}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x69, 0xa, "5ee92810d5a7db44399c01b44a9d1cc155e9e189a16271a6c178b9280093669fa539be45889085b4bdc1e26e5b6197526005e49a025dba56713ad119768c68ff24ec9185b13506a7cd17ad3a1275033663744f392dace02155512e7b920012a5ca5519ed02"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x4}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xbd, 0x6, "90a584303767056fb1b414777c60e1295557fbe2e0d0d0a408cbe613bf76c7024a2c5e321b3c0f1e8707b31bf90b42281e6e5dfdbe0c00e5d66a55234c4b6b52d6bcb01ff5b8ab4c84ad99ff1d58460790da5d39b8d138387eaad8766a3a24e7f026993c12bc0b22808b9f8e919cc32f175b6fc2eb6ff4f0434fb172e995fa44eef02180d233f27050124c2e061bccd19dcfe146c8901d846c0ff6677c439113cd352b2aaba418d2ea510d883d5bb55ae0a0f7528f02353def"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xd7, 0xb, "ebce255e2362421494221db180faa23fbb5648914c5806891553de6daa441455faaa386b559dfe92dd7afde88871fc289ac96cd51de9716ac1c0cfb34da5336b9ff49e6c4cad7fde0ef2c54e33665b39cb3034243bf8275fd2c698aa7fbeb733beb050a6385f5b49d39c0019ba4051a34d00391dcdd45403bf2e13349ef605bab11cc8984c368358606325721997ed101ff8b8363a1a78554b9cf2fe9865d6351c19106ff2348e075222b82dcacfbece24a5e97009bcf85f1a9f66b94fe1be244b8abf351ebc066fd3df2e00ec9794a664b0d7"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xf8, 0x6, "1196cf180cc5b944d37751c82efcfd55ad1a1e0853139ddce764ef76afa1237aef5c45cd8a00dc8fbfa749790c074890794c3d35d63e761a35f734f0de7829e253b7ef21609e5a87cf512cf345be73a37ab2c896bb1abc303ee3d56c09e79bae9ed0e7c912125e99408be48f45e905d160660971922ec3f053b2604fba09e0766053ca33ce69b9f321a26ef5556eb3c7d1eb843c0470ec3a667e68537371d04c0aff7469f46dfe836e558b4b4866551564f9684e8bf90c8c7bfefdffd0509f5ef81b3789ef0da6a0c47ce86da120e706ffb1697bf947ff8a7415f350c304330f1e09ccec4096c01950041b8b46cb16e6215381b2"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x348, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x328, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_IE={0x285, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x88, 0x7}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x1, 0x4, @device_b, 0xcd8, 0x7, 0x9}}, @random_vendor={0xdd, 0xf0, "9215b1d5c391cf9e029312d3c5d50e25103bb3efc6fbde8307a53f96c950596a9673d1d30551054e4b4af288e5651c07c8ef447274bdb32715e517460e81f698002be74bab7eae5f9124474f9ee428d8d6d4e9b8e09400f2ae9ea93028322c05b0db1b4e52ab0cd7d00f38c40c3ee4e4c1526dd1f0e0498a45f956f278b816d6040c5235f277821d4e6bb04fe83a4822df35579b118a06ee00afa044fbc3a66fe65b8e23e499a1b957342d4f6047119ca07773895cf991d46409bfdfcc958e99bab3204d253b58d3d7bae01756bc7135333d284f6e1d5dc5fb10c4b8f2bbf770436fa979c6f182b8f0fad1796c587629"}, @mic={0x8c, 0x18, {0xe60, "e22401562ce6", @long="d90ba041297c986ca680508a4aa2b43b"}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x1, 0x1}, 0x75, 0x5, 0x143, @device_a, 0x3, "", 0xdf, 0x3, 0x6, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x400}, {{0x1}, @device_a, 0x200}, {{0x1}, @device_b, 0xffffffe0}, {{0x1}, @device_a, 0x3}]}}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x2e, 0x3f}}, @perr={0x84, 0xe8, {0x5, 0xe, [@ext={{}, @broadcast, 0x8001, @broadcast, 0x19}, @ext={{}, @broadcast, 0x400, @broadcast, 0x42}, @not_ext={{}, @broadcast, 0xc9d, "", 0x2c}, @ext={{}, @device_b, 0x400, @broadcast, 0x23}, @not_ext={{}, @device_a, 0x5, "", 0x2f}, @ext={{}, @device_a, 0x850, @broadcast, 0x1}, @ext={{}, @device_a, 0x0, @device_b, 0x14}, @not_ext={{}, @broadcast, 0x3, "", 0x3b}, @ext={{}, @device_a, 0x3, @device_b, 0x19}, @not_ext={{}, @broadcast, 0x6, "", 0x4}, @ext={{}, @device_b, 0x4, @device_b, 0x30}, @not_ext={{}, @device_b, 0x9, "", 0x3a}, @ext={{}, @device_b, 0x7, @broadcast, 0x34}, @not_ext={{}, @broadcast, 0x8, "", 0x15}]}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x6c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="5874dcc97d5b7783df18b356714daa032a50c781dda5d7628afa0075"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x20}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x15}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8000}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x6a0}, 0x1, 0x0, 0x0, 0x800}, 0x240440d4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e80), &(0x7f0000001ec0)=0xc) r2 = openat(0xffffffffffffffff, &(0x7f0000001f00)='./file0\x00', 0x100, 0x42) readv(r2, &(0x7f00000023c0)=[{&(0x7f0000001f40)=""/200, 0xc8}, {&(0x7f0000002040)=""/175, 0xaf}, {&(0x7f0000002100)=""/161, 0xa1}, {&(0x7f00000021c0)=""/186, 0xba}, {&(0x7f0000002280)=""/23, 0x17}, {&(0x7f00000022c0)=""/209, 0xd1}], 0x6) pivot_root(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='./file0\x00') pipe(&(0x7f00000024c0)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002600)={0xc, 0x0, &(0x7f0000002500)=[@free_buffer], 0x84, 0x0, &(0x7f0000002540)="e7f7dda5a0db15dfadfc9aea488063e142726d763712ed34e42329e43802986cedfb7eee1967bfdf340056e3a9f86f990e9fef14621c43036cd5548a2f411cb1187520591b90cf582bfa30b1b2a6f5b87ceff782f03db1c8ec1d75d8bdac618cb94933ee74ac092ed461a4245f2af4bc149e07bdd25b408d2317f486cfd6faed3b2dcd04"}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000002640)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000002680), 0x101000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x81}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x23089f25}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f00000027c0)=""/4096, 0x1000, 0x40000000, &(0x7f00000037c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000003a80)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003a40)={&(0x7f00000038c0)={0x180, r5, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x81}}}, @NL80211_ATTR_FRAME={0xec, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x80}, @broadcast, @broadcast, @from_mac, {0x9, 0x2}}, @a_msdu=[{@device_a, @broadcast, 0xc1, "a7c59a7d98cb379ad57df2f94fc26c8df6bf8b53cf7084cedc4f79b2c707b60f853cd3f16032ac5cc6b05d27ef387aef83f6772d1cc22805f66baad6d549703ada83812f3ee41a8f6db081128d012e01df65e14e5e06c3f68cbf52226b82e2c9eda8ef53d1dfa26b93806a4d6182d5e6ef986a3606ba6620a0f76f70488f4f0aa94791170c165738eb106fa8ecdbdd72cb482698387aa2adae5095d114f04ba4ac6b15eeb434cc1551c84e22a87afa48f9a66c8f98d0b60b3c5192daf0f10103aa"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x3}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xff}, @broadcast, @device_b}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20040041}, 