Warning: Permanently added '[localhost]:7387' (ECDSA) to the list of known hosts. 2025/01/19 19:54:02 fuzzer started 2025/01/19 19:54:03 dialing manager at localhost:44245 syzkaller login: [ 69.690292] cgroup: Unknown subsys name 'net' [ 69.783344] cgroup: Unknown subsys name 'cpuset' [ 69.819887] cgroup: Unknown subsys name 'rlimit' [ 74.565904] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 84.970514] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 19:54:19 syscalls: 2217 2025/01/19 19:54:19 code coverage: enabled 2025/01/19 19:54:19 comparison tracing: enabled 2025/01/19 19:54:19 extra coverage: enabled 2025/01/19 19:54:19 setuid sandbox: enabled 2025/01/19 19:54:19 namespace sandbox: enabled 2025/01/19 19:54:19 Android sandbox: enabled 2025/01/19 19:54:19 fault injection: enabled 2025/01/19 19:54:19 leak checking: enabled 2025/01/19 19:54:19 net packet injection: enabled 2025/01/19 19:54:19 net device setup: enabled 2025/01/19 19:54:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 19:54:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 19:54:19 USB emulation: enabled 2025/01/19 19:54:19 hci packet injection: enabled 2025/01/19 19:54:19 wifi device emulation: enabled 2025/01/19 19:54:19 802.15.4 emulation: enabled 2025/01/19 19:54:19 fetching corpus: 50, signal 24705/26288 (executing program) 2025/01/19 19:54:19 fetching corpus: 100, signal 35033/37808 (executing program) 2025/01/19 19:54:19 fetching corpus: 150, signal 41777/45532 (executing program) 2025/01/19 19:54:19 fetching corpus: 200, signal 46266/50908 (executing program) 2025/01/19 19:54:19 fetching corpus: 250, signal 50751/56137 (executing program) 2025/01/19 19:54:20 fetching corpus: 300, signal 56858/62624 (executing program) 2025/01/19 19:54:20 fetching corpus: 350, signal 61426/67537 (executing program) 2025/01/19 19:54:20 fetching corpus: 400, signal 65001/71469 (executing program) 2025/01/19 19:54:20 fetching corpus: 450, signal 66994/73934 (executing program) 2025/01/19 19:54:20 fetching corpus: 500, signal 69122/76462 (executing program) 2025/01/19 19:54:20 fetching corpus: 550, signal 71720/79265 (executing program) 2025/01/19 19:54:20 fetching corpus: 600, signal 73703/81516 (executing program) 2025/01/19 19:54:21 fetching corpus: 650, signal 76581/84347 (executing program) 2025/01/19 19:54:21 fetching corpus: 700, signal 79164/86858 (executing program) 2025/01/19 19:54:21 fetching corpus: 750, signal 81254/88919 (executing program) 2025/01/19 19:54:21 fetching corpus: 800, signal 84686/91845 (executing program) 2025/01/19 19:54:21 fetching corpus: 850, signal 86581/93621 (executing program) 2025/01/19 19:54:21 fetching corpus: 900, signal 88922/95668 (executing program) 2025/01/19 19:54:22 fetching corpus: 950, signal 90840/97284 (executing program) 2025/01/19 19:54:22 fetching corpus: 1000, signal 91920/98299 (executing program) 2025/01/19 19:54:22 fetching corpus: 1050, signal 94823/100428 (executing program) 2025/01/19 19:54:22 fetching corpus: 1100, signal 95995/101374 (executing program) 2025/01/19 19:54:22 fetching corpus: 1150, signal 97657/102571 (executing program) 2025/01/19 19:54:22 fetching corpus: 1200, signal 99789/104041 (executing program) 2025/01/19 19:54:23 fetching corpus: 1250, signal 102243/105516 (executing program) 2025/01/19 19:54:23 fetching corpus: 1300, signal 103391/106233 (executing program) 2025/01/19 19:54:23 fetching corpus: 1350, signal 104451/106881 (executing program) 2025/01/19 19:54:23 fetching corpus: 1400, signal 105599/107580 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/107652 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/107733 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/107799 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/107866 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/107938 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108019 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108082 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108151 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108222 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108291 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108364 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108441 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108506 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108576 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108654 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108718 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108778 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108862 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108932 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/108985 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/109048 (executing program) 2025/01/19 19:54:23 fetching corpus: 1402, signal 105616/109123 (executing program) 2025/01/19 19:54:24 fetching corpus: 1402, signal 105616/109195 (executing program) 2025/01/19 19:54:24 fetching corpus: 1402, signal 105616/109256 (executing program) 2025/01/19 19:54:24 fetching corpus: 1402, signal 105616/109325 (executing program) 2025/01/19 19:54:24 fetching corpus: 1402, signal 105616/109387 (executing program) 2025/01/19 19:54:24 fetching corpus: 1402, signal 105616/109439 (executing program) 2025/01/19 19:54:24 fetching corpus: 1402, signal 105616/109439 (executing program) 2025/01/19 19:54:27 starting 8 fuzzer processes 19:54:27 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3c40}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f13}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f5f}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20008080) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcc}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x101, 0x10001, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @generic={0x44, 0xe, "8a6d4a3e9bc18c1f8af15bfb"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0xa, [{@private=0xa010100, 0x343}]}, @ssrr={0x89, 0x1b, 0xfb, [@empty, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x13, [@rand_addr=0x64010101, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x7, 0x80, 0x5, 0x5, {{0x15, 0x4, 0x3, 0x3, 0x54, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x2, 0x8, "c0a85557076d"}, {0x2, 0x2}, {0x7, 0x11, "8a4f70dc89a298b4d4be5a83418296"}, {0x1, 0xd, "ce75948e5b965bfe4c1670"}, {0x6, 0x10, "556c940a4deda87a6a3c443a7c3d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x2f, 0x5, 0x2, 0x50f, 0x2, @empty, @private1, 0x10, 0xb6243357f2e39d38, 0x1, 0x400}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000000a80)={0x8a4, 0x0, 0x702, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0xca, 0x2, 0xfffff000}, {0x0, 0x3f, 0x7f, 0x3ff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x80d2, 0x0, 0x4, 0x200}, {0xd3d8, 0x0, 0x1, 0x9}, {0x3, 0x81, 0xc, 0x2}, {0x8, 0x1, 0x7, 0xa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5ad1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x20000004}, 0x90) r11 = socket(0x28, 0x80000, 0x10001) ioctl$sock_inet_SIOCGIFDSTADDR(r11, 0x8917, &(0x7f00000013c0)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r11, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x80, r12, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x84c8, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="dc5545bf2f7b"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x30, 0x2a, [@gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x3, 0x0, {0xb4, 