Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:10850' (ECDSA) to the list of known hosts. 2025/01/19 12:25:25 fuzzer started 2025/01/19 12:25:25 dialing manager at localhost:44245 syzkaller login: [ 62.455553] cgroup: Unknown subsys name 'net' [ 62.565405] cgroup: Unknown subsys name 'cpuset' [ 62.588080] cgroup: Unknown subsys name 'rlimit' [ 67.495585] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 12:25:44 syscalls: 2217 2025/01/19 12:25:44 code coverage: enabled 2025/01/19 12:25:44 comparison tracing: enabled 2025/01/19 12:25:44 extra coverage: enabled 2025/01/19 12:25:44 setuid sandbox: enabled 2025/01/19 12:25:44 namespace sandbox: enabled 2025/01/19 12:25:44 Android sandbox: enabled 2025/01/19 12:25:44 fault injection: enabled 2025/01/19 12:25:44 leak checking: enabled 2025/01/19 12:25:44 net packet injection: enabled 2025/01/19 12:25:44 net device setup: enabled 2025/01/19 12:25:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 12:25:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 12:25:44 USB emulation: enabled 2025/01/19 12:25:44 hci packet injection: enabled 2025/01/19 12:25:44 wifi device emulation: enabled 2025/01/19 12:25:44 802.15.4 emulation: enabled 2025/01/19 12:25:44 fetching corpus: 50, signal 25148/26694 (executing program) 2025/01/19 12:25:44 fetching corpus: 100, signal 33146/35945 (executing program) 2025/01/19 12:25:44 fetching corpus: 150, signal 39164/43011 (executing program) 2025/01/19 12:25:45 fetching corpus: 200, signal 45418/50127 (executing program) 2025/01/19 12:25:45 fetching corpus: 250, signal 52254/57446 (executing program) 2025/01/19 12:25:45 fetching corpus: 300, signal 56795/62539 (executing program) 2025/01/19 12:25:45 fetching corpus: 350, signal 61505/67577 (executing program) 2025/01/19 12:25:45 fetching corpus: 400, signal 63486/70157 (executing program) 2025/01/19 12:25:45 fetching corpus: 450, signal 66780/73763 (executing program) 2025/01/19 12:25:45 fetching corpus: 500, signal 69464/76744 (executing program) 2025/01/19 12:25:46 fetching corpus: 550, signal 71643/79135 (executing program) 2025/01/19 12:25:46 fetching corpus: 600, signal 74704/82223 (executing program) 2025/01/19 12:25:46 fetching corpus: 650, signal 76998/84597 (executing program) 2025/01/19 12:25:46 fetching corpus: 700, signal 79366/86975 (executing program) 2025/01/19 12:25:46 fetching corpus: 750, signal 81981/89451 (executing program) 2025/01/19 12:25:46 fetching corpus: 800, signal 84935/92082 (executing program) 2025/01/19 12:25:47 fetching corpus: 850, signal 87244/94109 (executing program) 2025/01/19 12:25:47 fetching corpus: 900, signal 89335/95885 (executing program) 2025/01/19 12:25:47 fetching corpus: 950, signal 90692/97108 (executing program) 2025/01/19 12:25:47 fetching corpus: 1000, signal 93620/99353 (executing program) 2025/01/19 12:25:47 fetching corpus: 1050, signal 94817/100376 (executing program) 2025/01/19 12:25:47 fetching corpus: 1100, signal 96622/101743 (executing program) 2025/01/19 12:25:48 fetching corpus: 1150, signal 98463/103007 (executing program) 2025/01/19 12:25:48 fetching corpus: 1200, signal 101144/104732 (executing program) 2025/01/19 12:25:48 fetching corpus: 1250, signal 102287/105495 (executing program) 2025/01/19 12:25:48 fetching corpus: 1300, signal 103221/106118 (executing program) 2025/01/19 12:25:48 fetching corpus: 1350, signal 104926/107052 (executing program) 2025/01/19 12:25:48 fetching corpus: 1400, signal 105592/107446 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107534 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107609 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107665 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107729 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107789 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107851 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/107931 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108000 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108062 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108133 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108207 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108261 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108322 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108392 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108452 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108512 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108599 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108676 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108741 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108807 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108893 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/108951 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/109006 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/109074 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/109142 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/109210 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/109258 (executing program) 2025/01/19 12:25:49 fetching corpus: 1402, signal 105616/109258 (executing program) 2025/01/19 12:25:53 starting 8 fuzzer processes 12:25:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa07, 0x3b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2049}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) getsockname(r0, &(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000500)=0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/usb', 0x2, 