Warning: Permanently added '[localhost]:49847' (ECDSA) to the list of known hosts. 2025/01/19 15:47:00 fuzzer started 2025/01/19 15:47:00 dialing manager at localhost:44245 syzkaller login: [ 62.809435] cgroup: Unknown subsys name 'net' [ 62.904201] cgroup: Unknown subsys name 'cpuset' [ 62.932350] cgroup: Unknown subsys name 'rlimit' [ 68.188484] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 15:47:18 syscalls: 201 2025/01/19 15:47:18 code coverage: enabled 2025/01/19 15:47:18 comparison tracing: enabled 2025/01/19 15:47:18 extra coverage: enabled 2025/01/19 15:47:18 setuid sandbox: enabled 2025/01/19 15:47:18 namespace sandbox: enabled 2025/01/19 15:47:18 Android sandbox: enabled 2025/01/19 15:47:18 fault injection: enabled 2025/01/19 15:47:18 leak checking: enabled 2025/01/19 15:47:18 net packet injection: enabled 2025/01/19 15:47:18 net device setup: enabled 2025/01/19 15:47:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 15:47:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 15:47:18 USB emulation: enabled 2025/01/19 15:47:18 hci packet injection: enabled 2025/01/19 15:47:18 wifi device emulation: enabled 2025/01/19 15:47:18 802.15.4 emulation: enabled 2025/01/19 15:47:18 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 15:47:20 starting 8 fuzzer processes 15:47:20 executing program 1: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x18}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xd4}}, 0x4004021) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4042144}, 0x40) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60cd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x64}}, 0x880) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x16000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x18c, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4b25}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x62edf8eb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffc}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x804) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc4, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9db2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000088}, 0x24004c41) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xea9e) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000c00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) recvmsg(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/129, 0x81}, {&(0x7f0000000d40)=""/252, 0xfc}, {&(0x7f0000000e40)=""/3, 0x3}], 0x4, &(0x7f0000000ec0)=""/101, 0x65}, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004408c}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) 15:47:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffeffff, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x17, 0x79, &(0x7f0000000080)="dce5c800219f68d0648bce9aae16d423dbe200caa1ea573d1c2b1228b04feb76401d71180f840338131362eaba2151f6143433c7f996d32730a9ab73b471c8a1478858f64e3da7b623cc286f57065d6f92109706f8946812f2235bd0af105af258e0a15428e24b0493ea8d2b6fa65144d7d658f61fb9bcf5dc"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) recvmsg(r5, &(0x7f0000002000)={&(0x7f0000001b80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/200, 0xc8}, {&(0x7f0000001d00)=""/125, 0x7d}, {&(0x7f0000001d80)=""/44, 0x2c}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/163, 0xa3}, {&(0x7f0000001f00)=""/117, 0x75}], 0x6}, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000002040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000002080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f00000020c0)=0x6, &(0x7f0000002100)=0x1) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000002380)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002180)={0x188, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x40008000) ioctl$EVIOCSABS0(r8, 0x401845c0, &(0x7f00000023c0)={0x2, 0xffff, 0x4, 0x9, 0x4, 0x1ff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x20, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x4018000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000002540)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000002740)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0x8c, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e607237200"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "69ac84d050"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "c3b867601bb8b5282c2e21a2"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000002780)=0x8000) 15:47:20 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x43, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3, 0x1}, {0x24, 0x1}]}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x6, {0x6, 0x1, 0x4, "a6cd22"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0x24}}, @challenge={0x10, 0x1}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x33}}, @rann={0x7e, 0x15, {{0x0, 0x30}, 0x8, 0x4, @device_a, 0x1, 0x8, 0x2}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000041}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x6b8c4f0c28ff543, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x440d0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaae1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x98}}, 0xc0c0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x11}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x2000c810) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x20000044) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780), 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb4, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x8b, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x5, 0x2}}, @ver_80211n={0x0, 0x530, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x1, 0x0, 0x2f, @void, [{0xdd, 0x63, "637b59b646a2031b9e75554f4ead9933ca105d908f05ef374fedb27396f2b3e87bf4faeb7b379c8981a8ea109614b00ecc852d974f0a379e747f61b620a6aa179b4f5f46c7d55039af508f48c2df5ca822404514bc7f275e0cd8551e05879c5a92ff25"}]}}]}, 