0x20000025) 08:08:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42700, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) copy_file_range(r0, &(0x7f00000000c0)=0xfff, r0, &(0x7f0000000100)=0x9, 0x7, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x4, 0x0, 0xf58d, 0x7fff, 0xffffffffffff8001, 0x3}, {0x3, 0x1ff, 0x2, 0x5, 0x3, 0x7e9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) r7 = fsmount(r3, 0x1, 0x75) r8 = signalfd4(r2, &(0x7f0000000340)={[0x9]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xdd}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x40}}, './file0\x00'}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r4) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000400)={0x0, 0x1}) ioctl$int_out(r9, 0x5460, &(0x7f0000001400)) [ 92.014311] audit: type=1400 audit(1737274085.799:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:08:05 executing program 7: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x0, 0x4, {0x1, @usage=0x466, 0x0, 0x6, 0x2, 0x2, 0x50, 0x317, 0x2, @struct={0x6, 0x10001}, 0x1f, 0x2, [0x8000, 0x1, 0x6, 0x6, 0x7, 0x5]}, {0x81, @usage=0x7fff, 0x0, 0x2, 0x4, 0x223e, 0x0, 0x5, 0x0, @usage=0x2, 0x5, 0x1, [0x81ae, 0x5, 0x6, 0x3, 0x6, 0x834]}, {0xffffffffffffff36, @usage=0x2, 0x0, 0xc0, 0x8, 0xe1, 0x0, 0x8, 0x40, @usage=0xffffffffffffffff, 0x8, 0x1ff, [0x5785123e, 0x6, 0x7ff, 0xcb, 0x5, 0x80000001]}, {0x7, 0x3, 0x1}}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000004c0)=0x80000) fcntl$notify(r1, 0x402, 0x40000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x24}}, 0x40000) r3 = syz_io_uring_complete(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000640)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000740)={{r4}, r5, 0x8, @inherit={0x88, &(0x7f0000000680)={0x0, 0x8, 0x9, 0x2, {0x0, 0x100, 0xffffffffffffffff, 0x6, 0x7ff}, [0x6, 0xffffffffffffff81, 0xb7, 0x4, 0x3, 0xfffffffffffffffb, 0x6, 0x3f]}}, @devid=r0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x98, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x33}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x4011) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x104, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x21}}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x72}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c5}]}, 0x104}, 0x1, 0x0, 0x0, 0x810}, 0x4000800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/crypto\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000001b40)=0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r9 = syz_mount_image$tmpfs(&(0x7f0000001b80), &(0x7f0000001bc0)='./file0\x00', 0x1f, 0x4, &(0x7f0000001e00)=[{&(0x7f0000001c00)="4c1e3d4776e7c13e4e60f812ebbfa40acf7785fea2e8e78f7dc9d9fedbdb3c2dbd8f03ae7f03336925d8a1b187a0e5869824c132daa81d663038d91dedf50453e4af471eaaa2ab37efbf58e923592a36ed5e2d1835f7aa48dcca59cdb53b2566133fffc257fd02a51c616f0b398fb6f1e4864912d7140b98894318cef99b96c16729d38bd8d5c6a5ecaccceeac162ad9f6271c0045a71311ae5916f465b9d5", 0x9f, 0x3}, {&(0x7f0000001cc0)="115fc211c06052aafd42161ca8c14fdea0682aa1866cade1bd8652625845", 0x1e, 0xb8fe}, {&(0x7f0000001d00)="5439256102bb818676e71dae7930de19322953f9eeef1f744e170be88923ac1fe138ad99be96280550e07f6d2e729194681d4f054b40afd995799a63144c3c91a4c33b71a0418be886f181ea6d324b161b6dcbc6b807863a16af5b99c933f9385ae99d844f93e75efa3e459633c098389674bdf2f2cec0130c495b0251a44d634a73e54753f8edd1db648261d326", 0x8e, 0x1}, {&(0x7f0000001dc0)="69deac0e72cabe4e17f2dc63990a1bb972adf7c90b90297353dd816350e802655160bd3ff68df20687388c8a0bef03e217f79fa9d853b94cf3", 0x39, 0x7}], 0x2008000, &(0x7f0000001ec0)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x37, 0x36]}}, {@huge_within_size}], [{@subj_user={'subj_user', 0x3d, '\xff\xff'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-\'\\'}}, {@subj_role={'subj_role', 0x3d, '*^\')'}}, {@uid_gt={'uid>', r8}}, {@subj_role={'subj_role', 0x3d, '(-\'d'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@subj_role}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@measure}]}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001fc0)) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000002000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002040)={'wg0\x00'}) 08:08:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x15}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x46}, @void, @val={0xc, 0x99, {0x7fffffff, 0x2d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000003c0)={0x400, 0x0, 'client1\x00', 0xa, "d5ab0b5a514d8c50", "6375eb285c7d68a0551fe1ec412e59df3045040f3d17d8626b614eed4b172c5f", 0x6, 0x2}) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x9, 0x607, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xeb}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x51b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2, 0x80000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000600)=[r0], 0x1) r4 = dup2(r2, r2) dup3(r4, r2, 0x80000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000740), 0x6e, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/119, 0x77}], 0x1, &(0x7f0000000880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/3, 0x3}, {&(0x7f0000000980)=""/65, 0x41}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/61, 0x3d}, {&(0x7f0000000b40)=""/72, 0x48}, {&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000000c00)=""/165, 0xa5}, {&(0x7f0000000cc0)=""/198, 0xc6}], 0xa, &(0x7f0000000e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000fc0)=""/173, 0xad}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/175, 0xaf}, {&(0x7f0000001240)=""/236, 0xec}, {&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000001380)=""/226, 0xe2}, {&(0x7f0000001480)=""/64, 0x40}, {&(0x7f00000014c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/9, 0x9}, {&(0x7f00000015c0)=""/53, 0x35}], 0xa, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f00000017c0), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/255, 0xff}, {&(0x7f0000001940)=""/96, 0x60}], 0x2}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/218, 0xda}, {&(0x7f0000002b80)=""/29, 0x1d}, {&(0x7f0000002bc0)=""/110, 0x6e}, {&(0x7f0000002c40)=""/122, 0x7a}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x6, &(0x7f0000003d40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003e40), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003ec0)=""/83, 