0xa0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000580)=0x0) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) r7 = epoll_create(0x8) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000680)) r8 = eventfd(0x69) ioctl$FICLONE(r0, 0x40049409, r8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="386887411852"}, @NL80211_ATTR_SSID={0x15, 0x34, @random="98d7c62c24ea9057c74efc7b41e507e3f1"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendfile(0xffffffffffffffff, r0, &(0x7f00000009c0)=0x1f, 0xfffffffffffffc00) 12:25:53 executing program 1: r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@mcast2, 0xffff, 0x9, 0x4e24, 0x0, 0x2, 0x80, 0xa0, 0x4, r1, 0xffffffffffffffff}, {0x1, 0x5, 0x3, 0x8, 0x1, 0x5695, 0xffffffffffffffb9, 0x12}, {0x3, 0x4, 0x7ff00000, 0xfffffffffffffffe}, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x2b}, 0x2, @in6=@local, 0x3504, 0x1, 0x2, 0x2, 0x5, 0x1000, 0x8}}, 0xe8) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2d, 0x9, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001880)={'sit0\x00', &(0x7f0000001800)={'ip6gre0\x00', r1, 0x4, 0x1f, 0x3f, 0x5, 0x2, @empty, @loopback, 0x8000, 0x700, 0x6, 0x2}}) sendmmsg$inet6(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000400)="ebbe74e003d8aa5d62853a4e3009d726dd5170651e7f75fc2b1d47884fe1e1ddfe3d9e770a988756c16baba488aaca546a8b08053a696a3d132f47650cc9bff23feb939d61fbc12316bc3eb779bd178974e36c39cd7155e0922ccc793448e039a3ff953c991d4f92c054700f71e39e62059c04494d0864ef1686f03d4c82c07f2946d8e65f9fa4cb778d236c5e747d6af48a4a0fdc07dd307535fdbd400a21b876504078a24f23af4f726e8193464bb782", 0xb1}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="3ec44550dad4186623618be0a79f9db4a7bf54e4e860c393b3a72a92ca665c043ce5c21d294d9c487238085601459bb26be073c0472f86f5d221a468a1c22a6180b9a920b6a062de50ec79c5fd35b10bf0f19daa1b33e05ac3f5be39d45d8a858edbe9f22afeb2d1d9d9c46783066582dea5d4be2205a62feac1373453de8d82977dac62a8abf04b5d53d21a8ec3455a7a84debd1ea1defc10ccc1e09aa07da97eec18a71500018a41cb14d7f131d040ca414171fab8f6bd51215af49bbc", 0xbe}, {&(0x7f00000015c0)="0d5ff98b2e313689d37b64ce199a5f93e2f6ae6d7c2ae280b1a8a9825f5f691a265bd12db7373f3d891e78613ec7ed8068779addc3467efd669c1737aa9012ad35f89ccac2a701db592b50cb828fc16e1d379fe094557db6a781af23e82ce60277f2accd135cf6b7c03dc36b5080920625d76d4891b96ca39e401c0dc56dacf4a008f1bce2b2307aad0e099384f8f15f5139da93e08b138f0312d90d337c12a617fcdb6ab743311e97b352299e67af1b51ac9079b3f396a6cd089e2f49e0105470f355614bed76d04435da66a8702dcad3e0507819c1b167d0fdbac7069ff5", 0xdf}], 0x5, &(0x7f00000018c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @dstopts={{0x38, 0x29, 0x37, {0x73, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xfffffffe}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x16}, r4}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2b, 0x3, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffeffff}]}}}], 0xc0}}, {{&(0x7f0000001980)={0xa, 0x4e24, 0x9, @remote, 0x3}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000019c0)="a1332785c41c02b549da4cf6693d6c944237b6a5a114afab46af751be3b979abe823d1fbfce53c2e4af7d8482a7db885a2a394dd6fd5dd15fc66", 0x3a}, {&(0x7f0000001a00)="09e4cbfc4cf1c7303a85e841c09775add79d9109f0e674f497f0dbf8119ee095faf078", 0x23}, {&(0x7f0000001a40)="3b90effe4f0188137a4ddcdbc07b0d469f7db224ce9cec85da1e87deb7844161078d35688727e826ee9350847c30672a067eecde491ba8a742f4bbf0de2fd32b07f7a60411738d3173bf8b4937475394d281e91f1b9c33680a16cbfa707195b919807252bb32700acebc3f5828e3bd5b69fcc299766fc73608cb72686f625e95d370fe0582bce724025c24299766bbd083a316a222479b80f6161e9e3fb3b184d07c7f7758b53653fa96302ab04c4e691f218edeaab72434774635c0fb55b154ed4481a90529fc56f6ca07a2a691ea9bc4a7c9f8992402b7160c96ce3918a9c96c4ab7679782", 0xe6}], 0x3}}], 0x2, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001c40)={'ip6tnl0\x00', r1, 0x4, 0xfa, 0xff, 0x40, 0x70, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8, 0x8, 0x6}}) accept4$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001d40)=0x14, 0x80800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001f80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d80)={0x188, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x408c5) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001fc0)={0x0, @loopback, @initdev}, &(0x7f0000002000)=0xc) recvmsg$unix(r3, &(0x7f00000022c0)={&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/113, 0x71}, {&(0x7f0000002140)}], 0x2, &(0x7f00000021c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x10000) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@private2, @in6=@loopback, 0x4e24, 0x4, 0x4e22, 0x0, 0xa, 0x120, 0x80, 0x84, r7, r14}, {0x0, 0x20, 0x5, 0x7, 0x3852, 0x158, 0x616, 0x4}, {0x1, 0x3c1, 0x66, 0x200}, 0x63, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast1, 0x4d3, 0x62}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x1, 0x0, 0x4, 0xffff8000, 0x8, 0x5a}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000002400)={{0x1, 0x1, 0x18, r3, {0x800, 0x4}}, './file0\x00'}) setsockopt$packet_buf(r15, 0x107, 0x1, &(0x7f0000002440)="d8ef2fc8487b0be5baecd9ee2728beb451ffe6ec1d3e6b66736e854c91d5bb4e", 0x20) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000002500)={'syztnl2\x00', &(0x7f0000002480)={'sit0\x00', r6, 0x2f, 0x0, 0x96, 0x5, 0x2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x8c, 0xfffffffb}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f00000025c0)={'ip6tnl0\x00', &(0x7f0000002540)={'syztnl2\x00', r16, 0x4, 0x5, 0x3, 0x6, 0x11, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x6, 