0xb4}}, 0xc0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x24000880) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xbd}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048850}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x138, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3000000}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 15:47:21 executing program 3: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}}, 0x40010) socketpair(0x23, 0x1, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b9c25e7f7be8006bab912ae490"}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c1}, 0x40030) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000003c0)=""/86) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000480)=""/4096) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000014c0)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x68, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x27}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000002a80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002a40)={&(0x7f0000001740)={0x12e4, r7, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x457, 0x33, @mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7ffd}, @broadcast, @device_a, @random="cf50b994a839", {0x4, 0x81}}, 0x80, 0x5e, @random=0x81, @void, @void, [{0xdd, 0xd1, "e118e250d2334e75fdb158b9a10576cd18a03665ee7396afe31c2be2c4b70319f6927066a6179b4281040b15c6f1c96c8a55de93ff34ff8dc2f4a6f3dab3a26f04b6aec836f50862a4fa4b6d97c8ccee5e565bf50f164b51e332b905f33b96fb9b86c567eeb2bbf7896651f8815e12ebfbd34eb2e23d8c351b309e27fe0b1bbb26d88ce3504a645e98a46c935b099b7632a914de246c2e5fda0ab8737213debc8700845042e742cf63d6609605bd0101bd2d8205489890391bb2df037f908eb4fab3281642cb6f8ea744c785b6b111e99e"}, {0xdd, 0x47, "2835cf51c1ab9be8549c71a1bf43502c8a8809c4a1057d3770ffdb4bf295909518b8615f47c7cc244bda72803e7b06ac3c76fb8bf810e49c493dc4027ac009a3dd5f08a0b2b075"}, {0xdd, 0xb3, "ba4c8bea6e5dbde4eb27dd53e962014a70a89159e9a03471b9b1f7962bfa78c1cec3e22e1841572406fa3b2c2c9397adbc79f874715033a6a4b2576d95c22e22a1a14bd215cf1abb4e095ea3b1292c0fa5bfa9330e7f4e1e5cba19ca0e3875850376c08e60ef4b16b024fcdbccee2a15b1578361756852dda4cd4f613f8f8a2dc941fd394e80db303114893c61a5e3eab799a8f9d7b0cbe3b96802a1979ebb71852c5f7371c5f76a252cf787309ad572352d53"}, {0xdd, 0xfc, "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"}, {0xdd, 0x8, "530284a0415c96ae"}, {0xdd, 0x55, "2e5b06df46ffee148832a197848ae72b44b7616dc197e5521b60dc7db39cd0e235de83efae0e92f866f23509e5118b8fe24f51c088bc9b062cca1eef01c70c0e4c957263b9ab6101a2dded7fb7c0bf518cbb5c0d32"}, {0xdd, 0x31, "88e12540d0e13d8e25f5696c082e8b0fbb408da63b78584dafea5411c026b9b0b27e2ee6faf42ea4250f145c5d0bc1986d"}, {0xdd, 0xd0, "6f00c49de9f75f9a7da1a38c22cf52d830900283f17ba4afdff5e82fd847850fec87c051d8b9f53bbbce26509b5874ea1e5895f802d4bce4e179842945dfa0453666535e467d2a7f825d52020e98b65c5dfef9f9f767faad294918e631e0b8f86b6f64853990862dedaee4bf41f30edd8c0f9e01431d0f609d7269b3a89c1c2884d9445648b1bd7b4899dc93e1d894e0260eb7b16d41f0afee9dc71766a59d3e239787877cddd75b9f7af14c606893cca8a08211bb42c3c3857f27c13324524e89d73a423c9ff8210869d4fafececd1c"}]}}, @NL80211_ATTR_FRAME={0x226, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x8, 0x4}}, 0xa16bc036f7c77709, 0x47, @default, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x1000, 0x1ff9, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x6, 0xf4}}, [{0xdd, 0xe7, "3a69c3b257cb0f4dd0fcd757eec306df6ea47248de9326a3e9b339e932b16dfa8218576a3f6e4d9f8d218baa20e28498459e0018eeb2b54d918f10bd32c0c1bd0d27c13febcf26a6c90c55e4e727a6f51ddda87363b77f65d3d9059a1f0d86c54a2caee7e09303116dda9b4b38210200cc8f2fbc2de5a56edf92bcf1ea178803c8028fba017d2fc8689e427f3f20f67d5c2c9f6552a64574d2fb6c545f676da8e3212ecbd5ecccb78f7295800243a9b72d0ba46f75a900583c3bc4adf484af3d473339b27d3d6f89d75fd6c36b2953f0c3d52ea5981a2e01309cb562884fdcac60a32b0787c0b7"}, {0xdd, 0xfd, "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"}]}}, @NL80211_ATTR_FRAME={0x8d4, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @random="d695565bfea3", @device_a, @device_b, {0x5, 0x166}}, {0x2, 0x0, 0x2, 0x0, 0x80}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x81}, @device_b, @random="c49e25986d24", @random="7298f7059a2d", {0x8}}, {0x3, 0x0, 0x1}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x342, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @from_mac, @device_a, {0x2, 0x62}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) [ 82.740932] audit: type=1400 audit(1737301641.072:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:47:21 executing program 4: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x4, 0x5f9d]) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/199) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x5, 0xfffd, 0x6, 0x8}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x5, 0x101, 0x0, 0x200}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000240)=0x5) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x806f1868eb4aaf7f, 0x0) socketpair(0x9, 0xa, 0x27, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {r6}}, './file0\x00'}) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x719ea254, 0x5, 0x5]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r9 = socket(0x15, 0x3, 0x7022) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0xe783}}, './file0\x00'}) ioctl$EVIOCGKEY(r11, 0x80404518, &(0x7f00000004c0)=""/8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {r5}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4000000) 15:47:21 executing program 5: setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x1, 0x3}, {0x8, 0x7}]}, 0x14, 0x1) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x1, 0x9}, {0x2, 0xe6}]}, 0x14, 0x2) socketpair(0x27, 