0x53}, {&(0x7f0000003f40)=""/78, 0x4e}, {&(0x7f0000003fc0)=""/218, 0xda}], 0x3}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005300)=[{&(0x7f0000004180)=""/17, 0x11}, {&(0x7f00000041c0)=""/177, 0xb1}, {&(0x7f0000004280)=""/35, 0x23}, {&(0x7f00000042c0)=""/47, 0x2f}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x5, &(0x7f0000005380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f00000054c0)=""/158, 0x9e}, {&(0x7f0000005580)=""/62, 0x3e}, {&(0x7f00000055c0)=""/43, 0x2b}, {&(0x7f0000005600)=""/253, 0xfd}, {&(0x7f0000005700)=""/227, 0xe3}, {&(0x7f0000005800)=""/61, 0x3d}, {&(0x7f0000005840)=""/207, 0xcf}, {&(0x7f0000005940)=""/101, 0x65}, {&(0x7f00000059c0)=""/166, 0xa6}], 0x9, &(0x7f0000005b40)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x40, &(0x7f0000005d80)={0x77359400}) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000005dc0)={0x6, 0x1}) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000005e00)={{0x9, 0x4f57}, 0x100, './file0\x00'}) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000006000)={&(0x7f0000005f40), 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044052}, 0x400) r10 = fsopen(&(0x7f0000008200)='logfs\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000008240)={{0x1, 0x1, 0x18, r10, {0x1}}, './file0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000008bc0)={&(0x7f0000008280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000008b80)={&(0x7f0000008680)={0x4c8, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7a4f}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1320f5ce}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdeb3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x81, 0x6, 0x5}, {0x8000, 0xff, 0x3, 0x48}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x4c8}}, 0x20000880) 08:08:05 executing program 5: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100400) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) r3 = syz_open_dev$rtc(&(0x7f00000000c0), 0x7f, 0x2000) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2, {0x1, 0x10001}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r2) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001e40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a00)={0x3c4, r5, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x78}}}}, [@NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x4}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x4}, {0x6}, {0x5, 0x7}, {0x4, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x2}, {0x0, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x98f4, 0x1f, 0x5, 0x5, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0xb, 0x48, 0x39]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0xb, 0x9, 0xb, 0x24, 0x4, 0x1, 0x74, 0x2, 0x48, 0x48, 0x48, 0x6c, 0x60, 0x60]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x18, 0xb, 0x3, 0xf, 0x24, 0x5, 0x9, 0x2f, 0x30, 0x12, 0x16, 0x5, 0x48, 0x9, 0x1, 0x24, 0xc, 0x1b, 0x6c, 0x9d, 0x16, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xc20, 0x9, 0xffff, 0xe68, 0x8, 0x3, 0xca1f]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x24]}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x9}, {}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x6}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x8}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0xa}, {0x3}, {0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {}, {0x4, 0x7}, {0x7, 0x2}, {0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x1}, {0x1}, {0x7, 0x1}, {0x7}, {}, {0x4, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x2}, {0x4}, {0x1, 0x2}, {0x7}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x3}, {}, {0x3, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x48, 0x2, 0x60, 0x1b, 0x2, 0x3, 0x30, 0x5, 0xb, 0x3, 0x4, 0x4, 0x4, 0x18, 0x1, 0x24, 0x14, 0x1b, 0x12, 0xc, 0x3, 0x6, 0xc, 0x12, 0x48, 0x0, 0x0, 0x17]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x9, 0x36, 0x6, 0x5, 0x3, 0x1b, 0xb, 0x41, 0x18, 0x6c, 0x30, 0x18, 0x36, 0x30, 0x36, 0xc, 0x2, 0x2, 0xb, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x885, 0xcf3f, 0xfa, 0x1000, 0x3, 0x9492, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xffe0, 0x5, 0x100, 0x2, 0x9, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0xa}, {0x3, 0x1}, {}, {0x0, 0x5}, {0x3, 0x7}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x1}, {0x7, 0x3}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x2}, {0x2, 0x5}, {0x4}, {0x2, 0x2}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0x1}, {0x7}, {0x2, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x4, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x6}, {0x2, 0x2}, {0x1}, {0x2, 0x6}, {0x7, 0x9}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x6}, {}, {0x7}, {0x7, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x1, 0x40, 0x800, 0x3, 0x53ba, 0xb7d]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x49, 0x36, 0x30, 0x1, 0x16, 0x1, 0x60, 0x6c, 0x5, 0xc, 0x18, 0x6c, 0x36, 0x5, 0x3, 0x36, 0x4, 0xc, 0x1b, 0x9, 0x9, 0x8]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x8000, 0x3e, 0xd13, 0x2, 0x2, 0x1f]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x5}, {0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x8}, {0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x7}, {0x4}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x7, 0x5}, {0x6}, {0x6, 0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x7, 0x2}, {0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x5, 0x1c}, {0x1, 0x9}, {0x4, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x9}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x1b, 0xc, 0x24, 0x1b, 0xb, 0x30, 0x16, 0x3, 0x18, 0x2, 0x48, 0x6, 0x60, 0x6, 0xc, 0x9, 0x30, 0x1, 0x4, 0x16, 0x30, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xa996, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x9a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x80}, 0x80) vmsplice(r4, &(0x7f0000001f80)=[{&(0x7f0000001e80)="5a24249c5ee493d88c679a79b75709b66c32941ca32db6b95d81c73d37f23f165a8d086775807b2ad444ba6ec7a231faa05cbedebe245854e8f2b6c3a817192197055170a99a68a848e0fee700f7a88dd2da0ed956b57bb1c8e82cada595", 0x5e}, {&(0x7f0000001f00)="af6f9f6d4b50abf217483d67e6c1808f18a8b7972b999004258d9422b654af8989b651122537b771542a8bc75bd9f4e04cef1f44fe186beb8c77f86eaa46bbe63fd679d32041c527156fa2ec26be60bd22664f33d43f06ea469236f20e98847a328129b0326d6e5f19c62d", 