0x10001}}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000002600), &(0x7f0000002640)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002680)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002780)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000027c0)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x9, 0x4e21, 0xfff, 0x2, 0x0, 0x20, 0x2f, r7, r17}, {0x0, 0x0, 0x5, 0x3, 0x9, 0x74ef, 0x6}, {0x40, 0xb683, 0x5, 0x7f}, 0x8, 0x6e6bbc, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d6, 0x19}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x3, 0x20, 0x6, 0x800, 0x7}}, 0xe8) 12:25:53 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = memfd_secret(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4, 0x10080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff00000000}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x98}, 0x1, 0x0, 0x0, 0x2010}, 0x80) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc01804}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x20029805}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r6, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffff}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xfffffffd}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0xffffffe0}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x44054}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000081}, 0x890) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) getsockname$inet(r2, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) sendmsg$NL80211_CMD_SET_WOWLAN(r9, &(0x7f0000000d40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3f8, r10, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x3d8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x3bc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x60, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x100}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x200}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0bcfb097a375"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3772d798f34a"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, "95c27de1d077d3271a0312ce"}, @NL80211_BAND_5GHZ={0xd3, 0x1, "2b55d72f273ae81e1275d8e10f9acc959bb436dc5b1b9208d7d8c95deb4673085b255a628d6a138f1712ae8e6aea059c1ebcf4c2a541906c8fc34615068ad3580a86f899b45d5699b54deb337aca520a0c0647ca108e65489b61a206a3682a1b106d3ef4d160171ddc00c0b61335cca4b570e5bcee7833a71f85c5cce77631c609c0082f950a76daae766c1d69029a209bb2f3aead78f881654330319b67f7179d3c2b20c6a36492d40010d54c7d206ebbf7979b702c9a7a9d75776b9f3abbbd0089b23d867995fca3a5301cd97f64"}, @NL80211_BAND_6GHZ={0x34, 0x3, "b8385a2216de48f8320759162e104138eb626316778cdbc308b8cbd704262f2d0111d47f922175f2e32e78989e7459da"}, @NL80211_BAND_2GHZ={0xce, 0x0, "5aa20059c2db52d1af92aed2dccac647c6c511d4e5bed4c9a26e1b76471dc6b6bf58c6792dcbd88a0e18e54b6c2dface08e34c624df20a518eba45831bb8ee30325756f02d7ff67163fa430f416c005586d172072f11f9f07e5d237579ef3ecc9b6ba82822b707c525ee04984298ddaec6f9c88aba56c5479c0faef794a13c82262c768b6bf2713b32530899e6ffc4ef426025d9215980cfb120874080eaa2826dfee6354c8ceba0bab380dcde08cc2852587a1fcfa5fb02674c08d00f387857e489adac8ec4d4c4cd13"}, @NL80211_BAND_60GHZ={0x95, 0x2, "c3129aabf3d1cdf77ba64aea4df385fc5a5389707bffa7587b6979d0822e3fb40fdfe9ad650e6b9ca5d8be0c3040b019bcedf5f44bb49fd950b5bad4b56904bc5c759c222f130b95c44c4e24bf5909b28b08634ebe33bfb88ba32a161b659d612af7cb9e1120155c760be2e034abe55d5f14780edf2fc38124b5d54995eaa4bb7bbf5c251c825725989de26121b744e165"}, @NL80211_BAND_6GHZ={0x4c, 0x3, "d54c9af02c4c52b99cb7e2deb18348126a52900194af54476b18b0fe65a8764b88ecdd9f1a8657e75189b000cf95f2eb0bf090aaa14e34eaf7690db32fe527a14ae04086cfdbe18d"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xc1}, {0x8, 0x0, 0x23b}, {0x8, 0x0, 0x1df}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x2000c044}, 0x20040000) 12:25:53 executing program 3: alarm(0x1) alarm(0x3b70) alarm(0x0) alarm(0x1a42) alarm(0x4) alarm(0x1) alarm(0x100) alarm(0xffff) alarm(0x0) alarm(0xff) alarm(0x40) alarm(0x1) alarm(0x18) alarm(0xffff) alarm(0x9) alarm(0xffffffffffffffff) alarm(0xffff) alarm(0x3ff) alarm(0x81) alarm(0x2) 12:25:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @multicast1}}) listen(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xb}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) writev(r1, &(0x7f00000001c0), 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0x1b, 0x1}, {0x3}, {0x24, 0x1}, {0xb, 0x1}, {0x7b53c7eb6cb20aff}, {0x48}, {0x24, 0x1}, {0x4}, {0x1}, {0x1}, {0xb}, {0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r3, &(0x7f0000000340)="a2a9d702878e15a44040e236a5b1e374eb50732bab2238e128cae5f31f18c02f85b89c630451c7dbd5768c0f16cd35990b85e18bd6", 0x35, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000003c0)={'veth1_to_bridge\x00', {0x2, 0x0, @local}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x2000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) recvfrom$inet6(r5, &(0x7f0000000540)=""/214, 0xd6, 0x60, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x1, 0x7fffffff}}, './file0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000680)={@private0, 0x45}) r7 = openat(r5, &(0x7f00000006c0)='./file0\x00', 0x2, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r7) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000001600)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000780)={0xe30, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x39}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe}, @NL80211_ATTR_CSA_IES={0x168, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x1000, 0x8001, 0x4, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4, 0x3]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xe0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd9, 