0x1ffc, 0x0, 0x9}, 0x400, 0x9}}, @cf={0x4, 0x6, {0x9, 0x90, 0xea4}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c9c110882f12"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000019c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000001980)={&(0x7f0000001600)={0x34c, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a5ccf02}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "62364612b33b22851f8108e59cd4e46786939a36ef610241e9aa344cf17dfbfa"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x44800}, 0x84) 19:54:27 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c8, r2, 0x300, 0x5, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5e}}}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="38fe0f3a50ebee4abd06bb6b69edf7ac"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8eb7e8e7f309a1a9d87cd5617246faded384e427768621f31de5caf1781d3afe"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="265291865132a86a973ac610d2b1f857fcd6620dfd42b651"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="86cd33612c06609d46b6d863a38d9d84"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="034df2d7ceed224a31bd91dbc488271396a0ac24a6696ed2"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="24e4bd154c8b504556b3eea961e55046"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dbc7c330ec0dec8e0fab32782bb1cdf936e38854ec8315c747ca9ff4da424266"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="781e3d92e0bc8b6a4dbcbf5f64eb1943"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="043abaacbf4870a01d25f1cd61d6b2f04056664986ab21b824f15e4e4d6da025"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "452c32b8bc002645"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1e5d08de602de6aa"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c0aecbd88d2d94ea"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2dd53e1da3c575b1029c22886ae321d762c09944e32149c9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dc5ef6cb923c3317b835da0052dbbc4489f1c10d9e06e51b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d8a09f4d1ca37f3b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200000}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aee9a91001db0c25"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20}]}]}, 0x1c8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000480)={0x398, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa88}, @NL80211_ATTR_FRAME={0x370, 0x33, @probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x4, 0x6}}, @ver_80211n={0x0, 0x6, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x384, @random=0x9, 0xe806, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb4}, @val={0x4, 0x6, {0x3f, 0x81, 0xfffb, 0x8}}, @val={0x6, 0x2, 0xff96}, @val={0x2d, 0x1a, {0x10, 0x0, 0x3, 0x0, {0xffffffff, 0x1f, 0x0, 0x1f}, 0x1, 0x8, 0x9}}, @void, @void, [{0xdd, 0x4a, "ce88a526e32c647d0e455bc7cb249f603582f0873fdeff28133484af77ee3558182f243324ee7cc1c0bff416f4ce2e5c7cac1fb69ddf44726f3c1fc62f8f39192c0d1301be6526bbca8b"}, {0xdd, 0xd5, "67486b9fbccbd2a6a8ed368af5fcd120bc079c45176ee707624026b53a2ee7ce434e21bd4d6ed49c21a7fa34259e92f499505a74953e8a0f2229ee7ba23503db2ef18b82301db3318d7626574392571345583112b4260b4681b44bd4f49c3442ae18fff03ab066b66e26a95d697ed990c787d742cfa0a908bdcc50abde1e63d4b02298bf11b09bf878508f916fe0d7bd59a668cf63451cce84c0b91020f94d8dbd606d63d9292c19ba08596dc05f7a68457613d960ca3efac22c7c3972e72242df7c9e607ad0337f035b59cd1c50e78b3fd4d6a0bb"}, {0xdd, 0xa2, "b9e20a0b8420a8d6f3040409573f483ceedc0d5e6eaeedf31c5f4da1afc78a0b262224fb0156abbb6d812b77d9d202d35cb7e0ac449a201f74b1b1192cde8ba11bfdd3fc3632305ab98cc6205b166b96674c4e2b8cd796cca414d9884ff9efcbc12343f44d07d105cd817f274921ebf3c9c56fe97fe27a97f98c8ff94cf86572816dffe77af9f11f845cb58c7c8bc89ea15f604c27d8fd41b9df7458379fc61e8321"}, {0xdd, 0x59, "2de953ab1e7850562dc037d3b004a28de2ea94c6ee7094297a7e7c7b91a8b4992f48d1f79fc752a8920e9a3f59617a891e1d73cba0fb17e474ddc154211079ca778661f26ba23547d156607f5a3a30985bbb9626ecfde3bf7d"}, {0xdd, 0xed, "856f9e6421129248f90405e31cb751f620f2017c05b8fe769acba1b3cc33f59aa54fb4c3646786c41e32ae4c1939be6aa3cf1b6875753265b450b31c00b52e37dac625080b6644bed5e7330ab31d6aa144100781e5aa1f9011a4f6448e3b5912280d0d20a2cb65fa009086a70697cf0f349280131337603ee7ad8d3a4be0501a8590faa45e5ce2df652c4cc41e9f0e60b8f8f5e34c19ad2720a2cdfb64922adfc8159a7b0fa64190da9dc1c60c3ce7c67d5534b2be2283a405930d8ee03de261c22ba7d891bd19865270a0b2dcab0cf3a1e9eb47f0438d2a29b27c78b4d88f4f8a2e5616bd61cb8bca9036c84a"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x398}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940), 0x2, 0x0) r6 = open(&(0x7f0000000980)='./file0\x00', 0x34000, 0x140) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1e8, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf1e}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x186, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="7e582b50c0ba", {0x9, 0x3}}, @ver_80211n={0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x4, 0x41, @void, [{0xdd, 0x78, "3810c7eadfb52e0741537aeeb0d7562e13ff1aab0022c8d68e69ae6ef812aba7e1f7b36c601904a09628adc5307393fa3990f65a2953d58912d7f0d8a8c7b00ec70dd60b000371fa599a2a95732aba32183d5e175afbe218a8a13b0f0e6ddd879a9fbe189f0c4065cfeb93562517759dbe22de42ace8d347"}, {0xdd, 0xe4, "3ef92e0c048883e09f1d9a59bfa49bd1f83faccc9be1293337ee36cec9698264cf86d44adf22945906f8f6ee5a87f07c61c14f98094cf13459321e7a87156b5616ce1f3ae0fb093ca67bc4890c49bb61ff1d3c3714d23337e4dee4858b1fc00c21843b13433d78d64be6f00af35285e7329e8a86b673e402d7b2b167280fcaee8b38ca5009e635071bd26210db3826b0e572e86caffee537e78cacb0939a6b3242034b5265d4558ff549c1e9d51276302bc42cc469c9659cb9006ea7e5dd798a70f1d74c24b8531648cbca05b2351ecb91c1940ea1515537ffbd7c7c26d2e9eab5c3c940"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x5, 0x5c6, 0x7, 0x400, 0x800, 0xffff, 0x6, 0xff, 0x3f]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x130c}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r0) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000f00)={&(0x7f0000000c80), 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x184, r7, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xaf, 0x3, "e485bfd48c6fe21217acaa4feb658ec5c11e83276ae7303e3ef03e6401da017bb5a01046a0e44c204144f4cb0a0def16cbb61ead58403f6b76df566eb81847b91b4e468a04a74604cda48395bb197d02f3df19b6332b3514db80c62d8172396afc3cad37ba71f88bb0c026109e62a109f8ed5a1fc35d455d2338d61bfdf24f20d2b4e2b48eb4fe09ae16b0d89bb5679c49e9fadd176991ea6329d025944420c4241edc2c2f901c714e05ac"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x37a0}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x240}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000844}, 0x885) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) r8 = openat$incfs(r3, &(0x7f0000000f80)='.pending_reads\x00', 0x503001, 0x80) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000001100)=0x2) 19:54:27 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) r0 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='syz', 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, r1) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x2}) r2 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x65, 0x30, 0x61, 0x64, 0x37, 0x32, 0x37, 0x30, 0x34, 0x30, 0x63, 0x36, 0x36, 0x63, 0x36]}, &(0x7f0000000380)={0x0, "4593f680f1d02a988cefc3c7b582b95dabfd44f68bf887b99c83b5332d33ebd99d09ba9ff926543341ad7119d6cfe6a2a1f49ee8a8a4c6d5264100d6fbcae1b9", 0x20}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r3, 