0x6b}], 0x2, 0x5) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000002100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r6) r7 = creat(&(0x7f0000002140)='./file0\x00', 0x100) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x801) pidfd_getfd(r7, r7, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000002280), &(0x7f00000022c0)={'L+', 0x3}, 0x16, 0x2) r8 = open(&(0x7f0000002300)='./file0\x00', 0x301000, 0x14d) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000002340)={0x3fe00000000, 0x9, 0x1, 0x46, 0x1, [{0x5, 0x9, 0x466, '\x00', 0x4}]}) 08:08:05 executing program 6: linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x800, &(0x7f00000001c0)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r0, &(0x7f0000000300)='./file0\x00', 0x6000, 0x2, &(0x7f0000000340)) fchmodat(r0, &(0x7f0000000440)='./file0\x00', 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0/file0\x00', 0x200) fadvise64(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000500), 0x5, 0x0) statx(r3, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x80, &(0x7f0000000580)) write$vga_arbiter(r0, &(0x7f0000000680)=@other={'lock', ' ', 'io+mem'}, 0xc) r4 = dup(r1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000006c0)='@\x00', &(0x7f0000000700)='./file0/../file0\x00', r4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x4e22, 0x6, @remote, 0x10000}, {0xa, 0x4e20, 0xfff, @private1, 0x9e1b}, 0xffff, [0x20, 0x1, 0x81, 0x1721, 0x5, 0x5, 0x80000001, 0x6]}, 0x5c) finit_module(r1, &(0x7f00000007c0)=' ', 0x1) [ 93.453109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.454105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.456640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.457125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.462165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.463635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.472586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.473042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.478420] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.479064] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.481679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.485510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.503196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.507448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.514377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.536345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.542296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.545532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.576287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.579599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.580643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.587674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.589610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.591011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.600498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.607579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.619185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.630341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.644262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.651256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.652314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.662264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.688122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.691307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.692902] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.693649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.698198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.704659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.736957] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.758303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.768142] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.768375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.773191] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.774296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.779349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.809406] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.813327] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.814586] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.597515] Bluetooth: hci2: command tx timeout [ 95.597978] Bluetooth: hci1: command tx timeout [ 95.598117] Bluetooth: hci0: command tx timeout [ 95.660890] Bluetooth: hci3: command tx timeout [ 95.723896] Bluetooth: hci5: command tx timeout [ 95.724995] Bluetooth: hci4: command tx timeout [ 95.854137] Bluetooth: hci6: command tx timeout [ 95.917381] Bluetooth: hci7: command tx timeout [ 97.645821] Bluetooth: hci0: command tx timeout [ 97.645916] Bluetooth: hci1: command tx timeout [ 97.645967] Bluetooth: hci2: command tx timeout [ 97.707999] Bluetooth: hci3: command tx timeout [ 97.774218] Bluetooth: hci4: command tx timeout [ 97.774300] Bluetooth: hci5: command tx timeout [ 97.900876] Bluetooth: hci6: command tx timeout [ 97.964834] Bluetooth: hci7: command tx timeout [ 99.692884] Bluetooth: hci2: command tx timeout [ 99.692984] Bluetooth: hci1: command tx timeout [ 99.693074] Bluetooth: hci0: command tx timeout [ 99.756843] Bluetooth: hci3: command tx timeout [ 99.820881] Bluetooth: hci5: command tx timeout [ 99.820977] Bluetooth: hci4: command tx timeout [ 99.949027] Bluetooth: hci6: command tx timeout [ 100.012829] Bluetooth: hci7: command tx timeout [ 101.740922] Bluetooth: hci0: command tx timeout [ 101.741019] Bluetooth: hci1: command tx timeout [ 101.741106] Bluetooth: hci2: command tx timeout [ 101.804813] Bluetooth: hci3: command tx timeout [ 101.867873] Bluetooth: hci4: command tx timeout [ 101.867986] Bluetooth: hci5: command tx timeout [ 101.996927] Bluetooth: hci6: command tx timeout [ 102.060905] Bluetooth: hci7: command tx timeout [ 