0x3, "dc7635a672db3137b124c56ff8a9dee8aaba24e7641380da8d45f990aad010fbf349c143eea2f6e0e61e7e57b382ae1251a517cbe6d68f0ae2bcde64d0e5835bb5452d28a64042b6ac27ef9f7b09b7462fcaff478d22fb55af95a57b2f874fe7e9409302f3eccd406c0d28d841a0549eed20616623315ed4109e4b15386eb5f5a508b4fb1919c6132b58973dd964f4ea5556960098e78e90fcfaec8a477b103470ec598196b943f33251d5c6f31f532002cd683a58773ccf259c14324eb664c308f4ece3492c5d778b4532b7750029d178c6f54651"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x70, 0x80, [@tim={0x5, 0x34, {0x1f, 0xbc, 0x81, "55896b76efdf24a9c4e3bc9848fa065b6386c501e449c6d0a978138ddc93404411dceeed13cf0830003ed1d82d5f349b3f"}}, @supported_rates={0x1, 0x3, [{0x60, 0x1}, {0x60}, {0x18}]}, @ssid={0x0, 0x6, @default_ibss_ssid}, @prep={0x83, 0x1f, @not_ext={{}, 0x7, 0x3, @broadcast, 0x9, "", 0xc4e8, 0x9, @device_b, 0x59}}, @gcr_ga={0xbd, 0x6, @device_b}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6}, @NL80211_ATTR_CSA_IES={0xc78, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x27}]}, @NL80211_ATTR_FTM_RESPONDER={0xf4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xea, 0x3, "c377e5b887f2f031f616e513155d235990c3d98f1fb318c9808ca91f5bdc940f9a92293b49992f911b2515560d2c71853936f444f192fd78772c27827f4aed6c6a0bb139815360e01ffddda6df168a07c03f9cb6c53bb573b019a3485eb28648c5da63780e29b27333173c8f80ed77178f645fcde88af7bf471093f7a99284685eb3f55618999741ea03cd0fb8f8e4cc790bfdf2be47c14981ac4a75de30bcbf08613830abc2ff6d128c51d8f6bed5131a59ffd1ba633a7bd59bad3cc707a2bd027666d32849d722668d7b14e48afc853a468d6abef78e5ff02f3740eb6697daa6aac32133a6"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x6f5, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x462, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x1, 0x1}}, @ver_80211n={0x0, 0x9, 0x1, 0x2, 0x0, 0x3}}, 0x99b, @default, 0xa06c, @val={0x0, 0x1f, @random="527e68c1915dcaba7ceafc95b557f1f03bb0f652358978ec80b2d3dfcea930"}, @val={0x1, 0x4, [{0x6c, 0x1}, {0x4}, {0x24}, {0x2}]}, @void, @val={0x4, 0x6, {0x3f, 0x40, 0x7, 0xc870}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x2, 0x0, {0x6, 0x0, 0x0, 0x6f}, 0x0, 0x3f, 0xfc}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0xff, 0x38}}, @void, [{0xdd, 0xaa, "ecdaaed161d2c812b897b7b28973ae658be78353ef6079ed0630179e2b24350de5f450e916df18abf9b1882524c9c3939b5fddfcf9c0c4378798fd72acf2bc5069c721d283d0b782992249e9d21a317a96d5b4b263db1f6a9704be0b15ba74101fc05186b68c4303485a42b696222cee642a2c7cfa163d5140e70e769196ba80dac32a70e0d471d68196d158e8412daa4c2cba33a4b96e992dd66ad04747486a2f66fea0954b416724e0"}, {0xdd, 0xd0, "e855cb54be74249034f18005fb8be188cad319ac36eb2088aa9f15b878a9a36da35907bb2a5c0bcd38c35b13c5dbd87552f923e61f547f83a34e3541a39a5a7e4cba43d7ec32ec8affd798150c9e1cf0376c3cdb6c28f336d6cad4a7bb1bd2af1f389717203ebc8962eaf7ef7e928486e73dee38a6ee317c729781e09fcfccf8fe6cabe6c15a2a5405bba0f11880be078004ae4e6889f127c1b50966f94497264b3a9c9e572384a5c743b93ab059e3568ee8cbf1e9541c73f539ea2513efbaa1ca1166005a7147d8ec15bbf0c90c1596"}, {0xdd, 0xbd, "bca2b57eac2f9086672a9ae56bb14cc9c717e115c8d8695f3b64d22d3c888ee7d2b483f44bfb210dcfb64a479a7ca30ee1d9cc919fbc2dd86184f2df76d6dd6e20882cdbfeee9a630232c4c17a8440447b46c6d2e530cf4f186d9fea473cc244cd8ce2234d3c5bafbb232ba0eb0782d4a672395e810de1b0fc00851c55d072a53309d7b45a8ea78db3793a844f4602411ac6b6b0a7e00c70bce33390d3a70b25fc3870ae3371f5a5f164f949f20419df8c745a8eb0be9ddad210873d91"}, {0xdd, 0x95, "ab45ec5cb31c798493a8aa0c4151b3fde1866c0409055c4907a19e12e52d6826774d2984576edafb50f162e25604f373b2743c437dede23f1a3cb11aded6d7f75b50448726f1970f6d79ee31df59f867bc9a9eaf3f7167181e649d46d82702b590e8ea64e6805b0382844da4476d0325bc8766e7d06b65b8128dc25f010e8dc2cf335f831ee3c07532a33b8801a2c542994d0427f2"}, {0xdd, 0x14, "4b10a9555735051b08a6b7a7a7560651e5e9c687"}, {0xdd, 0xc6, "0e7088bf87dcbcd5888625f372e73471b13aa412ceaac2750590ece6bf05aa9cc664a72d68e94c0eac893e5ac34e225faf7706e63e5b47f5c5e86586a1332daec75059433de7f7cd086acc3c6e9bec27fffee0f4de32fef4de7d6d6a05894b8a84b6de32775b8ab48e9032c59b43ae8d8f690a79a2dad3d9040523744e311dc57f46b509b2e74165ca7ae375e9ca94f32c1aa0a6b8b6156fc2dfea08aa194b82beb8b57b988ce2918928ee37f5b2e30747d0458bc570f57acd1162fbc49112c3a00cb46d902c"}, {0xdd, 0x2b, "b3db67a4333038f50e10a4dadc0a558acc0147632a13748d1d407a386f349fb03e3fb9d1eccd0082e44ecb"}]}}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x84a3, 0xfff7, 0xe9c0]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xac}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd0}]}, 0xe30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000004) 12:25:53 executing program 5: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x3) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="f8a045f2c10d7e5bbef45c9b4d5f8d1e3257", 0x12) fchmod(0xffffffffffffffff, 0x3) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ahci', 0x80401, 0x140) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x0, 0x1}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000100)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000140)={0x0, 0x80000001, 0x40}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r0}, 0x6, &(0x7f00000001c0)=[0x9, 0x1f, 0xffffffff, 0x4, 0x3, 0x4], 0x9, 0x0, [0x55d, 0x9, 0x400, 0x7a34]}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x29, 0x7, 0x6, 0x0, 0x20, @local, @remote, 0x8, 0x40, 0x401, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000540)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x44010080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x238, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000840)) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FIBMAP(r6, 