0x0) keyctl$join(0x1, &(0x7f0000000400)={'syz', 0x0}) r4 = request_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)='user\x00', 0xfffffffffffffffc) keyctl$search(0xa, r2, &(0x7f0000000440)='cifs.spnego\x00', &(0x7f0000000480)={'syz', 0x3}, r4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) keyctl$chown(0x4, r2, r5, r7) mount$9p_virtio(&(0x7f0000000700), &(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x1010000, &(0x7f00000007c0)={'trans=virtio,', {[{@privport}, {@access_user}], [{@appraise}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user}, {@fowner_lt={'fowner<', r5}}]}}) keyctl$clear(0x7, r3) keyctl$chown(0x4, r0, r6, r7) add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, r3) add_key(&(0x7f00000008c0)='encrypted\x00', &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, r0) 19:54:27 executing program 3: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/199) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000100)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)=0x7197) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000200)={0x8, 0x20, 0x4}) r3 = fspick(r2, &(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r3, 0x407, 0x2) fcntl$setpipe(r2, 0x407, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000280)=0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x1}, {0xffffffff}, 0x5, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="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", 0x1e3, 0x0, &(0x7f0000000540)={0x2, 0x141, {0x0, 0xc, 0xa1, "6c611e0f605e2dae6d8980d37f135dd13cee7755a88e902ae5c56c35c7e51c1467c77b55fa828250764374a0ce2435dfc6c4d322aa5aea5489b2fe5bc93967fdd58c8ecd50ee7de1524adf819c33ed402131d037b8f200077198e164f1889a6f5cdacbeeeadb9cc352c07715a6e4ed098bbf45b5f2a9695a0876fe4a9a9a113544774606bf054cf0cecabbbed29c60788b79dcf87cdb843960ddf81b93181ef199", 0x93, "7123c8a7fba28e46b17b7ed024f2e89b3d267b1d48fcf626491525a771c5e20caaa8943df6be405d6c3a82684b8e989ea5e3c389a732cffad0ff60558ca93e513db8fee3fe6eb57c38b45b1b5aac8d66637d850ba1bd91508829fee643da4df7bb8b907577758099547812593d66aa041c1cb37d618db3e77b14aa10758199a4e4f64f81eac171fb31cff472bb4316f638a53d"}, 0x75, "15db1ffa880efa3639983da759fecbd0546b91ba3da9f4ec9b022384ceea17ae368451804795bf1dfc588a87b27d240994281e3828cbfbb4365e3e9548c9e06831891aec85a5a25291916e5af2375f3840332c689abd5f05987bb14d9a2ccc47643733b380d2a8064be0e9101a3a4bfba8a1bad366"}, 0x1c2}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) fcntl$addseals(r1, 0x409, 0xa) recvmmsg$unix(r2, &(0x7f0000001e40)=[{{&(0x7f0000000800), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/116, 0x74}, {&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/244, 0xf4}, {&(0x7f0000001a40)=""/17, 0x11}], 0x5, &(0x7f0000001b00)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001c00), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/207, 0xcf}], 0x1, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x2, 0x80000100, 0x0) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) finit_module(r6, &(0x7f0000001ec0)='\x00', 0x2) [ 93.455973] audit: type=1400 audit(1737316467.265:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:54:27 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4014) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x22dc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3d34c000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x330}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb821}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4040001) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000040) r3 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x41}}}}, ["", "", ""]}, 0x28}}, 0x20008010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x20, 0xff, 0x20, @private0, @private1, 0x7800, 0x40, 0x9, 0x5}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000c80)={0x0, @multicast2, @dev}, &(0x7f0000000cc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x80, 0x5632, 0x37, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x20, 0x7, 0xffffffff, 0x3}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000010c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000dc0)={0x298, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) getsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000001100)=""/37, &(0x7f0000001140)=0x25) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001240)={0xffffffffffffffff, r8}, 0xc) 19:54:27 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "fa1d4ae7cca21e4153e0a14d2e419419e382690e63c814b756a312d39e7e08f71cd8b2c48aad87e349cc759f78693ca6182524796d89560d246ab7dde34ec16f0032322d3a7ce1d3f7eefb6056f14dfa57a165dc7970343e9e8a9bdaca6fa3b4ee39eb7d22e72b31f9ff63077e4cef8870eecbae383e26d523da140a0c9ad7f76edd79eb923ecb71b1f7d3b7a25d16afac7320c8d2fca4727b434f0f7e140474a7fdcb33b6018b"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x48851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) recvmmsg$unix(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000840)=""/14, 0xe}, {&(0x7f0000000880)=""/47, 0x2f}], 0x3}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/109, 0x6d}, {&(0x7f0000001ac0)=""/199, 0xc7}, {&(0x7f0000001bc0)=""/233, 0xe9}, {&(0x7f0000001cc0)=""/94, 0x5e}, {&(0x7f0000001d40)=""/190, 0xbe}, {&(0x7f0000001e00)=""/33, 0x21}], 0x9}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001f80)=""/242, 0xf2}, {&(0x7f0000002080)=""/143, 0x8f}, {&(0x7f0000002140)=""/179, 0xb3}, {&(0x7f0000002200)=""/21, 0x15}, {&(0x7f0000002240)=""/88, 0x58}, {&(0x7f00000022c0)=""/148, 0x94}, {&(0x7f0000002380)=""/74, 0x4a}, {&(0x7f0000002400)=""/53, 0x35}], 0x8, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/240, 0xf0}], 0x1}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000003980)=[{&(0x7f00000027c0)=""/27, 0x1b}, {&(0x7f0000002800)=""/168, 0xa8}, {&(0x7f00000028c0)=""/149, 0x95}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x4, &(0x7f00000039c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003a40)=""/67, 0x43}, {&(0x7f0000003ac0)=""/49, 0x31}], 0x2, &(0x7f0000003b40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000003c80), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003d00)=""/149, 0x95}, {&(0x7f0000003dc0)=""/14, 0xe}, {&(0x7f0000003e00)=""/127, 0x7f}, {&(0x7f0000003e80)=""/191, 0xbf}, {&(0x7f0000003f40)=""/207, 0xcf}, {&(0x7f0000004040)=""/99, 0x63}], 0x6, &(0x7f0000004140)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x2000, &(0x7f0000004340)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000004380), 0x90000, 0x0) r11 = openat$cgroup_devices(r2, &(0x7f00000043c0)='devices.deny\x00', 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000004400), 0x400900, 0x0) sendmsg$unix(r4, &(0x7f00000044c0)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="ee1b67bd48e9c34b12570ff3302fe580a9830c599be7284938b88613521aacb91b1036553a", 0x25}, {&(0x7f00000005c0)="dc137bcf18e5c3f448d899542a4ba402ef4ccf5ad7ad2717a2c33341ad5674ac9f62ab20265025bd8570907320a3ba221febb1f495bc6173e61a4cc61f8a8f446234d74f8da9d28cd94256699a2745d42b2e1e08ee9a4253a9eed312922ef403268ef03f6a89b7d006eb3bce76f2a96e0c3abba3827b9762e13fe965d99b64dbccbfe31253272c2959b756bac98673cfad477a7cb95ec07bf62892e9e06f96aac602d10dbab4c2c1cae73b0be541ad07ecc74b1325c969708b73850d9724b6adb93cafca13", 0xc5}, {&(0x7f00000006c0)="c269fdc51f685a708485bb67fc35a4d088f6d98d3d259f0e4714d81420d72eb970d5e80adb893ca4ec608650884a1367e9b8e6d56d533ecb5c0b56051b4a37846ce0", 0x42}], 