Warning: Permanently added '[localhost]:22839' (ECDSA) to the list of known hosts. 2025/01/20 23:56:15 fuzzer started 2025/01/20 23:56:16 dialing manager at localhost:44833 syzkaller login: [ 61.482261] cgroup: Unknown subsys name 'net' [ 61.596016] cgroup: Unknown subsys name 'cpuset' [ 61.626181] cgroup: Unknown subsys name 'rlimit' [ 69.195791] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.682817] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 23:56:36 syscalls: 202 2025/01/20 23:56:36 code coverage: enabled 2025/01/20 23:56:36 comparison tracing: enabled 2025/01/20 23:56:36 extra coverage: enabled 2025/01/20 23:56:36 setuid sandbox: enabled 2025/01/20 23:56:36 namespace sandbox: enabled 2025/01/20 23:56:36 Android sandbox: enabled 2025/01/20 23:56:36 fault injection: enabled 2025/01/20 23:56:36 leak checking: enabled 2025/01/20 23:56:36 net packet injection: enabled 2025/01/20 23:56:36 net device setup: enabled 2025/01/20 23:56:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 23:56:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 23:56:36 USB emulation: enabled 2025/01/20 23:56:36 hci packet injection: enabled 2025/01/20 23:56:36 wifi device emulation: enabled 2025/01/20 23:56:36 802.15.4 emulation: enabled 2025/01/20 23:56:36 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 23:56:37 starting 8 fuzzer processes 23:56:37 executing program 1: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xfffffff8}, 0x4) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x700, 0x80, 0x45, 0x200, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @remote, {[@end, @timestamp_addr={0x44, 0x24, 0xec, 0x1, 0x6, [{@local, 0xc86}, {@private=0xa010101, 0x10001}, {@empty, 0x7fff}, {@rand_addr=0x64010101, 0x3}]}, @noop]}}}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x3, 0x1e, "347617", 0x4, 0x1}) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000200)=0x4) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000240)=0x2) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000280)={0xfffffff7}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0x79, 0x7, 0x1, 0x2, 0x0, 0xbb, 0x10200, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xffffffffffffff01, 0xff}, 0x5, 0x100000001, 0xc35, 0x8, 0x8, 0x5, 0x2e0, 0x0, 0x1, 0x0, 0x401}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x180, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000003c0)=0x5) r5 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000400)=0x7) fspick(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x30000854) 23:56:37 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x4) syz_io_uring_setup(0x3eee, &(0x7f0000000040)={0x0, 0x8afa, 0x2, 0x2, 0x1ee}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r2 = io_uring_setup(0x2add, &(0x7f0000000140)={0x0, 0xcbe0, 0x2, 0x1, 0x275}) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2}, 0x6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x80000001, 0x4) epoll_create1(0x80000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800008, 0x10010, r2, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x141800, 0x0) r6 = io_uring_setup(0x99b, &(0x7f0000000280)={0x0, 0x743b, 0x20, 0x2, 0x2e4, 0x0, r5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, &(0x7f0000000300)=0x9, 0x0, 0x4) r7 = accept$packet(r5, 0x0, &(0x7f0000000340)) syz_io_uring_submit(r4, r1, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @local}, 0x4, 0x3, 0x1, 0x4}}}, 0x9) socket$inet(0x2, 0x6, 0x9353) io_uring_setup(0x3b42, &(0x7f0000000440)={0x0, 0xeede, 0x8, 0x3, 0xa0, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x4a, 0x3, 0x7, 0x1, @remote, @private0, 0x7800, 0x720, 0x800, 0x1000}}) socketpair(0x11, 0x3, 0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r5) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', r8, 0x4, 0x3, 0x4, 0xffffcc16, 0x2, @empty, @mcast1, 0x8000, 0x10, 0x2, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000c80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f00000007c0)={0x468, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x40080}, 0x20040004) 23:56:37 executing program 2: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/32}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x1f) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x9) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000140)=0x4) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000180)=0xffff) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000001c0)={0x1, 0x8000, 0x401}) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x4, 0x1ca, &(0x7f0000000200)="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"}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000640)=0x3) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000680)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xcc, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x708b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc9d9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa7a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf9f}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x80014) ioctl$TIOCNOTTY(r1, 