0x1, &(0x7f00000008c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 90.268544] audit: type=1400 audit(1737289553.946:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:25:53 executing program 6: r0 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x8, 0x1000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f00000000c0)=0xb9d, 0xe3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='schedstat\x00') r2 = fsmount(r1, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x69cd, 0x3a8aac6a, 0x1) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r4 = openat2(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x48000, 0x65, 0x6}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) fsmount(r3, 0x0, 0x8) mmap$usbmon(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000001, 0x1010, r1, 0x80000001) shmget(0x2, 0x4000, 0x4, &(0x7f0000f49000/0x4000)=nil) mlock(&(0x7f0000dd1000/0x4000)=nil, 0x4000) 12:25:54 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000280)={{}, r0, 0xc, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x100, 0x0, {0x2e, 0x1, 0xd0d, 0x1dc5, 0x100000001}, [0x9, 0x1ff, 0xa14, 0x4, 0xac]}}, @subvolid=0x8}) pipe2$9p(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000012c0)={0x0, 0x4, 0x8dd, 0x7}) r3 = accept4$bt_l2cap(r2, &(0x7f0000001480)={0x1f, 0x0, @none}, &(0x7f00000014c0)=0xe, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000001500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0xa020, &(0x7f0000001600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '^+\\@[&J'}}, {@cache_none}, {@access_uid={'access', 0x3d, 0xee01}}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x32, 0x30, 0x61, 0x30, 0x63, 0x66], 0x2d, [0x63, 0x3, 0x33, 0x37], 0x2d, [0x31, 0x66, 0x38, 0x66], 0x2d, [0x34, 0x66, 0x63, 0x36], 0x2d, [0x66, 0x33, 0x66, 0x62, 0x62, 0x35, 0x62, 0x33]}}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}}) r5 = dup3(r3, r3, 0x0) ioctl$CDROM_NEXT_WRITABLE(r5, 0x5394, &(0x7f0000001700)) r6 = memfd_create(&(0x7f0000001740)='\x00', 0x2) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000002000)={0x9, &(0x7f0000001ec0)=[{0x1, 0xc6, &(0x7f0000001780)="2fb32ae155cc1c83e3e511e291e2a60cdb0d93d7b29dc561a6d7ec3fe9dc56c0fb7494f76566547da267748c166f72692d5a5f0de0c5ca175d327a734c9d16ff05ee5f1b837ed7c8ee41ce36de86b90fe47e167bf4c003acb31116ed1d632619ed5c5eaeb0ca036688185e828711e44d71abd36f6574347deccd48cbbb4107db3eca33dc453235038f7d3e3a42f2487b91f4eaff24a0b1bd873c3f8d0593830956ebe9e7e6e733f6de99ced202914d71abcb2f27900bf5c796af82501f4db84c09cc4b4899e0", 0x0, 0x1}, {0x8, 0xe6, &(0x7f0000001880)="c710c6b9193b972a6b906b8bd0ae2865f2f3c4e82e2d7627645a9a42f27002b7b165fe7a42a3fca638dbfc41bd11c4dbfc00a61137f8888ba13643c2f3e114a063183998a884cc088f692c2d7220aa0dabeec0a5aaee43cf9ec1d3c989a72144316021e4c86369e4972bcba4a663ed49356f6b870b99823431ec32d65a17377a4457ffba3b1ec480e1f4f9484a0ad1ddd5b88638d5d08dae7e27299e89807d7574fc0d079298d6cb103c80100efb330c5fa0bd9597fd2fa710eb63239c3800b27b06a4bab5efe463289aa4fd7e698e5da49979e416234d96cd30889337b04a0aad1532ad96e9", 0x0, 0x1}, {0x3e9d4abc, 0xe0, &(0x7f0000001980)="e162fcc50b268d019d01d3e7ca009a8644e8ea2b6afbefb0c2471c01a1944b32d737216be351b396bf9e898c1f39ab8263e01be8378c15656508c4d6a7a9afcd52a2b4c0e4c0d4ce285c66e6f3139e0f11de07a7faad5f7a2b9c100f34ff0c54ba44e9e88543906f03e98f4490648ebd8c1ccf85dbc30a79151b03980095f0e05be9019ae3e043125f49a6887e9a4888f71be5003c6c0396c83be4cc1eb0a626eed007dc22bd6fa3375e5e2515b96a053f229e3381e5e4c9f29e747b1faf463d7a69da701bdcf8d776fef00f0a49ccbd0ff15282b8bc7f8944f4e588ebcd6a1d", 0x0, 0x1}, {0xc3, 0xe6, &(0x7f0000001a80)="1ee4f1e660150e149d4a0c1971c32271450bd35a065e9496873a11f1ea190abc202c30a25159c3042d7f12220df3e302d6dcd52a8f9ca16d49835c8ea628ce3c2e230b52ca39e68c9e38575f22caf8f30fab4b0fc8970a2dfbb74627c6f6681a5c6f00087da07a3c8220e470d0f8b8173dcb3ec7e0756f40e5b54ca75f6a9dbf45149711ea368433eb17bdbab8c9e857ce0f3f8792746f788f5ea694a7cdccdd9da7125fbedc44b871809e10093b7fcbba0ec715dccf1ccf60e4699827400f531b4227862f685e64dc094c69e5582bd808ab4555c51645ebd766d8e5044671091e0f3d5e6512", 0x1}, {0xffffff4a, 0x89, &(0x7f0000001b80)="ff30044c6caf5f177fc92de5d73207e789215b88b2bfd8e685a8646f5bd5111c1b30e3e3e482ffa2825307066766fe522b1e374099fb046edfbc653154cd5f67bee36ef686358e87ff5545638834351a5160a7aa25745856cf65d3565d784e183a3422089d469e59f3fa4d3570e13377f521e71e2aa7d8cb17217b27967f3e7b106aebe50b573da101", 0x0, 0x1}, {0x5, 0xd4, &(0x7f0000001c40)="e1b1f8e9c480f622bc7837f6663a2dc973b746cb9df8d9783d66054f4474206f915d8cd2348d05a01e5774b1af194d5dd36109747557fbb8e0701868a57bfa533c03c76b179e6b47f42199b1f7a2e447a78e87085f3f2c60ee6f676dd6e4a25b0ab9f31ea27772b1e9868823dac772d4d6e688d6bec9c9126ecb4fb5f3939d2f1e5cebea557b696646af3614f2b7fffb84b9294a5425c7b0909750922922fc697df36fe4ff3fdcfd423a29800d570af5c0627521b0de11544d47ce3c61a36c0daa134ea3b2e98481a44c63e85be25b773bc14c33", 0x1}, {0xd5ef, 0x7, &(0x7f0000001d40)="13d2383563f8f7", 0x0, 0x1}, {0xadb3, 0xc5, &(0x7f0000001d80)="d658fe813bba75fe09c0cd70f7ed04c222ab0d945b13d759c05f2e3c75bec70e63a725d530848dcc46ad8f7cde92650973aeca87c103c845aa68308a291128eaeae598e06e2c1777d3423b4068d415b2a29bd2575fb1dc517ae0f9b356e7151a7dcfb8bbbf94040e3aa2c13f021c18b2fae62fe3328897925f59932ce39dfc65a6da982af6d86477f503e6b87146e31b53b3df466f92181b6c1d8f08a7c90eef6199109f17697d54d99a2c1a79bb51d4f66783da07cbcc69fbc548f0412a1da82287671085", 0x1, 0x1}, {0x37fe, 0x15, &(0x7f0000001e80)="a834c8e01f9f31a8087d87a81c472a3215cb623b37", 0x0, 0x1}]}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20010, r5, 0x8000000) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002040), 