0x3, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000001c0)) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/77, 0x4d}], 0x1, &(0x7f0000000340)=""/18, 0x12}, 0x2) recvmsg(r0, &(0x7f00000005c0)={&(0x7f00000003c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/246, 0xf6}], 0x1, &(0x7f0000000580)=""/10, 0xa}, 0x20) recvmmsg(r1, &(0x7f0000008380)=[{{&(0x7f0000000600)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/164, 0xa4}, {&(0x7f0000002900)=""/252, 0xfc}, {&(0x7f0000002a00)=""/61, 0x3d}, {&(0x7f0000002a40)=""/251, 0xfb}], 0x8, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000003bc0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003c40)=""/163, 0xa3}, {&(0x7f0000003d00)=""/196, 0xc4}], 0x2, &(0x7f0000003e40)=""/4096, 0x1000}}, {{&(0x7f0000004e40)=@phonet, 0x80, &(0x7f0000005180)=[{&(0x7f0000004ec0)=""/36, 0x24}, {&(0x7f0000004f00)=""/104, 0x68}, {&(0x7f0000004f80)=""/228, 0xe4}, {&(0x7f0000005080)=""/195, 0xc3}], 0x4, &(0x7f00000051c0)=""/18, 0x12}, 0xb2}, {{&(0x7f0000005200)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000005280)=""/137, 0x89}, {&(0x7f0000005340)=""/120, 0x78}, {&(0x7f00000053c0)=""/18, 0x12}, {&(0x7f0000005400)=""/108, 0x6c}, {&(0x7f0000005480)=""/23, 0x17}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x6}, 0xba}, {{&(0x7f0000006540)=@vsock, 0x80, &(0x7f0000006640)=[{&(0x7f00000065c0)=""/123, 0x7b}], 0x1, &(0x7f0000006680)=""/209, 0xd1}, 0x4}, {{&(0x7f0000006780)=@tipc=@id, 0x80, &(0x7f0000006a00)=[{&(0x7f0000006800)=""/197, 0xc5}, {&(0x7f0000006900)=""/113, 0x71}, {&(0x7f0000006980)=""/86, 0x56}], 0x3, &(0x7f0000006a40)=""/145, 0x91}, 0x5}, {{&(0x7f0000006b00)=@nfc_llcp, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006b80)=""/232, 0xe8}, {&(0x7f0000006c80)=""/171, 0xab}, {&(0x7f0000006d40)=""/132, 0x84}, {&(0x7f0000006e00)=""/95, 0x5f}], 0x4, &(0x7f0000006ec0)=""/120, 0x78}, 0x8}, {{&(0x7f0000006f40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000008240)=[{&(0x7f0000006fc0)=""/166, 0xa6}, {&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000008080)=""/99, 0x63}, {&(0x7f0000008100)=""/229, 0xe5}, {&(0x7f0000008200)=""/46, 0x2e}], 0x5, &(0x7f00000082c0)=""/158, 0x9e}, 0x8}], 0x8, 0x7, &(0x7f0000008580)) syz_genetlink_get_family_id$nl80211(&(0x7f00000085c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008600)={'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000008640)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000008680)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000086c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000008700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000087c0)={'ip6tnl0\x00', &(0x7f0000008740)={'syztnl2\x00', r4, 0x29, 0x1d, 0x7, 0x9, 0x2, @rand_addr=' \x01\x00', @local, 0x20, 0x40, 0x0, 0x3}}) recvmmsg(r2, &(0x7f0000008a40)=[{{&(0x7f0000008800)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000089c0)=[{&(0x7f0000008880)=""/73, 0x49}, {&(0x7f0000008900)=""/176, 0xb0}], 0x2, &(0x7f0000008a00)=""/58, 0x3a}, 0x4e1e}], 0x1, 0x40000000, 0x0) pipe(&(0x7f0000008a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000008ac0)={'netdevsim0\x00', @ifru_addrs=@nl=@unspec}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000008b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000008b40)={{0x1, 0x1, 0x18, r3, {0xee01, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000008b80)={{0x1, 0x1, 0x18, r7, {0xee01, r8}}, './file0\x00'}) 15:47:21 executing program 6: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) socketpair(0x1a, 0x0, 0xfff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x6}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xf28}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x976c}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40080c0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x8, 0x201) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000000300)={0x44, ""/68}) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r7 = syz_open_dev$sg(&(0x7f0000000380), 0x6, 0x8a80) ioctl$SG_SCSI_RESET(r7, 0x2284, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f00000003c0)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f00000004c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) 15:47:21 executing program 7: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x11}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c5}, 0xc000) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2b91}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9d000000}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xc0}}, 0x20000840) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'IPVS\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4000880) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r2, 0x24, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x8}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x31240d}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf0, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48004}, 0x200040c0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x38}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x28, 0x0, 0x80) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c084}, 0x8010) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, 0x0, 0x306, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044004}, 0x24000883) [ 