0x5422) r4 = syz_io_uring_complete(0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f00000008c0)) [ 82.419537] audit: type=1400 audit(1737417397.679:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:56:37 executing program 3: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="6267cb8c1f6764315da974511abf3e6872a659deae38392e719ce2448df37454442b79673a012281a9a79f314f25fe8431a8b1a2327cf95eb8", 0x39, 0xfffffffffffffff8) keyctl$link(0x8, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "db5cdd246e7e165581baa2dac483bb58198adf9afe42e3ca856734d872d8e868bb26b36fc67afe4a2371b45c117b9c6ff8edeea729454d30684709c0832d1d8e", 0x35}, 0x48, r0) keyctl$setperm(0x5, r1, 0x82000) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000001c0)={{0x73, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'fo\x00', 0x13, 0x49, 0x12}, {@broadcast, 0xfffd, 0x2000, 0x400, 0x7}}, 0x44) r2 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='85baa174f0cb1142', r1) keyctl$read(0xb, r2, &(0x7f0000000300)=""/107, 0x6b) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x400) r4 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "99879ba92b2c40d13c622c2b961bb2acea96d5c69d84e93e7af30ed471b86ff11dbd1fe0dd15fe1f7e71b0a5b1019d84bf3bf8c011ec3a91cd9bff1174ac529c", 0x1e}, 0x48, r2) socket$nl_generic(0x10, 0x3, 0x10) r5 = request_key(&(0x7f0000000480)='.request_key_auth\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='/[\x00', r4) keyctl$negate(0xd, 0x0, 0x8, r5) keyctl$reject(0x13, 0x0, 0x0, 0x100000001, r1) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000540)) keyctl$invalidate(0x15, r2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1e, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040081}, 0x68081) 23:56:37 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x200) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xb) r2 = fsmount(r1, 0x1, 0x8) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x42de}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x4000001) r3 = socket$inet6(0xa, 0xa, 0x4) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={@mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x55, 0xff, 0x400, 0x100000001, 0xc0010018}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000440)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000880)={0x44, 0x7, &(0x7f0000000480)="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"}) epoll_wait(r2, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x9) socketpair(0x10, 0x4, 0xffffffff, &(0x7f0000000940)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x200, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x1, 0x7b3d, 0x3f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x2, 0x9, 0x0, @private1, @remote, 0x7800, 0x10, 0xb87e, 0x7fff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x118, 0x0, 0x100, 0x70bd29, 0x4, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24048810}, 0x20004000) 23:56:37 executing program 5: r0 = socket(0x13, 0x3, 0x7) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0xc0, 0x7800, 0x7990, 0x3f, {{0x21, 0x4, 0x3, 0x4, 0x84, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @local, {[@noop, @lsrr={0x83, 0x17, 0x27, [@broadcast, @loopback, @empty, @multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0x0, [{@remote, 0xf44}, {@empty, 0xfa35}, {@multicast1, 0x7}, {@private=0xa010102}, {@multicast2, 0x7fff}]}, @lsrr={0x83, 0x7, 0x3b, [@broadcast]}, @ssrr={0x89, 0x1f, 0xdb, [@rand_addr=0x64010102, @broadcast, @multicast2, @remote, @remote, @local, @loopback]}]}}}}}) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1809907}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', r2, 0x29, 0x3, 0x4, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x10, 0x8, 0x2}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000005c0)={@private0, @private2, @remote, 0x1, 0x400, 0xffff, 0x0, 0x1, 0x200000, r2}) openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0x400001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x100030, r4, 0x10000000) socketpair(0xa, 0x80000, 0x799, &(0x7f0000000680)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x840) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f00000008c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', r8, 0x1, 0x7, 0x180000, 0x4b2c, {{0x10, 0x4, 0x0, 0x33, 0x40, 0x66, 0x0, 0x3f, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp={0x44, 0x24, 0xa0, 0x0, 0x1, [0x5, 0x5, 0x200, 0x3, 0x4fcea0a0, 0x8, 0xfff, 0x8]}, @ssrr={0x89, 0x7, 0x7d, [@dev={0xac, 0x14, 0x14, 0x12}]}, @noop]}}}}}) 23:56:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xe3, 0x8000, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x80, 0x8, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x3a, 0x71, 0x100, 0x40, @mcast1, @mcast2, 0x7880, 0x20, 0x2, 0x66b}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xff, 0x7fffffff, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x4, 