155.642492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.645327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.647388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.651569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.654869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.657275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.717276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.721554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.725551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.739270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.742019] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.748107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.964613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.972074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.972688] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.974065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.984501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.988013] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.990560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.021912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.033282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.048222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.048491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.056249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.060017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.060292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.083084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.100030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.109417] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.133232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.134990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.135286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.144432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.153957] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.163027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.170929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.177679] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.182194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.188308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.191099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.193066] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.206515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.206580] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.220121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.220517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.229881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.261158] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.267598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.675842] Bluetooth: hci0: command tx timeout [ 157.804932] Bluetooth: hci1: command tx timeout [ 158.060039] Bluetooth: hci2: command tx timeout [ 158.123894] Bluetooth: hci3: command tx timeout [ 158.188989] Bluetooth: hci4: command tx timeout [ 158.255081] Bluetooth: hci6: command tx timeout [ 158.317614] Bluetooth: hci5: command tx timeout [ 158.318678] Bluetooth: hci7: command tx timeout [ 159.724161] Bluetooth: hci0: command tx timeout [ 159.851844] Bluetooth: hci1: command tx timeout [ 160.108103] Bluetooth: hci2: command tx timeout [ 160.173855] Bluetooth: hci3: command tx timeout [ 160.235858] Bluetooth: hci4: command tx timeout [ 160.300056] Bluetooth: hci6: command tx timeout [ 160.364032] Bluetooth: hci5: command tx timeout [ 160.364187] Bluetooth: hci7: command tx timeout [ 161.772934] Bluetooth: hci0: command tx timeout [ 161.900242] Bluetooth: hci1: command tx timeout [ 162.157147] Bluetooth: hci2: command tx timeout [ 162.219875] Bluetooth: hci3: command tx timeout [ 162.283834] Bluetooth: hci4: command tx timeout [ 162.347976] Bluetooth: hci6: command tx timeout [ 162.412082] Bluetooth: hci5: command tx timeout [ 162.413326] Bluetooth: hci7: command tx timeout [ 163.819994] Bluetooth: hci0: command tx timeout [ 163.948972] Bluetooth: hci1: command tx timeout [ 164.203912] Bluetooth: hci2: command tx timeout [ 164.269953] Bluetooth: hci3: command tx timeout [ 164.331890] Bluetooth: hci4: command tx timeout [ 164.396800] Bluetooth: hci6: command tx timeout [ 164.460767] Bluetooth: hci5: command tx timeout [ 164.461247] Bluetooth: hci7: command tx timeout [ 217.785602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.786516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.787338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.789947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.792237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.792632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.984429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.989709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.992346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.997317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.000994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.003548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.005345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.006250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.007148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.021025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.026572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.027912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.083640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.085629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.088995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.097120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.101236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.108286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.108561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.125616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.130537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.133702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.136508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.137282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.457305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.458166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.474621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.475031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.478694] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.479152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.487175] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.490065] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.495540] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.497378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.501412] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.506167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.554901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.561238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.567186] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.571631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.573375] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.575556] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.819904] Bluetooth: hci0: command tx timeout [ 220.075927] Bluetooth: hci1: command tx timeout [ 220.076407] Bluetooth: hci2: command tx timeout [ 220.203857] Bluetooth: hci4: command tx timeout [ 220.267968] Bluetooth: hci3: command tx timeout [ 220.715945] Bluetooth: hci5: command tx timeout [ 220.779951] Bluetooth: hci6: command tx timeout [ 220.844866] Bluetooth: hci7: command tx timeout [ 221.867913] Bluetooth: hci0: command tx timeout [ 222.124092] Bluetooth: hci2: command tx timeout [ 222.124434] Bluetooth: hci1: command tx timeout [ 222.252154] Bluetooth: hci4: command tx timeout [ 222.316062] Bluetooth: hci3: command tx timeout [ 222.766770] Bluetooth: hci5: command tx timeout [ 222.829788] Bluetooth: hci6: command tx timeout [ 222.893807] Bluetooth: hci7: command tx timeout [ 223.917846] Bluetooth: hci0: command tx timeout [ 224.172942] Bluetooth: hci2: command tx timeout [ 224.173823] Bluetooth: hci1: command tx timeout [ 224.300057] Bluetooth: hci4: command tx timeout [ 224.364803] Bluetooth: hci3: command tx timeout [ 224.813849] Bluetooth: hci5: command tx timeout [ 224.875794] Bluetooth: hci6: command tx timeout [ 224.939878] Bluetooth: hci7: command tx timeout [ 225.964932] Bluetooth: hci0: command tx timeout [ 226.220890] Bluetooth: hci1: command tx timeout [ 226.221603] Bluetooth: hci2: command tx timeout [ 226.348827] Bluetooth: hci4: command tx timeout [ 226.412322] Bluetooth: hci3: command tx timeout [ 226.860868] Bluetooth: hci5: command tx timeout [ 226.923819] Bluetooth: hci6: command tx timeout [ 226.989857] Bluetooth: hci7: command tx timeout [ 278.852338] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 280.191543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.194237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.195440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.200398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.203089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.205261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.214025] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.220644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.229160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.247963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.251292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.261189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.337038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.354289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.387133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.407981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.440982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.442887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.444128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.446389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.448151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.485928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.496202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.499241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.524131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.535971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.554797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.561082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.561423] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.569106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.570466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.571416] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.574882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.576481] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.577460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.594107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.609813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.668382] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.668625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.670994] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.674697] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.693932] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.705163] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.706927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.719143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.730234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.767504] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.769252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.219856] Bluetooth: hci0: command tx timeout [ 282.348977] Bluetooth: hci1: command tx timeout [ 282.540866] Bluetooth: hci2: command tx timeout [ 282.605006] Bluetooth: hci5: command tx timeout [ 282.732879] Bluetooth: hci4: command tx timeout [ 282.733322] Bluetooth: hci3: command tx timeout [ 282.796612] Bluetooth: hci7: command tx timeout [ 282.797029] Bluetooth: hci6: command tx timeout [ 284.268804] Bluetooth: hci0: command tx timeout [ 284.397302] Bluetooth: hci1: command tx timeout [ 284.588798] Bluetooth: hci2: command tx timeout [ 284.655860] Bluetooth: hci5: command tx timeout [ 284.780887] Bluetooth: hci3: command tx timeout [ 284.780997] Bluetooth: hci4: command tx timeout [ 284.845007] Bluetooth: hci6: command tx timeout [ 284.845459] Bluetooth: hci7: command tx timeout [ 286.316975] Bluetooth: hci0: command tx timeout [ 286.444759] Bluetooth: hci1: command tx timeout [ 286.635876] Bluetooth: hci2: command tx timeout [ 286.699771] Bluetooth: hci5: command tx timeout [ 286.828902] Bluetooth: hci4: command tx timeout [ 286.828986] Bluetooth: hci3: command tx timeout [ 286.892852] Bluetooth: hci7: command tx timeout [ 286.893085] Bluetooth: hci6: command tx timeout [ 288.364778] Bluetooth: hci0: command tx timeout [ 288.492814] Bluetooth: hci1: command tx timeout [ 288.684783] Bluetooth: hci2: command tx timeout [ 288.749757] Bluetooth: hci5: command tx timeout [ 288.876869] Bluetooth: hci3: command tx timeout [ 288.876978] Bluetooth: hci4: command tx timeout [ 288.940856] Bluetooth: hci6: command tx timeout [ 288.940976] Bluetooth: hci7: command tx timeout [ 339.128368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.128575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.851479] [ 340.851889] ====================================================== [ 340.852979] WARNING: possible circular locking dependency detected [ 340.854159] 6.13.0-rc7-next-20250117 #1 Not tainted [ 340.855490] ------------------------------------------------------ [ 340.862351] kworker/u8:0/11 is trying to acquire lock: [ 340.863378] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.865382] [ 340.865382] but task is already holding lock: [ 340.866630] ffff88802f400768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 340.868862] [ 340.868862] which lock already depends on the new lock. [ 340.868862] [ 340.870641] [ 340.870641] the existing dependency chain (in reverse order) is: [ 340.872248] [ 340.872248] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 340.873762] __mutex_lock+0x13d/0xb50 [ 340.874810] wiphy_register+0x1b2e/0x25d0 [ 340.875925] ieee80211_register_hw+0x23a4/0x3d60 [ 340.877124] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 340.878368] init_mac80211_hwsim+0x389/0x870 [ 340.879531] do_one_initcall+0xf9/0x640 [ 340.880459] kernel_init_freeable+0x53d/0x7a0 [ 340.881474] kernel_init+0x1e/0x2d0 [ 340.882316] ret_from_fork+0x48/0x80 [ 340.883144] ret_from_fork_asm+0x1a/0x30 [ 340.884082] [ 340.884082] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 340.885300] __lock_acquire+0x29fd/0x4580 [ 340.886352] lock_acquire+0x19b/0x520 [ 340.887326] __mutex_lock+0x13d/0xb50 [ 340.888307] unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.889639] unregister_netdevice_queue+0x224/0x2e0 [ 340.890854] _cfg80211_unregister_wdev+0x57b/0x700 [ 340.892051] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 340.893264] ieee80211_unregister_hw+0x55/0x3a0 [ 340.894434] hwsim_exit_net+0x3a0/0x730 [ 340.895484] ops_exit_list+0xb3/0x180 [ 340.896499] cleanup_net+0x546/0xad0 [ 340.897507] process_one_work+0x8ee/0x1a10 [ 340.898697] worker_thread+0x674/0xe70 [ 340.899770] kthread+0x3ab/0x720 [ 340.900742] ret_from_fork+0x48/0x80 [ 340.901722] ret_from_fork_asm+0x1a/0x30 [ 340.902865] [ 340.902865] other info that might help us debug this: [ 340.902865] [ 340.904567] Possible unsafe locking scenario: [ 340.904567] [ 340.905728] CPU0 CPU1 [ 340.906977] ---- ---- [ 340.907934] lock(&rdev->wiphy.mtx); [ 340.908753] lock(rtnl_mutex); [ 340.909949] lock(&rdev->wiphy.mtx); [ 340.911301] lock(rtnl_mutex); [ 340.912058] [ 340.912058] *** DEADLOCK *** [ 340.912058] [ 340.913245] 4 locks held by kworker/u8:0/11: [ 340.914178] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 340.916448] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 340.918544] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 340.920394] #3: ffff88802f400768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 340.921536] [ 340.921536] stack backtrace: [ 340.922033] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 340.922923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 340.923773] Workqueue: netns cleanup_net [ 340.924236] Call Trace: [ 340.924516] [ 340.924768] dump_stack_lvl+0xca/0x120 [ 340.925232] print_circular_bug+0x47b/0x750 [ 340.925725] check_noncircular+0x2e9/0x3c0 [ 340.926244] ? lock_repin_lock+0x207/0x320 [ 340.926745] ? __pfx_check_noncircular+0x10/0x10 [ 340.927288] ? hlock_class+0x4e/0x130 [ 340.927713] ? mark_lock+0xac/0xed0 [ 340.928135] ? __pfx_lock_repin_lock+0x10/0x10 [ 340.928667] ? timerqueue_del+0x83/0x150 [ 340.929127] ? lockdep_lock+0xba/0x1b0 [ 340.929585] ? __pfx_lockdep_lock+0x10/0x10 [ 340.930122] __lock_acquire+0x29fd/0x4580 [ 340.930607] ? __pfx___lock_acquire+0x10/0x10 [ 340.931111] ? lock_release+0x20f/0x6f0 [ 340.931565] ? __pfx_lock_release+0x10/0x10 [ 340.932055] lock_acquire+0x19b/0x520 [ 340.932492] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.933150] ? __pfx_lock_acquire+0x10/0x10 [ 340.933646] ? srso_return_thunk+0x5/0x5f [ 340.934156] ? lock_release+0x20f/0x6f0 [ 340.934628] ? srso_return_thunk+0x5/0x5f [ 340.935134] ? lock_is_held_type+0x9e/0x120 [ 340.935651] ? srso_return_thunk+0x5/0x5f [ 340.936178] __mutex_lock+0x13d/0xb50 [ 340.936647] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.937311] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.937960] ? srso_return_thunk+0x5/0x5f [ 340.938474] ? synchronize_rcu_expedited+0x38a/0x420 [ 340.939050] ? __pfx___mutex_lock+0x10/0x10 [ 340.939562] ? __pfx_autoremove_wake_function+0x10/0x10 [ 340.940177] ? srso_return_thunk+0x5/0x5f [ 340.940680] ? kasan_quarantine_put+0x84/0x1e0 [ 340.941280] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 340.941806] ? srso_return_thunk+0x5/0x5f [ 340.942309] unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.942927] ? __virt_addr_valid+0x2e8/0x5d0 [ 340.943440] ? __pfx_lock_release+0x10/0x10 [ 340.943934] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 340.944600] ? find_held_lock+0x2c/0x110 [ 340.945108] ? srso_return_thunk+0x5/0x5f [ 340.945623] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 340.946229] ? srso_return_thunk+0x5/0x5f [ 340.946735] ? lock_release+0x20f/0x6f0 [ 340.947211] ? __pfx_lock_release+0x10/0x10 [ 340.947713] ? srso_return_thunk+0x5/0x5f [ 340.948217] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 340.948821] ? srso_return_thunk+0x5/0x5f [ 340.949348] unregister_netdevice_queue+0x224/0x2e0 [ 340.949933] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 340.950584] ? up_write+0x195/0x520 [ 340.951043] _cfg80211_unregister_wdev+0x57b/0x700 [ 340.951638] ? srso_return_thunk+0x5/0x5f [ 340.952158] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 340.952748] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 340.953379] ? srso_return_thunk+0x5/0x5f [ 340.953889] ? srso_return_thunk+0x5/0x5f [ 340.954405] ? synchronize_rcu+0x1ff/0x260 [ 340.954911] ieee80211_unregister_hw+0x55/0x3a0 [ 340.955461] hwsim_exit_net+0x3a0/0x730 [ 340.955938] ? __pfx_hwsim_exit_net+0x10/0x10 [ 340.956466] ? srso_return_thunk+0x5/0x5f [ 340.956973] ? netdev_run_todo+0x788/0x1040 [ 340.957478] ? srso_return_thunk+0x5/0x5f [ 340.957981] ? __pfx_hwsim_exit_net+0x10/0x10 [ 340.958519] ops_exit_list+0xb3/0x180 [ 340.958976] cleanup_net+0x546/0xad0 [ 340.959428] ? __pfx_cleanup_net+0x10/0x10 [ 340.959952] process_one_work+0x8ee/0x1a10 [ 340.960495] ? __pfx_lock_acquire+0x10/0x10 [ 340.961004] ? __pfx_process_one_work+0x10/0x10 [ 340.961565] ? srso_return_thunk+0x5/0x5f [ 340.962081] ? move_linked_works+0x172/0x270 [ 340.962600] ? srso_return_thunk+0x5/0x5f [ 340.963104] ? assign_work+0x196/0x240 [ 340.963589] worker_thread+0x674/0xe70 [ 340.964080] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 340.964691] ? __pfx_worker_thread+0x10/0x10 [ 340.965231] kthread+0x3ab/0x720 [ 340.965673] ? __pfx_kthread+0x10/0x10 [ 340.966167] ? srso_return_thunk+0x5/0x5f [ 340.966672] ? finish_task_switch.isra.0+0x206/0x840 [ 340.967308] ? __pfx_kthread+0x10/0x10 [ 340.967792] ret_from_fork+0x48/0x80 [ 340.968231] ? __pfx_kthread+0x10/0x10 [ 340.968713] ret_from_fork_asm+0x1a/0x30 [ 340.969229] [ 342.464793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.467213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.471112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.476101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.480525] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.484684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.653542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.657275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.660837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.670145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.676071] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.678791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.709836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.711499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.715155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.718213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.723515] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.725853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.785168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.793993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.797565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.801722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.805999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.806148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.809197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.812352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.816476] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.818594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.825633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.828489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.852495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.854684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.859156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.900489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.904989] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.928183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.949381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.956060] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.015185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.020177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.026275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.028816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.033981] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.036993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.039946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.124941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.138349] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.139279] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.556758] Bluetooth: hci0: command tx timeout [ 344.753739] Bluetooth: hci2: command tx timeout [ 344.753815] Bluetooth: hci1: command tx timeout [ 344.875818] Bluetooth: hci3: command tx timeout [ 344.875920] Bluetooth: hci4: command tx timeout [ 345.003986] Bluetooth: hci5: command tx timeout [ 345.067886] Bluetooth: hci6: command tx timeout [ 345.195886] Bluetooth: hci7: command tx timeout [ 346.603763] Bluetooth: hci0: command tx timeout [ 346.795754] Bluetooth: hci1: command tx timeout [ 346.795848] Bluetooth: hci2: command tx timeout [ 346.923915] Bluetooth: hci4: command tx timeout [ 346.924235] Bluetooth: hci3: command tx timeout [ 347.052793] Bluetooth: hci5: command tx timeout [ 347.115803] Bluetooth: hci6: command tx timeout [ 347.244783] Bluetooth: hci7: command tx timeout [ 348.652821] Bluetooth: hci0: command tx timeout [ 348.844860] Bluetooth: hci2: command tx timeout [ 348.845043] Bluetooth: hci1: command tx timeout [ 348.972861] Bluetooth: hci3: command tx timeout [ 348.973055] Bluetooth: hci4: command tx timeout [ 349.100774] Bluetooth: hci5: command tx timeout [ 349.164756] Bluetooth: hci6: command tx timeout [ 349.292745] Bluetooth: hci7: command tx timeout [ 350.700091] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 08:12:14 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb98 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=ffff8880095deeb8 R14=ffffffff88693320 R15=0000000000000000 RIP=ffffffff8283ce1d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055cfe35fc3f8 CR3=000000002f4fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000002ffffffff00005578b6576a00 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=03030203020101000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000004bfb3 RBX=0000000000000001 RCX=ffffffff84a8bb27 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffff8880096a7e68 R8 =0000000000000001 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864021d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5bf8f3e488 CR3=0000000018f18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041852d6680000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000