0x3, &(0x7f0000004440)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, r10, r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r11, r0, r12]}}], 0x60}, 0x4000080) sendto(r5, &(0x7f0000004500)="f4e9cc53a0524a2ebc85e8d1a87afd440d093b4402c6aa95b977f6701560a32339cc0a020a6299f1dca5e035723a6cb890136607fcaae2ffd62e6951b17f4e82fd579e7cd7bb9a8142ddda2d0b8dd86f104d8c096909af7adc157681abd348e02ad2d6fa11282499ce63583aecd26fd74e73b979f5030a6ae5d7167ef1df61bc40884fb7654a694a1022711271cb2c157261c8fb1d91f5f355a0baa1e1bce7fc43a69a9fb78b0cf7d7f3cd427dffa7f251fa24dd8b081a", 0xb7, 0x40080, &(0x7f00000045c0)=@x25, 0x80) r13 = syz_open_dev$vcsa(&(0x7f0000004640), 0x1, 0x41) ioctl$TUNSETCARRIER(r13, 0x400454e2, &(0x7f0000004680)=0x1) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000004700), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000004800)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004740)={0x64, r14, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TUNSETNOCSUM(r12, 0x400454c8, 0x1) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000004840)) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000004980)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004940)={&(0x7f0000004900)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008810) 19:54:27 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x14}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240440c4}, 0x40800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x8000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x3c0, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_FRAME={0x302, 0x33, @reassoc_resp={@wo_ht={{}, {0x40}, @broadcast, @broadcast, @from_mac=@broadcast, {0x4, 0xff7}}, 0x2200, 0x18, @default, @val={0x1, 0x2, [{0x16, 0x1}, {0xb, 0x1}]}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x5, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x80000000}}, [{0xdd, 0x5f, "72f202933db39941f5bde6454c62b3b3c15f8ecbc7bbadcb43af05dcf5fb3e8b633156a7056db8fd32a708dd29f8510f11cbad1217c7054c6086b2f082760d0d37e011f47ff3a8b51466d6a9e5ef8a077fb02311c6d0fd427093a4afb09430"}, {0xdd, 0x87, "d54fbe7f3d78ae064c9f8ad2cf2381d001d5937f5c3fdba5ccabe4e5cd60aae04b30f451caa19b420e2d692b67480a5521fe34209b4446a24b721a63111a11f9ce09ffe1d7bf29c76d181f93fd1aa56100857179bc23d3438903b7120063e87e758d43a478861634def9f42561427147e9e67031e90f007853237b5f215ab0da16a28ab769c272"}, {0xdd, 0xc4, "e969a1619aa0a686b2b2d72afe866ef2e4ea758f4fea7d1b00147fd6d4490b5e5e93c78f4ecabd3e24873480f613e0e513f1b021d3acb7bfa256803826c12a84b8e54628d4058c3da3b950f6eb010232d8e6645e60c1814b453f19d25b6128fed2268c9c6b64cb80d2a9f3dcb5dc798bcc9cea6ffd319738edf061b10ec37ff2448215bb59d5e5363365c613d6d8595832505b63c4d8fb8969cb674a8a7d753284d336f99b6cc0b6ea5016b8128d1c37161eb9f16c2b1d3f6ded74265baa946bb05e76da"}, {0xdd, 0xad, "e904f037f791463ba7da611351514391ba5ea8a5b9d42a361077c764c620df25aeece3e22b21ab0e6b9aa33cc995fc5d0e921d109a02518dc96962488766fcd6e81c75790c1dcebaeeca6cc44f3eab139a9d97254af50edf6a3db4a630b7a9526178d827985063472159f8c23143a88fdd297c84aff21d434b85ba4b898e01b55ccce170ceb7a684a2a7e645753dbcee83da6d934e5d6570341b9c1050c221137918217b9f86fd9393804093ff"}, {0xdd, 0x5f, "08336ceae9999c22c5ed7f50accf8bfd5ff39abba56013a075ed820d79ecb07ceaa3eb63f8bbdeb68351845f6c2f71ea12516f17c8d13c6df8a891e16ddaad6140aa92052b1fe9360127a02639a28f3ce3106a2fe4b900594500e0f466d9b5"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x80, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xbc}, @device_b, @broadcast, @random="461fb6fa912f", {0x9, 0x1f}}, @ver_80211n={0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x2800, 0x7fff, {0x0, 0x4, @random="40bfaba7"}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x5, 0x40, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0xb1, 0x7}}, [{0xdd, 0x1d, "8b97585b34abe17e79ee20a4f4e24efabe108e69b5e2c02db0bc30526a"}, {0xdd, 0x19, "f93a401e352e4dd1a52d33e99d6fbb079874039e1210236a3a"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa0c}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040804}, 0x80c0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x234, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6c}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0xee60}}]}, 0x234}, 0x1, 0x0, 0x0, 0x24044894}, 0x24000004) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = openat$incfs(r4, &(0x7f0000001040)='.log\x00', 0x88c00, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x20000014) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xe8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xea9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5febfc9a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x70}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000010}, 0x48015) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*[\x1d{\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x45) 19:54:27 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/239, 0xef}], 0x1, 0x4, 0x101) r0 = inotify_init1(0x0) close(r0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000140)={0x1, 0x8, [@multicast, @multicast, @local, @broadcast, @link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @random="265c0b4f4ad0", @multicast]}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000180), &(0x7f00000001c0)=""/212, 0xd4}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x4e23, @private=0xa010101}, {0x6, @multicast}, 0x8, {0x2, 0x4e24, @local}, 'bond_slave_1\x00'}) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000004c0)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/131, 0x83}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000005c0)={&(0x7f0000000500), &(0x7f0000000540)=""/128, 0x80}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000680)=@buf={0x7b, &(0x7f0000000600)="dc8950a6e1823686e9cb86f1f713a81b94e825b5d71e1826944b239e1ff9e2cc97514dc4ed22b4a3dfb166fbf50caf0a07a57559845cf023c9293cc8fcd6ea33f83bbbedaf561d07d843b963760901d01010bd3bfb772a5da457220caf1c737ac977d0adaf4bd0b3592f501f5531fe767b164d6d665a0522a538c5"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) copy_file_range(r4, 0x0, r3, 0x0, 0x200, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000006c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0], 0x2}) r6 = openat$cgroup_devices(r2, &(0x7f0000000780)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000007c0)={0x2, 0x4, {0x7f800000, @struct={0x7516, 0x6}, 0x0, 0x7, 0x683, 0x8e, 0x1, 0x1, 0x74, @struct={0x9, 0x5}, 0x44, 0x80000001, [0x0, 0x5, 0xffffffffffff39be, 0xdb6, 0xb5, 0xffffffff]}, {0x6, @usage=0x7fff, 0x0, 0x8, 0x2, 0x20, 0x9, 0x0, 0x10d, @struct={0x8, 0x3ff}, 0x0, 0x3, [0xfffffffffffffffe, 0x7, 0xc8, 0x5, 0x800, 0x8]}, {0x7f, @usage=0x8001, 0x0, 0x0, 0x800, 0x2, 0x9, 0x0, 0x433, @struct={0x7, 0x3f}, 0x6ac6, 0x5, [0x5, 0x3, 0x7, 0x3, 0x80000001, 0x5]}, {0x80000000, 0x9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000bc0)={r7, 0xffffffffffffff81, 0x100000001}) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001000)=""/17, 0x11}) [ 