84.354028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.356666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.363074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.369571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.378090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.384610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.387567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.396068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.405062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.407938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.411135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.411214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.415357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.420542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.423190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.427562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.434915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.437169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.437469] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.444724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.448568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.455097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.463235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.463931] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.471442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.490244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.494520] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.521192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.523490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.525847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.527882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.528996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.530357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.534270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.538486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.539236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.544641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.545691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.549402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.552283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.558621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.561556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.564006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.565171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.566088] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.567158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.570492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.572460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.496251] Bluetooth: hci1: command tx timeout [ 86.496472] Bluetooth: hci0: command tx timeout [ 86.560818] Bluetooth: hci2: command tx timeout [ 86.624072] Bluetooth: hci6: command tx timeout [ 86.624395] Bluetooth: hci3: command tx timeout [ 86.687918] Bluetooth: hci7: command tx timeout [ 86.688097] Bluetooth: hci5: command tx timeout [ 86.688252] Bluetooth: hci4: command tx timeout [ 88.546031] Bluetooth: hci1: command tx timeout [ 88.547923] Bluetooth: hci0: command tx timeout [ 88.607984] Bluetooth: hci2: command tx timeout [ 88.672041] Bluetooth: hci6: command tx timeout [ 88.672182] Bluetooth: hci3: command tx timeout [ 88.736075] Bluetooth: hci4: command tx timeout [ 88.736273] Bluetooth: hci5: command tx timeout [ 88.736409] Bluetooth: hci7: command tx timeout [ 90.592021] Bluetooth: hci1: command tx timeout [ 90.592215] Bluetooth: hci0: command tx timeout [ 90.656822] Bluetooth: hci2: command tx timeout [ 90.720201] Bluetooth: hci3: command tx timeout [ 90.720645] Bluetooth: hci6: command tx timeout [ 90.784239] Bluetooth: hci7: command tx timeout [ 90.784404] Bluetooth: hci5: command tx timeout [ 90.784504] Bluetooth: hci4: command tx timeout [ 92.640159] Bluetooth: hci0: command tx timeout [ 92.640704] Bluetooth: hci1: command tx timeout [ 92.704115] Bluetooth: hci2: command tx timeout [ 92.768350] Bluetooth: hci6: command tx timeout [ 92.768531] Bluetooth: hci3: command tx timeout [ 92.832918] Bluetooth: hci4: command tx timeout [ 92.833099] Bluetooth: hci5: command tx timeout [ 92.833195] Bluetooth: hci7: command tx timeout [ 146.496452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.499140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.503163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.506800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.509062] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.511113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.544927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.545602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.550589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.551027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.551933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.552234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.560315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.563064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.564834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.565582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.567127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.572585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.574522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.575521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.578876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.585706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.589835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.590620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.593794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.617728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.622499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.624100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.628641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.633418] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.635375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.637610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.642964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