0x80000, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000021c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r8, &(0x7f0000002080), &(0x7f0000002180)='./file0\x00', 0x200, 0x100, 0x0, {0x0, r9}}, 0xfffffffc) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) fsmount(r8, 0x1, 0x4) fallocate(r4, 0x1e, 0x40000, 0x0) [ 91.753940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.759292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.761343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.766569] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.770603] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.772159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.774294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.776500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.778690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.796148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.802611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.805473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.810819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.819671] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.827812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.833443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.843671] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.847888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.911980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.914276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.916579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.930928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.938460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.938699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.940248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.940849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.946442] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.967241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.976355] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.997284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.002573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.006260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.008860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.034380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.045490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.052393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.093008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.101191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.108306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.108620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.113607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.117704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.127826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.130503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.135854] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.138529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.140624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.149356] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.830550] Bluetooth: hci1: command tx timeout [ 93.893797] Bluetooth: hci2: command tx timeout [ 93.894862] Bluetooth: hci0: command tx timeout [ 94.021302] Bluetooth: hci3: command tx timeout [ 94.085196] Bluetooth: hci4: command tx timeout [ 94.149233] Bluetooth: hci5: command tx timeout [ 94.213207] Bluetooth: hci6: command tx timeout [ 94.213626] Bluetooth: hci7: command tx timeout [ 95.877969] Bluetooth: hci1: command tx timeout [ 95.942173] Bluetooth: hci2: command tx timeout [ 95.942861] Bluetooth: hci0: command tx timeout [ 96.070230] Bluetooth: hci3: command tx timeout [ 96.133192] Bluetooth: hci4: command tx timeout [ 96.198471] Bluetooth: hci5: command tx timeout [ 96.261199] Bluetooth: hci7: command tx timeout [ 96.261300] Bluetooth: hci6: command tx timeout [ 97.925316] Bluetooth: hci1: command tx timeout [ 97.990168] Bluetooth: hci0: command tx timeout [ 97.990259] Bluetooth: hci2: command tx timeout [ 98.117231] Bluetooth: hci3: command tx timeout [ 98.181286] Bluetooth: hci4: command tx timeout [ 98.245217] Bluetooth: hci5: command tx timeout [ 98.309362] Bluetooth: hci6: command tx timeout [ 98.311019] Bluetooth: hci7: command tx timeout [ 99.973181] Bluetooth: hci1: command tx timeout [ 100.038473] Bluetooth: hci2: command tx timeout [ 100.038619] Bluetooth: hci0: command tx timeout [ 100.165583] Bluetooth: hci3: command tx timeout [ 100.229161] Bluetooth: hci4: command tx timeout [ 100.294147] Bluetooth: hci5: command tx timeout [ 100.357335] Bluetooth: hci6: command tx timeout [ 100.357986] Bluetooth: hci7: command tx timeout [ 151.436095] syz-executor.5 (281) used greatest stack depth: 24080 bytes left [ 151.672095] [ 151.672538] ====================================================== [ 151.673679] WARNING: possible circular locking dependency detected [ 151.674826] 6.13.0-rc7-next-20250117 #1 Not tainted [ 151.676044] ------------------------------------------------------ [ 151.680469] kworker/u8:0/11 is trying to acquire lock: [ 151.681449] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.683411] [ 151.683411] but task is already holding lock: [ 151.684496] ffff888034878768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.686380] [ 151.686380] which lock already depends on the new lock. [ 151.686380] [ 151.687868] [ 151.687868] the existing dependency chain (in reverse order) is: [ 151.689238] [ 151.689238] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 