94.962053] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.964995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.968705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.972696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.977971] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.979161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.016110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.017864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.020166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.023152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.026362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.028511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.030408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.037161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.043563] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.045102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.055076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.061933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.062740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.066132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.077453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.080070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.082521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.088825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.090269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.090678] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.092735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.096015] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.101602] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.103377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.126564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.129313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.152276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.156323] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.157874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.158937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.163588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.168505] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.169789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.170548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.172269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.177689] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.177832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.183067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.184916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.199938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.204550] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.205751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.037347] Bluetooth: hci0: command tx timeout [ 97.101701] Bluetooth: hci2: command tx timeout [ 97.163861] Bluetooth: hci4: command tx timeout [ 97.165486] Bluetooth: hci1: command tx timeout [ 97.166284] Bluetooth: hci3: command tx timeout [ 97.227961] Bluetooth: hci5: command tx timeout [ 97.228974] Bluetooth: hci7: command tx timeout [ 97.230325] Bluetooth: hci6: command tx timeout [ 99.084728] Bluetooth: hci0: command tx timeout [ 99.148695] Bluetooth: hci2: command tx timeout [ 99.213670] Bluetooth: hci3: command tx timeout [ 99.214279] Bluetooth: hci1: command tx timeout [ 99.214380] Bluetooth: hci4: command tx timeout [ 99.276781] Bluetooth: hci6: command tx timeout [ 99.277089] Bluetooth: hci7: command tx timeout [ 99.277181] Bluetooth: hci5: command tx timeout [ 101.132963] Bluetooth: hci0: command tx timeout [ 101.195768] Bluetooth: hci2: command tx timeout [ 101.260242] Bluetooth: hci3: command tx timeout [ 101.260301] Bluetooth: hci4: command tx timeout [ 101.260396] Bluetooth: hci1: command tx timeout [ 101.323769] Bluetooth: hci5: command tx timeout [ 101.323833] Bluetooth: hci7: command tx timeout [ 101.323916] Bluetooth: hci6: command tx timeout [ 103.179759] Bluetooth: hci0: command tx timeout [ 103.244027] Bluetooth: hci2: command tx timeout [ 103.307846] Bluetooth: hci1: command tx timeout [ 103.307989] Bluetooth: hci3: command tx timeout [ 103.310717] Bluetooth: hci4: command tx timeout [ 103.371984] Bluetooth: hci5: command tx timeout [ 103.372119] Bluetooth: hci7: command tx timeout [ 103.372262] Bluetooth: hci6: command tx timeout [ 157.467376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.470957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.472358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.477511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.479215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.480831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.482337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.491863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.506199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.530913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.537104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.542731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.548768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.563499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.566900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.584975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.587008] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.590052] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.608848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.623472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.625873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.633210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.638804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.639470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.641453] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.646895] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.647081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.647476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.653480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.655064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.663423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.700565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.702313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.703417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.707793] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.709334] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.710248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.725402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.734490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.734867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.744869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.749531] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.750769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.753964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.772889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.784146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.786073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.787350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.500712] Bluetooth: hci1: command tx timeout [ 159.627732] Bluetooth: hci0: command tx timeout [ 159.691872] Bluetooth: hci2: command tx timeout [ 159.757802] Bluetooth: hci4: command tx timeout [ 159.758266] Bluetooth: hci7: command tx timeout [ 159.758335] Bluetooth: hci3: command tx timeout [ 159.820113] Bluetooth: hci5: command tx timeout [ 159.820302] Bluetooth: hci6: command tx timeout [ 161.547674] Bluetooth: hci1: command tx timeout [ 161.675694] Bluetooth: hci0: command tx timeout [ 161.741664] Bluetooth: hci2: command tx timeout [ 161.803744] Bluetooth: hci4: command tx timeout [ 161.803821] Bluetooth: hci3: command tx timeout [ 161.803842] Bluetooth: hci7: command tx timeout [ 161.867726] Bluetooth: hci5: command tx timeout [ 161.867756] Bluetooth: hci6: command tx timeout [ 163.595720] Bluetooth: hci1: command tx timeout [ 163.723732] Bluetooth: hci0: command tx timeout [ 163.789643] Bluetooth: hci2: command tx timeout [ 163.851739] Bluetooth: hci4: command tx timeout [ 163.852234] Bluetooth: hci3: command tx timeout [ 163.852358] Bluetooth: hci7: command tx timeout [ 163.915725] Bluetooth: hci5: command tx timeout [ 163.915846] Bluetooth: hci6: command tx timeout [ 165.643866] Bluetooth: hci1: command tx timeout [ 165.773683] Bluetooth: hci0: command tx timeout [ 165.835716] Bluetooth: hci2: command tx timeout [ 165.900655] Bluetooth: hci4: command tx timeout [ 165.901424] Bluetooth: hci7: command tx timeout [ 165.901549] Bluetooth: hci3: command tx timeout [ 165.964656] Bluetooth: hci5: command tx timeout [ 165.964757] Bluetooth: hci6: command tx timeout [ 219.612451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.615099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.617463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.625947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.629751] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.633201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.712013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.715476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.718103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.727765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.731386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.733349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.874435] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.886277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.888047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.899460] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.914037] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.922668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.947845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.962799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.963377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.969023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.983741] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.993913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.005910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.010950] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.019499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.021043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.021855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.024969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.028178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.046146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.050992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.051115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.080980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.081879] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.084745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.213898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.248301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.260866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.265067] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.280232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.302485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.318138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.345279] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.359308] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.382175] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.383940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.707740] Bluetooth: hci0: command tx timeout [ 221.771766] Bluetooth: hci1: command tx timeout [ 221.964073] Bluetooth: hci2: command tx timeout [ 222.092800] Bluetooth: hci3: command tx timeout [ 222.283695] Bluetooth: hci6: command tx timeout [ 222.348081] Bluetooth: hci4: command tx timeout [ 222.348362] Bluetooth: hci5: command tx timeout [ 222.475661] Bluetooth: hci7: command tx timeout [ 223.755719] Bluetooth: hci0: command tx timeout [ 223.819652] Bluetooth: hci1: command tx timeout [ 224.011796] Bluetooth: hci2: command tx timeout [ 224.139747] Bluetooth: hci3: command tx timeout [ 224.331912] Bluetooth: hci6: command tx timeout [ 224.395740] Bluetooth: hci4: command tx timeout [ 224.395876] Bluetooth: hci5: command tx timeout [ 224.523680] Bluetooth: hci7: command tx timeout [ 225.804658] Bluetooth: hci0: command tx timeout [ 225.867662] Bluetooth: hci1: command tx timeout [ 226.061665] Bluetooth: hci2: command tx timeout [ 226.187730] Bluetooth: hci3: command tx timeout [ 226.380067] Bluetooth: hci6: command tx timeout [ 226.443688] Bluetooth: hci5: command tx timeout [ 226.443784] Bluetooth: hci4: command tx timeout [ 226.571665] Bluetooth: hci7: command tx timeout [ 227.851791] Bluetooth: hci0: command tx timeout [ 227.915718] Bluetooth: hci1: command tx timeout [ 228.107816] Bluetooth: hci2: command tx timeout [ 228.237754] Bluetooth: hci3: command tx timeout [ 228.427763] Bluetooth: hci6: command tx timeout [ 228.491871] Bluetooth: hci4: command tx timeout [ 228.492111] Bluetooth: hci5: command tx timeout [ 228.619742] Bluetooth: hci7: command tx timeout [ 282.465071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.468195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.470799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.477657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.482093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.483792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.519525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.523840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.525123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.531858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.534863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.536055] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.717553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.720538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.729035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.734112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.747172] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.749949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.783455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.793271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.808074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.820380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.822537] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.823683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.917633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.929129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.960980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.967384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.971863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.973045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.978429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.985889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.986256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.996925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.003489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.007898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.022319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.024669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.025588] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.030898] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.035307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.036784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.042264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.045452] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.046701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.062900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.069942] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.071274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.555976] Bluetooth: hci1: command tx timeout [ 284.556065] Bluetooth: hci0: command tx timeout [ 284.812870] Bluetooth: hci2: command tx timeout [ 284.876818] Bluetooth: hci3: command tx timeout [ 285.069648] Bluetooth: hci5: command tx timeout [ 285.132719] Bluetooth: hci6: command tx timeout [ 285.195807] Bluetooth: hci7: command tx timeout [ 285.195934] Bluetooth: hci4: command tx timeout [ 286.603822] Bluetooth: hci0: command tx timeout [ 286.603846] Bluetooth: hci1: command tx timeout [ 286.860834] Bluetooth: hci2: command tx timeout [ 286.923725] Bluetooth: hci3: command tx timeout [ 287.115678] Bluetooth: hci5: command tx timeout [ 287.179664] Bluetooth: hci6: command tx timeout [ 287.243767] Bluetooth: hci7: command tx timeout [ 287.244303] Bluetooth: hci4: command tx timeout [ 288.651645] Bluetooth: hci1: command tx timeout [ 288.651668] Bluetooth: hci0: command tx timeout [ 288.908672] Bluetooth: hci2: command tx timeout [ 288.972658] Bluetooth: hci3: command tx timeout [ 289.163670] Bluetooth: hci5: command tx timeout [ 289.227738] Bluetooth: hci6: command tx timeout [ 289.291752] Bluetooth: hci7: command tx timeout [ 289.294623] Bluetooth: hci4: command tx timeout [ 290.699712] Bluetooth: hci0: command tx timeout [ 290.700666] Bluetooth: hci1: command tx timeout [ 290.957314] Bluetooth: hci2: command tx timeout [ 291.020658] Bluetooth: hci3: command tx timeout [ 291.213170] Bluetooth: hci5: command tx timeout [ 291.275665] Bluetooth: hci6: command tx timeout [ 291.339863] Bluetooth: hci4: command tx timeout [ 291.340077] Bluetooth: hci7: command tx timeout [ 341.489618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.489736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.800597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.800675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.918155] [ 342.918578] ====================================================== [ 342.919734] WARNING: possible circular locking dependency detected [ 342.920857] 6.13.0-rc7-next-20250117 #1 Not tainted [ 342.923873] ------------------------------------------------------ [ 342.927354] kworker/u8:1/66 is trying to acquire lock: [ 342.928344] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.930525] [ 342.930525] but task is already holding lock: [ 342.931728] ffff88802e030768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 342.933807] [ 342.933807] which lock already depends on the new lock. [ 342.933807] [ 342.935435] [ 342.935435] the existing dependency chain (in reverse order) is: [ 342.936935] [ 342.936935] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 342.938345] __mutex_lock+0x13d/0xb50 [ 342.939346] wiphy_register+0x1b2e/0x25d0 [ 342.940400] ieee80211_register_hw+0x23a4/0x3d60 [ 342.941537] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 342.942849] init_mac80211_hwsim+0x389/0x870 [ 342.944010] do_one_initcall+0xf9/0x640 [ 342.945076] kernel_init_freeable+0x53d/0x7a0 [ 342.946243] kernel_init+0x1e/0x2d0 [ 342.947199] ret_from_fork+0x48/0x80 [ 342.948171] ret_from_fork_asm+0x1a/0x30 [ 342.949251] [ 342.949251] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 342.950566] __lock_acquire+0x29fd/0x4580 [ 342.951648] lock_acquire+0x19b/0x520 [ 342.952641] __mutex_lock+0x13d/0xb50 [ 342.953654] unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.955019] unregister_netdevice_queue+0x224/0x2e0 [ 342.956257] _cfg80211_unregister_wdev+0x57b/0x700 [ 342.957485] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 342.958740] ieee80211_unregister_hw+0x55/0x3a0 [ 342.959953] hwsim_exit_net+0x3a0/0x730 [ 342.961024] ops_exit_list+0xb3/0x180 [ 342.962094] cleanup_net+0x546/0xad0 [ 342.962940] process_one_work+0x8ee/0x1a10 [ 342.963892] worker_thread+0x674/0xe70 [ 342.964848] kthread+0x3ab/0x720 [ 342.965755] ret_from_fork+0x48/0x80 [ 342.966712] ret_from_fork_asm+0x1a/0x30 [ 342.967783] [ 342.967783] other info that might help us debug this: [ 342.967783] [ 342.969405] Possible unsafe locking scenario: [ 342.969405] [ 342.970555] CPU0 CPU1 [ 342.971518] ---- ---- [ 342.972468] lock(&rdev->wiphy.mtx); [ 342.973234] lock(rtnl_mutex); [ 342.974325] lock(&rdev->wiphy.mtx); [ 342.975520] lock(rtnl_mutex); [ 342.976205] [ 342.976205] *** DEADLOCK *** [ 342.976205] [ 342.977436] 4 locks held by kworker/u8:1/66: [ 342.978405] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 342.980724] #1: ffff88800efcfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 342.982897] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 342.984834] #3: ffff88802e030768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 342.986949] [ 342.986949] stack backtrace: [ 342.987803] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 342.989306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 342.990772] Workqueue: netns cleanup_net [ 342.991574] Call Trace: [ 342.992060] [ 342.992554] dump_stack_lvl+0xca/0x120 [ 342.993425] print_circular_bug+0x47b/0x750 [ 342.994430] check_noncircular+0x2e9/0x3c0 [ 342.995380] ? srso_return_thunk+0x5/0x5f [ 342.996231] ? __pfx_check_noncircular+0x10/0x10 [ 342.997154] ? hlock_class+0x4e/0x130 [ 342.997922] ? mark_lock+0xac/0xed0 [ 342.998658] ? srso_return_thunk+0x5/0x5f [ 342.999518] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 343.000434] ? lockdep_lock+0xba/0x1b0 [ 343.001253] ? __pfx_lockdep_lock+0x10/0x10 [ 343.002143] __lock_acquire+0x29fd/0x4580 [ 343.003004] ? __pfx___lock_acquire+0x10/0x10 [ 343.003918] ? lock_release+0x20f/0x6f0 [ 343.004700] ? __pfx_lock_release+0x10/0x10 [ 343.005547] lock_acquire+0x19b/0x520 [ 343.006305] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.007427] ? __pfx_lock_acquire+0x10/0x10 [ 343.008273] ? srso_return_thunk+0x5/0x5f [ 343.009106] ? lock_release+0x20f/0x6f0 [ 343.009892] ? srso_return_thunk+0x5/0x5f [ 343.010836] ? lock_is_held_type+0x9e/0x120 [ 343.011918] ? srso_return_thunk+0x5/0x5f [ 343.012934] __mutex_lock+0x13d/0xb50 [ 343.013851] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.015171] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.016479] ? srso_return_thunk+0x5/0x5f [ 343.017471] ? synchronize_rcu_expedited+0x38a/0x420 [ 343.018628] ? __pfx___mutex_lock+0x10/0x10 [ 343.019655] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.020879] ? srso_return_thunk+0x5/0x5f [ 343.021865] ? kasan_quarantine_put+0x84/0x1e0 [ 343.022964] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 343.024025] ? srso_return_thunk+0x5/0x5f [ 343.025030] unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.026306] ? __virt_addr_valid+0x2e8/0x5d0 [ 343.027379] ? __pfx_lock_release+0x10/0x10 [ 343.028379] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 343.029728] ? find_held_lock+0x2c/0x110 [ 343.030714] ? srso_return_thunk+0x5/0x5f [ 343.031723] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 343.032876] ? srso_return_thunk+0x5/0x5f [ 343.033869] ? lock_release+0x20f/0x6f0 [ 343.034795] ? __pfx_lock_release+0x10/0x10 [ 343.035807] ? srso_return_thunk+0x5/0x5f [ 343.036804] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 343.038000] ? srso_return_thunk+0x5/0x5f [ 343.039018] unregister_netdevice_queue+0x224/0x2e0 [ 343.040155] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 343.041386] ? up_write+0x195/0x520 [ 343.042277] _cfg80211_unregister_wdev+0x57b/0x700 [ 343.043463] ? srso_return_thunk+0x5/0x5f [ 343.044485] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 343.045651] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 343.046918] ? srso_return_thunk+0x5/0x5f [ 343.048054] ? srso_return_thunk+0x5/0x5f [ 343.049067] ? synchronize_rcu+0x1ff/0x260 [ 343.050072] ieee80211_unregister_hw+0x55/0x3a0 [ 343.051171] hwsim_exit_net+0x3a0/0x730 [ 343.051971] ? __pfx_hwsim_exit_net+0x10/0x10 [ 343.052863] ? srso_return_thunk+0x5/0x5f [ 343.053716] ? netdev_run_todo+0x788/0x1040 [ 343.054573] ? srso_return_thunk+0x5/0x5f [ 343.055402] ? __pfx_hwsim_exit_net+0x10/0x10 [ 343.056243] ops_exit_list+0xb3/0x180 [ 343.056971] cleanup_net+0x546/0xad0 [ 343.057712] ? __pfx_cleanup_net+0x10/0x10 [ 343.058649] process_one_work+0x8ee/0x1a10 [ 343.059632] ? __pfx_lock_acquire+0x10/0x10 [ 343.060585] ? __pfx_process_one_work+0x10/0x10 [ 343.061622] ? srso_return_thunk+0x5/0x5f [ 343.062588] ? move_linked_works+0x172/0x270 [ 343.063625] ? srso_return_thunk+0x5/0x5f [ 343.064610] ? assign_work+0x196/0x240 [ 343.065551] worker_thread+0x674/0xe70 [ 343.066490] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 343.067702] ? srso_return_thunk+0x5/0x5f [ 343.068790] ? __pfx_worker_thread+0x10/0x10 [ 343.069830] kthread+0x3ab/0x720 [ 343.070652] ? __pfx_kthread+0x10/0x10 [ 343.071794] ? srso_return_thunk+0x5/0x5f [ 343.072755] ? finish_task_switch.isra.0+0x206/0x840 [ 343.073892] ? __pfx_kthread+0x10/0x10 [ 343.074768] ret_from_fork+0x48/0x80 [ 343.075578] ? __pfx_kthread+0x10/0x10 [ 343.076470] ret_from_fork_asm+0x1a/0x30 [ 343.077334] [ 344.470137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.472798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.477967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.495320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.501964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.504920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.658517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.662551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.665868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.671954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.674901] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.676895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.795452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.798888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.801959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.811373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.813428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.817472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.861434] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.880125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.882772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.905142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.911999] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.915904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.006656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.017109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.019947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.047070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.053857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.058481] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.062950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.064896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.065184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.084748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.093332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.102879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.326909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.332964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.338973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.340807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.344646] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.348358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.356993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.376881] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.378157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.415883] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.417360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.419142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.571716] Bluetooth: hci0: command tx timeout [ 346.699634] Bluetooth: hci1: command tx timeout [ 346.893748] Bluetooth: hci2: command tx timeout [ 346.957626] Bluetooth: hci3: command tx timeout [ 347.147726] Bluetooth: hci4: command tx timeout [ 347.211669] Bluetooth: hci5: command tx timeout [ 347.532578] Bluetooth: hci7: command tx timeout [ 347.532657] Bluetooth: hci6: command tx timeout [ 348.620743] Bluetooth: hci0: command tx timeout [ 348.748651] Bluetooth: hci1: command tx timeout [ 348.940616] Bluetooth: hci2: command tx timeout [ 349.005230] Bluetooth: hci3: command tx timeout [ 349.197602] Bluetooth: hci4: command tx timeout [ 349.260585] Bluetooth: hci5: command tx timeout [ 349.580638] Bluetooth: hci6: command tx timeout [ 349.580715] Bluetooth: hci7: command tx timeout [ 350.668620] Bluetooth: hci0: command tx timeout [ 350.796675] Bluetooth: hci1: command tx timeout [ 350.988677] Bluetooth: hci2: command tx timeout [ 351.052718] Bluetooth: hci3: command tx timeout [ 351.244693] Bluetooth: hci4: command tx timeout [ 351.307721] Bluetooth: hci5: command tx timeout [ 351.627643] Bluetooth: hci7: command tx timeout [ 351.627731] Bluetooth: hci6: command tx timeout [ 352.715813] Bluetooth: hci0: command tx timeout [ 352.844603] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 19:58:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8179a4bd RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806ce36250 RBP=ffff88803535f598 RSP=ffff88803535f580 R8 =0000000000000000 R9 =fffffbfff0c8043a R10=ffffffff864021d7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8a1c0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f27af7de8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f33c214d318 CR3=000000002ced8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004128623000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800efcebb8 R8 =0000000000000001 R9 =ffffed1001df9d67 R10=0000000000000039 R11=2d2d2d2d2d2d2d2d R12=0000000000000039 R13=0000000000000001 R14=ffff888008fea008 R15=ffff88800efceeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055774198c090 CR3=000000003ad44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000f0000000800005577419a3510 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000003231393330 XMM05=5f4345535500333534323d4d554e5145 XMM06=746f6f7465756c623d4d455453595342 XMM07=622f6c6175747269762f736563697665 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000