.692378] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.696645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.697640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.704392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.704790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.709008] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.715250] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.730024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.733409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.734121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.750136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.754185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.755392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.759447] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.764663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.576897] Bluetooth: hci0: command tx timeout [ 148.639927] Bluetooth: hci3: command tx timeout [ 148.640178] Bluetooth: hci1: command tx timeout [ 148.703835] Bluetooth: hci4: command tx timeout [ 148.703863] Bluetooth: hci2: command tx timeout [ 148.768829] Bluetooth: hci5: command tx timeout [ 148.833807] Bluetooth: hci6: command tx timeout [ 148.833932] Bluetooth: hci7: command tx timeout [ 150.624862] Bluetooth: hci0: command tx timeout [ 150.688880] Bluetooth: hci1: command tx timeout [ 150.688965] Bluetooth: hci3: command tx timeout [ 150.751962] Bluetooth: hci4: command tx timeout [ 150.753488] Bluetooth: hci2: command tx timeout [ 150.817826] Bluetooth: hci5: command tx timeout [ 150.880148] Bluetooth: hci6: command tx timeout [ 150.881437] Bluetooth: hci7: command tx timeout [ 152.674786] Bluetooth: hci0: command tx timeout [ 152.735881] Bluetooth: hci3: command tx timeout [ 152.735912] Bluetooth: hci1: command tx timeout [ 152.801036] Bluetooth: hci2: command tx timeout [ 152.801125] Bluetooth: hci4: command tx timeout [ 152.863880] Bluetooth: hci5: command tx timeout [ 152.929785] Bluetooth: hci7: command tx timeout [ 152.929888] Bluetooth: hci6: command tx timeout [ 154.720849] Bluetooth: hci0: command tx timeout [ 154.784334] Bluetooth: hci1: command tx timeout [ 154.784531] Bluetooth: hci3: command tx timeout [ 154.847866] Bluetooth: hci4: command tx timeout [ 154.847886] Bluetooth: hci2: command tx timeout [ 154.911902] Bluetooth: hci5: command tx timeout [ 154.977891] Bluetooth: hci6: command tx timeout [ 154.979031] Bluetooth: hci7: command tx timeout [ 209.388620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.394181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.401319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.406995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.410270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.412948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.453221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.459811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.466091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.476163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.480100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.482235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.522256] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.525207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.527494] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.532520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.535322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.537329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.561865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.564642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.566838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.579310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.581445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.590386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.599289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.609162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.612186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.638078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.644946] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.652934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.666261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.721672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.727483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.727860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.737071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.737356] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.738258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.744149] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.744616] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.748955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.749140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.753205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.762996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.768513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.775681] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.790341] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.793297] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.799332] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.487939] Bluetooth: hci0: command tx timeout [ 211.551908] Bluetooth: hci1: command tx timeout [ 211.616176] Bluetooth: hci2: command tx timeout [ 211.681130] Bluetooth: hci3: command tx timeout [ 211.743887] Bluetooth: hci4: command tx timeout [ 211.808549] Bluetooth: hci5: command tx timeout [ 211.935981] Bluetooth: hci6: command tx timeout [ 211.936523] Bluetooth: hci7: command tx timeout [ 213.535910] Bluetooth: hci0: command tx timeout [ 