0x0, 0x40, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4c, 0xb5, 0x3, 0x2, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3b}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x40000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x952}, {@loopback, 0xfff}, {@remote, 0xaa15}, {@remote, 0xffffffed}, {@rand_addr=0x64010102, 0x5}]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x3e, 0x9, 0x4, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x2, 0xffff}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x92, 0x2, {{0x24, 0x4, 0x3, 0x7, 0x90, 0x67, 0x0, 0x40, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x50}, {[@generic={0x44, 0x10, "bbb8bbe79254a0a7b0597a35795a"}, @timestamp_addr={0x44, 0x34, 0xa4, 0x1, 0xc, [{@multicast2, 0x1}, {@remote, 0xfff}, {@loopback, 0x6}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xfffff800}]}, @ssrr={0x89, 0x23, 0xef, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102, @multicast1, @rand_addr=0x64010100, @local, @private=0xa010101]}, @lsrr={0x83, 0x13, 0x37, [@broadcast, @private=0xa010102, @rand_addr=0x64010100, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0xc2, 0x3f, 0x6, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x40, 0x10000, 0x49}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)={0x538, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7b39}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x100, 0x7, 0x0, 0x8000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x538}, 0x1, 0x0, 0x0, 0x800c5}, 0x4000044) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000c40)={0x3, 0x9, 0x1}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c80)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000cc0)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0xff, 0xfffc, 0x200, 0xfa8, 0x8000a0, r11}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x94, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4090}, 0x801) socketpair(0x3, 0x3, 0x60be, &(0x7f0000000f00)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000f80), r0) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r14, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x881) 23:56:37 executing program 7: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x8, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) socketpair(0x10, 0x0, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x51}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x240440c0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00'}) r4 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x17}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa0, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x42}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000844}, 0x4000044) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x70e9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004880}, 0x801) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000900)) r7 = accept$packet(r0, 0x0, &(0x7f0000000940)) accept$packet(r7, 0x0, &(0x7f0000000980)) syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), r4) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) socketpair(0x2b, 0x800, 0x2, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x188}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x43}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) [ 83.903259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.908600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.910168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.915225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.921431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.923194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.928483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.931330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.934577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.938230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.940177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.943330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.945819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.951665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.961443] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.964907] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.965251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.970286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.982048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.991014] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.992118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.001185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.007878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.023938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.024461] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.027682] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.030932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.032677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