151.690509] __mutex_lock+0x13d/0xb50 [ 151.691405] wiphy_register+0x1b2e/0x25d0 [ 151.692341] ieee80211_register_hw+0x23a4/0x3d60 [ 151.693369] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 151.694448] init_mac80211_hwsim+0x389/0x870 [ 151.695467] do_one_initcall+0xf9/0x640 [ 151.696404] kernel_init_freeable+0x53d/0x7a0 [ 151.697417] kernel_init+0x1e/0x2d0 [ 151.698231] ret_from_fork+0x48/0x80 [ 151.699063] ret_from_fork_asm+0x1a/0x30 [ 151.700004] [ 151.700004] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 151.701200] __lock_acquire+0x29fd/0x4580 [ 151.702123] lock_acquire+0x19b/0x520 [ 151.703000] __mutex_lock+0x13d/0xb50 [ 151.703884] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.705070] unregister_netdevice_queue+0x224/0x2e0 [ 151.706125] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.707197] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.708262] ieee80211_unregister_hw+0x55/0x3a0 [ 151.709263] hwsim_exit_net+0x3a0/0x730 [ 151.710159] ops_exit_list+0xb3/0x180 [ 151.711024] cleanup_net+0x546/0xad0 [ 151.711866] process_one_work+0x8ee/0x1a10 [ 151.712830] worker_thread+0x674/0xe70 [ 151.713739] kthread+0x3ab/0x720 [ 151.714547] ret_from_fork+0x48/0x80 [ 151.715381] ret_from_fork_asm+0x1a/0x30 [ 151.716330] [ 151.716330] other info that might help us debug this: [ 151.716330] [ 151.717760] Possible unsafe locking scenario: [ 151.717760] [ 151.718869] CPU0 CPU1 [ 151.719740] ---- ---- [ 151.720622] lock(&rdev->wiphy.mtx); [ 151.721397] lock(rtnl_mutex); [ 151.722524] lock(&rdev->wiphy.mtx); [ 151.723741] lock(rtnl_mutex); [ 151.724422] [ 151.724422] *** DEADLOCK *** [ 151.724422] [ 151.725515] 4 locks held by kworker/u8:0/11: [ 151.726356] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 151.728341] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 151.730234] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 151.732005] #3: ffff888034878768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.733989] [ 151.733989] stack backtrace: [ 151.734838] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 151.736378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 151.737869] Workqueue: netns cleanup_net [ 151.738668] Call Trace: [ 151.739174] [ 151.739615] dump_stack_lvl+0xca/0x120 [ 151.740428] print_circular_bug+0x47b/0x750 [ 151.741272] check_noncircular+0x2e9/0x3c0 [ 151.742098] ? __pfx_check_noncircular+0x10/0x10 [ 151.743023] ? hlock_class+0x4e/0x130 [ 151.743753] ? mark_lock+0xac/0xed0 [ 151.744492] ? srso_return_thunk+0x5/0x5f [ 151.745355] ? lockdep_lock+0xba/0x1b0 [ 151.746151] ? __pfx_lockdep_lock+0x10/0x10 [ 151.747038] __lock_acquire+0x29fd/0x4580 [ 151.747882] ? __pfx___lock_acquire+0x10/0x10 [ 151.748757] ? lock_release+0x20f/0x6f0 [ 151.749538] ? __pfx_lock_release+0x10/0x10 [ 151.750386] lock_acquire+0x19b/0x520 [ 151.751167] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.752278] ? __pfx_lock_acquire+0x10/0x10 [ 151.753129] ? srso_return_thunk+0x5/0x5f [ 151.753969] ? lock_release+0x20f/0x6f0 [ 151.754753] ? srso_return_thunk+0x5/0x5f [ 151.755616] ? lock_is_held_type+0x9e/0x120 [ 151.756492] ? srso_return_thunk+0x5/0x5f [ 151.757346] __mutex_lock+0x13d/0xb50 [ 151.758116] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.759248] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.760371] ? srso_return_thunk+0x5/0x5f [ 151.761223] ? synchronize_rcu_expedited+0x38a/0x420 [ 151.762207] ? __pfx___mutex_lock+0x10/0x10 [ 151.763089] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.764120] ? srso_return_thunk+0x5/0x5f [ 151.764963] ? kasan_quarantine_put+0x84/0x1e0 [ 151.765887] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 151.766759] ? srso_return_thunk+0x5/0x5f [ 151.767621] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.768698] ? __virt_addr_valid+0x2e8/0x5d0 [ 151.769578] ? __pfx_lock_release+0x10/0x10 [ 151.770418] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 151.771565] ? find_held_lock+0x2c/0x110 [ 151.772400] ? srso_return_thunk+0x5/0x5f [ 151.773253] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 151.774237] ? srso_return_thunk+0x5/0x5f [ 151.775090] ? lock_release+0x20f/0x6f0 [ 151.775880] ? __pfx_lock_release+0x10/0x10 [ 151.776722] ? srso_return_thunk+0x5/0x5f [ 151.777568] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.778581] ? srso_return_thunk+0x5/0x5f [ 151.779437] unregister_netdevice_queue+0x224/0x2e0 [ 151.780411] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 151.781459] ? up_write+0x195/0x520 [ 151.782220] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.783201] ? srso_return_thunk+0x5/0x5f [ 151.784067] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.785031] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 151.786085] ? srso_return_thunk+0x5/0x5f [ 151.786940] ? srso_return_thunk+0x5/0x5f [ 151.787796] ? synchronize_rcu+0x1ff/0x260 [ 151.788632] ieee80211_unregister_hw+0x55/0x3a0 [ 151.789550] hwsim_exit_net+0x3a0/0x730 [ 151.790336] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.791228] ? srso_return_thunk+0x5/0x5f [ 151.792083] ? netdev_run_todo+0x788/0x1040 [ 151.792943] ? srso_return_thunk+0x5/0x5f [ 151.793784] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.794664] ops_exit_list+0xb3/0x180 [ 151.795442] cleanup_net+0x546/0xad0 [ 151.796186] ? __pfx_cleanup_net+0x10/0x10 [ 151.797036] process_one_work+0x8ee/0x1a10 [ 151.797907] ? __pfx_lock_acquire+0x10/0x10 [ 151.798766] ? __pfx_process_one_work+0x10/0x10 [ 151.799731] ? srso_return_thunk+0x5/0x5f [ 151.800576] ? move_linked_works+0x172/0x270 [ 151.801444] ? srso_return_thunk+0x5/0x5f [ 151.802297] ? assign_work+0x196/0x240 [ 151.803114] worker_thread+0x674/0xe70 [ 151.803928] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.804966] ? __pfx_worker_thread+0x10/0x10 [ 151.805865] kthread+0x3ab/0x720 [ 151.806569] ? __pfx_kthread+0x10/0x10 [ 151.807382] ? srso_return_thunk+0x5/0x5f [ 151.808226] ? finish_task_switch.isra.0+0x206/0x840 [ 151.809237] ? __pfx_kthread+0x10/0x10 [ 151.810034] ret_from_fork+0x48/0x80 [ 151.810759] ? __pfx_kthread+0x10/0x10 [ 151.811566] ret_from_fork_asm+0x1a/0x30 [ 151.812407] [ 154.065007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.068742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.075389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.079544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.086443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.087966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.133435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.137307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.142649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.143182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.143748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.145995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.147959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.157366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.161351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.167025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.186508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.203680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.219653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.224378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.227465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.232418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.240226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.241619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.243903] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.247422] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.250315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.250721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.253732] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.254312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.254920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.258577] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.260491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.262205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.277047] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.277697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.283843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.287321] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.288392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.288878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.295438] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.302881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.309717] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.314315] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.318696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.319516] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.323616] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.324399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.166111] Bluetooth: hci0: command tx timeout [ 156.229645] Bluetooth: hci1: command tx timeout [ 156.293202] Bluetooth: hci2: command tx timeout [ 156.358310] Bluetooth: hci4: command tx timeout [ 156.358812] Bluetooth: hci3: command tx timeout [ 156.359093] Bluetooth: hci7: command tx timeout [ 156.421442] Bluetooth: hci6: command tx timeout [ 156.421586] Bluetooth: hci5: command tx timeout [ 158.213732] Bluetooth: hci0: command tx timeout [ 158.277266] Bluetooth: hci1: command tx timeout [ 158.341172] Bluetooth: hci2: command tx timeout [ 158.406839] Bluetooth: hci7: command tx timeout [ 158.406928] Bluetooth: hci3: command tx timeout [ 158.406972] Bluetooth: hci4: command tx timeout [ 158.469155] Bluetooth: hci6: command tx timeout [ 158.469237] Bluetooth: hci5: command tx timeout [ 160.261243] Bluetooth: hci0: command tx timeout [ 160.325169] Bluetooth: hci1: command tx timeout [ 160.389320] Bluetooth: hci2: command tx timeout [ 160.453237] Bluetooth: hci7: command tx timeout [ 160.453374] Bluetooth: hci4: command tx timeout [ 160.453508] Bluetooth: hci3: command tx timeout [ 160.517216] Bluetooth: hci5: command tx timeout [ 160.517371] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:26:55 Registers: info registers vcpu 0 RAX=ffff88800eabb780 RBX=ffff88807b21d338 RCX=ffffffff81429a4a RDX=1ffff11001d64080 RSI=0000000000000008 RDI=ffff88800eb20400 RBP=0000000000000000 RSP=ffff88800f09fdc8 R8 =0000000000000000 R9 =ffffed1001d64080 R10=ffff88800eb20407 R11=0000000000000001 R12=ffff88807b21dff9 R13=ffffffff8864df18 R14=ffff88800eabb780 R15=0000000000000086 RIP=ffffffff81ab7813 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001f27f60 CR3=0000000015e2c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000417b4f8200000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea043 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f873a5d2000 CR3=000000000c09c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=69b0a33a1be8cfa69b4af4c7551fb8ab XMM02=6b1e99b806172e3b00000000000aea28 XMM03=80f09f19808d26a300000000000aec68 XMM04=7e36ad13cc39eb070000000000137f30 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=17a2276c040dee1100000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000