213.600805] Bluetooth: hci1: command tx timeout [ 213.664839] Bluetooth: hci2: command tx timeout [ 213.727973] Bluetooth: hci3: command tx timeout [ 213.791881] Bluetooth: hci4: command tx timeout [ 213.856819] Bluetooth: hci5: command tx timeout [ 213.983928] Bluetooth: hci6: command tx timeout [ 213.984072] Bluetooth: hci7: command tx timeout [ 215.585794] Bluetooth: hci0: command tx timeout [ 215.648781] Bluetooth: hci1: command tx timeout [ 215.711872] Bluetooth: hci2: command tx timeout [ 215.775853] Bluetooth: hci3: command tx timeout [ 215.839793] Bluetooth: hci4: command tx timeout [ 215.904876] Bluetooth: hci5: command tx timeout [ 216.032959] Bluetooth: hci7: command tx timeout [ 216.033039] Bluetooth: hci6: command tx timeout [ 217.631970] Bluetooth: hci0: command tx timeout [ 217.696924] Bluetooth: hci1: command tx timeout [ 217.760856] Bluetooth: hci2: command tx timeout [ 217.826820] Bluetooth: hci3: command tx timeout [ 217.888787] Bluetooth: hci4: command tx timeout [ 217.952807] Bluetooth: hci5: command tx timeout [ 218.079833] Bluetooth: hci6: command tx timeout [ 218.080966] Bluetooth: hci7: command tx timeout [ 271.665791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.668252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.672953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.674437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.678946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.683836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.685352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.689992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.691653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.696549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.703261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.714113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.746485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.750425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.754207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.762608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.766789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.769125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.783983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.785966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.789414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.804247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.806465] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.808177] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.811956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.813534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.819106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.827018] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.828289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.831037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.895195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.910282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.914011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.919131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.922000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.924340] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.925982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.927998] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.944862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.954139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.964010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.979926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.981224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.985218] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.985407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.985806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.994988] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.999844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.759856] Bluetooth: hci1: command tx timeout [ 273.760365] Bluetooth: hci0: command tx timeout [ 273.888851] Bluetooth: hci3: command tx timeout [ 273.889284] Bluetooth: hci2: command tx timeout [ 273.952789] Bluetooth: hci4: command tx timeout [ 274.017793] Bluetooth: hci7: command tx timeout [ 274.079807] Bluetooth: hci5: command tx timeout [ 274.080032] Bluetooth: hci6: command tx timeout [ 275.808830] Bluetooth: hci0: command tx timeout [ 275.808930] Bluetooth: hci1: command tx timeout [ 275.936610] Bluetooth: hci2: command tx timeout [ 275.936771] Bluetooth: hci3: command tx timeout [ 275.999781] Bluetooth: hci4: command tx timeout [ 276.064811] Bluetooth: hci7: command tx timeout [ 276.129757] Bluetooth: hci6: command tx timeout [ 276.129861] Bluetooth: hci5: command tx timeout [ 277.856117] Bluetooth: hci1: command tx timeout [ 277.857539] Bluetooth: hci0: command tx timeout [ 277.984028] Bluetooth: hci3: command tx timeout [ 277.984320] Bluetooth: hci2: command tx timeout [ 278.048829] Bluetooth: hci4: command tx timeout [ 278.112900] Bluetooth: hci7: command tx timeout [ 278.177289] Bluetooth: hci5: command tx timeout [ 278.177952] Bluetooth: hci6: command tx timeout [ 279.907041] Bluetooth: hci0: command tx timeout [ 279.907436] Bluetooth: hci1: command tx timeout [ 280.031886] Bluetooth: hci3: command tx timeout [ 280.032158] Bluetooth: hci2: command tx timeout [ 280.096747] Bluetooth: hci4: command tx timeout [ 280.159771] Bluetooth: hci7: command tx timeout [ 280.223902] Bluetooth: hci5: command tx timeout [ 280.223984] Bluetooth: hci6: command tx timeout [ 332.228350] [ 332.228619] ====================================================== [ 332.229231] WARNING: possible circular locking dependency detected [ 332.229822] 6.13.0-rc7-next-20250117 #1 Not tainted [ 