.036862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.039514] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.042649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.058527] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.060383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.065903] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.073140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.075110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.076865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.091175] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.093149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.115110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.118656] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.119927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.143402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.167027] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.183322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.199386] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.205087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.215978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.044090] Bluetooth: hci2: command tx timeout [ 86.044096] Bluetooth: hci0: command tx timeout [ 86.107955] Bluetooth: hci1: command tx timeout [ 86.171969] Bluetooth: hci3: command tx timeout [ 86.171981] Bluetooth: hci6: command tx timeout [ 86.237200] Bluetooth: hci4: command tx timeout [ 86.299867] Bluetooth: hci7: command tx timeout [ 86.300878] Bluetooth: hci5: command tx timeout [ 88.092113] Bluetooth: hci2: command tx timeout [ 88.092818] Bluetooth: hci0: command tx timeout [ 88.157185] Bluetooth: hci1: command tx timeout [ 88.219826] Bluetooth: hci6: command tx timeout [ 88.221139] Bluetooth: hci3: command tx timeout [ 88.283783] Bluetooth: hci4: command tx timeout [ 88.349735] Bluetooth: hci7: command tx timeout [ 88.349821] Bluetooth: hci5: command tx timeout [ 90.140917] Bluetooth: hci0: command tx timeout [ 90.140932] Bluetooth: hci2: command tx timeout [ 90.204804] Bluetooth: hci1: command tx timeout [ 90.270242] Bluetooth: hci3: command tx timeout [ 90.270261] Bluetooth: hci6: command tx timeout [ 90.332773] Bluetooth: hci4: command tx timeout [ 90.396949] Bluetooth: hci5: command tx timeout [ 90.397115] Bluetooth: hci7: command tx timeout [ 92.187887] Bluetooth: hci0: command tx timeout [ 92.188922] Bluetooth: hci2: command tx timeout [ 92.252742] Bluetooth: hci1: command tx timeout [ 92.316084] Bluetooth: hci3: command tx timeout [ 92.316863] Bluetooth: hci6: command tx timeout [ 92.380810] Bluetooth: hci4: command tx timeout [ 92.445159] Bluetooth: hci7: command tx timeout [ 92.446836] Bluetooth: hci5: command tx timeout [ 143.659225] syz-executor.7 (287) used greatest stack depth: 23712 bytes left [ 143.962803] [ 143.963038] ====================================================== [ 143.963641] WARNING: possible circular locking dependency detected [ 143.964249] 6.13.0-rc7-next-20250120 #1 Not tainted [ 143.964739] ------------------------------------------------------ [ 143.968463] kworker/u8:0/11 is trying to acquire lock: [ 143.971103] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.972432] [ 143.972432] but task is already holding lock: [ 143.973165] ffff88802e460768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 143.974428] [ 143.974428] which lock already depends on the new lock. [ 143.974428] [ 143.975473] [ 143.975473] the existing dependency chain (in reverse order) is: [ 143.976432] [ 143.976432] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 143.977338] __mutex_lock+0x13d/0xb50 [ 143.977965] wiphy_register+0x1b2e/0x25d0 [ 143.978648] ieee80211_register_hw+0x23a4/0x3d60 [ 143.979404] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 143.980172] init_mac80211_hwsim+0x389/0x870 [ 143.980880] do_one_initcall+0xf9/0x640 [ 143.981545] kernel_init_freeable+0x53d/0x7a0 [ 143.982259] kernel_init+0x1e/0x2d0 [ 143.982840] ret_from_fork+0x48/0x80 [ 143.983436] ret_from_fork_asm+0x1a/0x30 [ 143.984106] [ 143.984106] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 143.984951] __lock_acquire+0x29fd/0x4580 [ 143.985609] lock_acquire+0x19b/0x520 [ 143.986225] __mutex_lock+0x13d/0xb50 [ 143.986850] unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.987701] unregister_netdevice_queue+0x224/0x2e0 [ 143.988458] _cfg80211_unregister_wdev+0x57b/0x700 [ 143.989222] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 143.989975] ieee80211_unregister_hw+0x55/0x3a0 [ 143.990689] hwsim_exit_net+0x3a0/0x730 [ 143.991334] ops_exit_list+0xb3/0x180 [ 143.991948] cleanup_net+0x546/0xad0 [ 143.992556] process_one_work+0x8ee/0x1a10 [ 143.993247] worker_thread+0x674/0xe70 [ 143.993895] kthread+0x3ab/0x720 [ 143.994467] ret_from_fork+0x48/0x80 [ 143.995053] ret_from_fork_asm+0x1a/0x30 [ 143.995721] [ 143.995721] other info that might help us debug this: [ 143.995721] [ 143.996741] Possible unsafe locking scenario: [ 143.996741] [ 143.997507] CPU0 CPU1 [ 143.998121] ---- ---- [ 143.998728] lock(&rdev->wiphy.mtx); [ 143.999277] lock(rtnl_mutex); [ 144.000075] lock(&rdev->wiphy.mtx); [ 144.000918] lock(rtnl_mutex); [ 144.001400] [ 144.001400] *** DEADLOCK *** [ 144.001400] [ 144.002175] 4 locks held by kworker/u8:0/11: [ 144.002769] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 144.004006] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 144.004987] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 144.005900] #3: ffff88802e460768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.006918] [ 144.006918] stack backtrace: [ 144.007360] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1 [ 144.008163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 144.008947] Workqueue: netns cleanup_net [ 144.009366] Call Trace: [ 144.009619] [ 144.009849] dump_stack_lvl+0xca/0x120 [ 144.010270] print_circular_bug+0x47b/0x750 [ 144.010710] check_noncircular+0x2e9/0x3c0 [ 144.011139] ? lock_repin_lock+0x207/0x320 [ 144.011593] ? __pfx_check_noncircular+0x10/0x10 [ 144.012074] ? hlock_class+0x4e/0x130 [ 144.012459] ? mark_lock+0xac/0xed0 [ 144.012838] ? __pfx_lock_repin_lock+0x10/0x10 [ 144.013322] ? lockdep_lock+0xba/0x1b0 [ 144.013735] ? __pfx_lockdep_lock+0x10/0x10 [ 144.014190] __lock_acquire+0x29fd/0x4580 [ 144.014623] ? __pfx___lock_acquire+0x10/0x10 [ 144.015082] ? lock_release+0x20f/0x6f0 [ 144.015498] ? __pfx_lock_release+0x10/0x10 [ 144.015945] lock_acquire+0x19b/0x520 [ 144.016341] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.016924] ? __pfx_lock_acquire+0x10/0x10 [ 144.017362] ? srso_return_thunk+0x5/0x5f [ 144.017800] ? lock_release+0x20f/0x6f0 [ 144.018209] ? srso_return_thunk+0x5/0x5f [ 144.018642] ? lock_is_held_type+0x9e/0x120 [ 144.019094] ? srso_return_thunk+0x5/0x5f [ 144.019543] __mutex_lock+0x13d/0xb50 [ 144.019950] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.020529] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.021112] ? srso_return_thunk+0x5/0x5f [ 144.021550] ? synchronize_rcu_expedited+0x38a/0x420 [ 144.022061] ? __pfx___mutex_lock+0x10/0x10 [ 144.022511] ? __pfx_autoremove_wake_function+0x10/0x10 [ 144.023055] ? srso_return_thunk+0x5/0x5f [ 144.023499] ? kasan_quarantine_put+0x84/0x1e0 [ 144.023983] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 144.024436] ? srso_return_thunk+0x5/0x5f [ 144.024877] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.025436] ? __virt_addr_valid+0x2e8/0x5d0 [ 144.025891] ? __pfx_lock_release+0x10/0x10 [ 144.026329] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 144.026928] ? find_held_lock+0x2c/0x110 [ 144.027363] ? srso_return_thunk+0x5/0x5f [ 144.027809] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 144.028323] ? srso_return_thunk+0x5/0x5f [ 144.028762] ? lock_release+0x20f/0x6f0 [ 144.029171] ? __pfx_lock_release+0x10/0x10 [ 144.029606] ? srso_return_thunk+0x5/0x5f [ 144.030044] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.030569] ? srso_return_thunk+0x5/0x5f [ 144.031014] unregister_netdevice_queue+0x224/0x2e0 [ 144.031527] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 144.032077] ? up_write+0x195/0x520 [ 144.032468] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.032977] ? srso_return_thunk+0x5/0x5f [ 144.033420] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.033924] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 144.034470] ? srso_return_thunk+0x5/0x5f [ 144.034908] ? srso_return_thunk+0x5/0x5f [ 144.035350] ? synchronize_rcu+0x1ff/0x260 [ 144.035782] ieee80211_unregister_hw+0x55/0x3a0 [ 144.036255] hwsim_exit_net+0x3a0/0x730 [ 144.036662] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.037117] ? srso_return_thunk+0x5/0x5f [ 144.037555] ? netdev_run_todo+0x788/0x1040 [ 144.037999] ? nexthop_net_exit_batch_rtnl+0xa4/0x310 [ 144.038527] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.038986] ops_exit_list+0xb3/0x180 [ 144.039390] cleanup_net+0x546/0xad0 [ 144.039790] ? __pfx_cleanup_net+0x10/0x10 [ 144.040234] process_one_work+0x8ee/0x1a10 [ 144.040690] ? __pfx_lock_acquire+0x10/0x10 [ 144.041132] ? __pfx_process_one_work+0x10/0x10 [ 144.041617] ? srso_return_thunk+0x5/0x5f [ 144.042055] ? move_linked_works+0x172/0x270 [ 144.042505] ? srso_return_thunk+0x5/0x5f [ 144.042953] ? assign_work+0x196/0x240 [ 144.043376] worker_thread+0x674/0xe70 [ 144.043795] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.044326] ? __pfx_worker_thread+0x10/0x10 [ 144.044794] kthread+0x3ab/0x720 [ 144.045161] ? __pfx_kthread+0x10/0x10 [ 144.045572] ? srso_return_thunk+0x5/0x5f [ 144.046017] ? finish_task_switch.isra.0+0x206/0x840 [ 144.046532] ? __pfx_kthread+0x10/0x10 [ 144.046947] ret_from_fork+0x48/0x80 [ 144.047325] ? __pfx_kthread+0x10/0x10 [ 144.047737] ret_from_fork_asm+0x1a/0x30 [ 144.048175] [ 146.020339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.021593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.022539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.026266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.030001] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.031010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.162098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.162819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.163414] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.165412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.168113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.169064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.189081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.194568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.207659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.221901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.227194] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.227999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.232352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.235611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.237851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.241978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.246949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.250985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.266230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.267515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.271237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.272292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.274169] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.277409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.284832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.303284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.305496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.313372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.325164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.330598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.331607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.333854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.337950] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.338805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.339280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.340564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.345015] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.354202] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.355335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.365199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.378136] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.379257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.060886] Bluetooth: hci0: command tx timeout [ 148.188923] Bluetooth: hci1: command tx timeout [ 148.315861] Bluetooth: hci2: command tx timeout [ 148.381773] Bluetooth: hci3: command tx timeout [ 148.381838] Bluetooth: hci5: command tx timeout [ 148.381879] Bluetooth: hci4: command tx timeout [ 148.443813] Bluetooth: hci7: command tx timeout [ 148.444907] Bluetooth: hci6: command tx timeout [ 150.108099] Bluetooth: hci0: command tx timeout [ 150.237805] Bluetooth: hci1: command tx timeout [ 150.363796] Bluetooth: hci2: command tx timeout [ 150.429781] Bluetooth: hci4: command tx timeout [ 150.429840] Bluetooth: hci5: command tx timeout [ 150.429923] Bluetooth: hci3: command tx timeout [ 150.491985] Bluetooth: hci6: command tx timeout [ 150.493147] Bluetooth: hci7: command tx timeout [ 152.155792] Bluetooth: hci0: command tx timeout [ 152.283756] Bluetooth: hci1: command tx timeout [ 152.412095] Bluetooth: hci2: command tx timeout [ 152.476071] Bluetooth: hci3: command tx timeout [ 152.477855] Bluetooth: hci5: command tx timeout [ 152.477965] Bluetooth: hci4: command tx timeout [ 152.539790] Bluetooth: hci6: command tx timeout [ 152.539911] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:57:39 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800ef4d340 RCX=ffffffff81429a4a RDX=0000000000000000 RSI=ffffffff814299d3 RDI=ffff88800ef4d36c RBP=fcfcfc0000000000 RSP=ffff88800f4f7db8 R8 =0000000000000000 R9 =ffffed1001e1ee00 R10=ffff88800f0f7007 R11=ffff88800ef4d7f8 R12=ffff88807bef3ff9 R13=ffffffff88654488 R14=ffff88800ef4d340 R15=0000000000000086 RIP=ffffffff814299ec RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00577b000 CR3=0000000009ecc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004165cdb300000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283e250 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb60 R8 =0000000000000000 R9 =fffffbfff0be1bdc R10=00000000000fe503 R11=2f72656b726f776b R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d3266 R15=dffffc0000000000 RIP=ffffffff8283e2a5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005841000 CR3=0000000009ecc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0002af980000000c0002af950 XMM02=000000c000056320000000c0002af8c0 XMM03=000000c0000563c0000000c000056370 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0