332.230320] ------------------------------------------------------ [ 332.231220] kworker/u8:0/11 is trying to acquire lock: [ 332.237435] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.239658] [ 332.239658] but task is already holding lock: [ 332.240910] ffff88801b2c0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.243054] [ 332.243054] which lock already depends on the new lock. [ 332.243054] [ 332.244743] [ 332.244743] the existing dependency chain (in reverse order) is: [ 332.246361] [ 332.246361] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 332.247877] __mutex_lock+0x13d/0xb50 [ 332.248934] wiphy_register+0x1b2e/0x25d0 [ 332.250010] ieee80211_register_hw+0x23a4/0x3d60 [ 332.251197] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 332.252423] init_mac80211_hwsim+0x389/0x870 [ 332.253578] do_one_initcall+0xf9/0x640 [ 332.254635] kernel_init_freeable+0x53d/0x7a0 [ 332.255796] kernel_init+0x1e/0x2d0 [ 332.256730] ret_from_fork+0x48/0x80 [ 332.257659] ret_from_fork_asm+0x1a/0x30 [ 332.258756] [ 332.258756] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 332.260116] __lock_acquire+0x29fd/0x4580 [ 332.261218] lock_acquire+0x19b/0x520 [ 332.262239] __mutex_lock+0x13d/0xb50 [ 332.263229] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.264558] unregister_netdevice_queue+0x224/0x2e0 [ 332.265750] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.266947] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.268148] ieee80211_unregister_hw+0x55/0x3a0 [ 332.269288] hwsim_exit_net+0x3a0/0x730 [ 332.270287] ops_exit_list+0xb3/0x180 [ 332.271251] cleanup_net+0x546/0xad0 [ 332.272204] process_one_work+0x8ee/0x1a10 [ 332.273303] worker_thread+0x674/0xe70 [ 332.274324] kthread+0x3ab/0x720 [ 332.275287] ret_from_fork+0x48/0x80 [ 332.276331] ret_from_fork_asm+0x1a/0x30 [ 332.277553] [ 332.277553] other info that might help us debug this: [ 332.277553] [ 332.279447] Possible unsafe locking scenario: [ 332.279447] [ 332.280863] CPU0 CPU1 [ 332.281951] ---- ---- [ 332.283056] lock(&rdev->wiphy.mtx); [ 332.284040] lock(rtnl_mutex); [ 332.285480] lock(&rdev->wiphy.mtx); [ 332.287009] lock(rtnl_mutex); [ 332.287889] [ 332.287889] *** DEADLOCK *** [ 332.287889] [ 332.289283] 4 locks held by kworker/u8:0/11: [ 332.290355] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 332.292834] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 332.295212] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 332.297443] #3: ffff88801b2c0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.299915] [ 332.299915] stack backtrace: [ 332.300958] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 332.302148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 332.303306] Workqueue: netns cleanup_net [ 332.303924] Call Trace: [ 332.304303] [ 332.304647] dump_stack_lvl+0xca/0x120 [ 332.305205] print_circular_bug+0x47b/0x750 [ 332.305639] check_noncircular+0x2e9/0x3c0 [ 332.306061] ? lock_repin_lock+0x207/0x320 [ 332.306505] ? __pfx_check_noncircular+0x10/0x10 [ 332.306975] ? hlock_class+0x4e/0x130 [ 332.307353] ? mark_lock+0xac/0xed0 [ 332.307723] ? __pfx_lock_repin_lock+0x10/0x10 [ 332.308199] ? timerqueue_del+0x83/0x150 [ 332.308617] ? lockdep_lock+0xba/0x1b0 [ 332.309030] ? __pfx_lockdep_lock+0x10/0x10 [ 332.309485] __lock_acquire+0x29fd/0x4580 [ 332.309917] ? __pfx___lock_acquire+0x10/0x10 [ 332.310375] ? lock_release+0x20f/0x6f0 [ 332.310790] ? __pfx_lock_release+0x10/0x10 [ 332.311236] lock_acquire+0x19b/0x520 [ 332.311637] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.312227] ? __pfx_lock_acquire+0x10/0x10 [ 332.312669] ? srso_return_thunk+0x5/0x5f [ 332.313100] ? lock_release+0x20f/0x6f0 [ 332.313510] ? srso_return_thunk+0x5/0x5f [ 332.313949] ? lock_is_held_type+0x9e/0x120 [ 332.314396] ? srso_return_thunk+0x5/0x5f [ 332.314827] __mutex_lock+0x13d/0xb50 [ 332.315227] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.315794] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.316381] ? srso_return_thunk+0x5/0x5f [ 332.316828] ? synchronize_rcu_expedited+0x38a/0x420 [ 332.317348] ? __pfx___mutex_lock+0x10/0x10 [ 332.317793] ? __pfx_autoremove_wake_function+0x10/0x10 [ 332.318331] ? srso_return_thunk+0x5/0x5f [ 332.318759] ? kasan_quarantine_put+0x84/0x1e0 [ 332.319234] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.319682] ? srso_return_thunk+0x5/0x5f [ 332.320116] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.320675] ? __virt_addr_valid+0x2e8/0x5d0 [ 332.321131] ? __pfx_lock_release+0x10/0x10 [ 332.321564] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 332.322151] ? find_held_lock+0x2c/0x110 [ 332.322594] ? srso_return_thunk+0x5/0x5f [ 332.323035] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 332.323537] ? srso_return_thunk+0x5/0x5f [ 332.323966] ? lock_release+0x20f/0x6f0 [ 332.324372] ? __pfx_lock_release+0x10/0x10 [ 332.324810] ? srso_return_thunk+0x5/0x5f [ 332.325242] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.325763] ? srso_return_thunk+0x5/0x5f [ 332.326198] unregister_netdevice_queue+0x224/0x2e0 [ 332.326691] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 332.327233] ? up_write+0x195/0x520 [ 332.327634] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.328134] ? srso_return_thunk+0x5/0x5f [ 332.328582] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.329087] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 332.329630] ? srso_return_thunk+0x5/0x5f [ 332.330061] ? srso_return_thunk+0x5/0x5f [ 332.330496] ? synchronize_rcu+0x1ff/0x260 [ 332.330928] ieee80211_unregister_hw+0x55/0x3a0 [ 332.331396] hwsim_exit_net+0x3a0/0x730 [ 332.331798] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.332246] ? srso_return_thunk+0x5/0x5f [ 332.332682] ? netdev_run_todo+0x788/0x1040 [ 332.333125] ? srso_return_thunk+0x5/0x5f [ 332.333563] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.334015] ops_exit_list+0xb3/0x180 [ 332.334395] cleanup_net+0x546/0xad0 [ 332.334775] ? __pfx_cleanup_net+0x10/0x10 [ 332.335206] process_one_work+0x8ee/0x1a10 [ 332.335650] ? __pfx_lock_acquire+0x10/0x10 [ 332.336082] ? __pfx_process_one_work+0x10/0x10 [ 332.336567] ? srso_return_thunk+0x5/0x5f [ 332.336999] ? move_linked_works+0x172/0x270 [ 332.337443] ? srso_return_thunk+0x5/0x5f [ 332.337871] ? assign_work+0x196/0x240 [ 332.338283] worker_thread+0x674/0xe70 [ 332.338699] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.339232] ? __pfx_worker_thread+0x10/0x10 [ 332.339701] kthread+0x3ab/0x720 [ 332.340073] ? __pfx_kthread+0x10/0x10 [ 332.340492] ? srso_return_thunk+0x5/0x5f [ 332.340928] ? finish_task_switch.isra.0+0x206/0x840 [ 332.341438] ? __pfx_kthread+0x10/0x10 [ 332.341845] ret_from_fork+0x48/0x80 [ 332.342210] ? __pfx_kthread+0x10/0x10 [ 332.342607] ret_from_fork_asm+0x1a/0x30 [ 332.343050] [ 334.189466] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.190907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.191403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.191806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.193551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.196125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.196518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.200142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.200332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.203332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.203517] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.206857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.210647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.212903] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.215045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.220309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.227091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.232908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.271474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.274424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.276340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.280101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.290161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.301814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.307036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.309989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.312114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.313996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.320130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.323429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.325496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.328214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.330491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.333137] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.335213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.340341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.346894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.347254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.355262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.362970] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.377945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.383893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.389827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.415009] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.429998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.443744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.454324] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.455075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.224922] Bluetooth: hci2: command tx timeout [ 336.287752] Bluetooth: hci1: command tx timeout [ 336.287826] Bluetooth: hci0: command tx timeout [ 336.351842] Bluetooth: hci6: command tx timeout [ 336.416439] Bluetooth: hci4: command tx timeout [ 336.416517] Bluetooth: hci3: command tx timeout [ 336.479858] Bluetooth: hci5: command tx timeout [ 336.543793] Bluetooth: hci7: command tx timeout [ 338.271825] Bluetooth: hci2: command tx timeout [ 338.335922] Bluetooth: hci0: command tx timeout [ 338.337349] Bluetooth: hci1: command tx timeout [ 338.399770] Bluetooth: hci6: command tx timeout [ 338.464732] Bluetooth: hci4: command tx timeout [ 338.464817] Bluetooth: hci3: command tx timeout [ 338.530755] Bluetooth: hci5: command tx timeout [ 338.591757] Bluetooth: hci7: command tx timeout [ 340.320723] Bluetooth: hci2: command tx timeout [ 340.383798] Bluetooth: hci1: command tx timeout [ 340.383887] Bluetooth: hci0: command tx timeout [ 340.447790] Bluetooth: hci6: command tx timeout [ 340.511774] Bluetooth: hci4: command tx timeout [ 340.511856] Bluetooth: hci3: command tx timeout [ 340.575864] Bluetooth: hci5: command tx timeout [ 340.639759] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:51:30 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8bb27 RDX=ffffed100d9c6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864021d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc0b9f8c80 CR3=000000000bf8c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=edaacde23398348e394c1ab26f8f9b26 XMM02=00000000000fd800ee7587d5db12e8e3 XMM03=00000000000fd970d12871896912de2d XMM04=bc9d59f00b5df9fa00000000000ae988 XMM05=ea20f5c2da7d7dd3000000000014ede8 XMM06=6098c19552daab49000000000010a358 XMM07=ea899072da79512f00000000000fdac8 XMM08=d12871896912de2d00000000000fd850 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000075 R11=2f72656b726f776b R12=0000000000000075 R13=0000000000000001 R14=ffff888008fea030 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556a3de50de8 CR3=0000000019142000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000