Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:28564' (ECDSA) to the list of known hosts. 2025/01/21 02:24:21 fuzzer started 2025/01/21 02:24:22 dialing manager at localhost:44833 syzkaller login: [ 61.927065] cgroup: Unknown subsys name 'net' [ 62.017106] cgroup: Unknown subsys name 'cpuset' [ 62.053301] cgroup: Unknown subsys name 'rlimit' [ 67.982811] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.329216] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 02:24:39 syscalls: 205 2025/01/21 02:24:39 code coverage: enabled 2025/01/21 02:24:39 comparison tracing: enabled 2025/01/21 02:24:39 extra coverage: enabled 2025/01/21 02:24:39 setuid sandbox: enabled 2025/01/21 02:24:39 namespace sandbox: enabled 2025/01/21 02:24:39 Android sandbox: enabled 2025/01/21 02:24:39 fault injection: enabled 2025/01/21 02:24:39 leak checking: enabled 2025/01/21 02:24:39 net packet injection: enabled 2025/01/21 02:24:39 net device setup: enabled 2025/01/21 02:24:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 02:24:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 02:24:39 USB emulation: enabled 2025/01/21 02:24:39 hci packet injection: enabled 2025/01/21 02:24:39 wifi device emulation: enabled 2025/01/21 02:24:39 802.15.4 emulation: enabled 2025/01/21 02:24:39 fetching corpus: 0, signal 0/0 (executing program) 2025/01/21 02:24:41 starting 8 fuzzer processes 02:24:41 executing program 0: r0 = io_uring_setup(0x5ad5, &(0x7f0000000000)={0x0, 0x508, 0x8, 0x0, 0x186}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x10000000) r1 = syz_io_uring_setup(0x405b, &(0x7f0000000080)={0x0, 0x9e37, 0x1, 0x1, 0x26f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x7f46, &(0x7f0000000180)={0x0, 0x4301, 0x20, 0x1, 0x383, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_setup(0x71de, &(0x7f0000000280)={0x0, 0xc6af, 0x20, 0x2, 0x198, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = syz_io_uring_setup(0x6e86, &(0x7f0000000380)={0x0, 0xdafb, 0x0, 0x1, 0x2d6, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_setup(0x1f74, &(0x7f0000000480)={0x0, 0x45c5, 0x4, 0x0, 0x1ec, 0x0, r3}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x440801, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x181000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/195, 0xc3}, {&(0x7f0000001740)=""/134, 0x86}], 0x5) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000001880)={0x7fff, 0xbe0166a, 0x81, 0xfffffffe}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000018c0), 0x4400, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f0000001900)={{0x9, 0x20}, 'port0\x00', 0x28, 0x50050, 0x9, 0x7d, 0x3, 0x7ff, 0x8, 0x0, 0x1, 0x1}) 02:24:41 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x1000, 0xffff, 0x1, 'queue1\x00', 0x7fff}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0x6, 0x3f}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@generic, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/177, 0xb1}], 0x4}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000540)={{0x2, 0x1}, 'port0\x00', 0x8, 0x1008, 0x1, 0x1, 0xf483ec, 0x0, 0x6, 0x0, 0x1, 0x2}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7) r1 = socket(0x2a, 0x800, 0x7f) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/time\x00') r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb0, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c050}, 0x44000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000000900)=""/155, 0x9b}, {&(0x7f00000009c0)=""/209, 0xd1}, {&(0x7f0000000ac0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x6, &(0x7f0000000cc0), 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000d80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000810) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001a80)={&(0x7f0000000dc0), 0xc, &(0x7f0000001a40)={&(0x7f0000000e00)={0xc20, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xbd8, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "96e6e4c7bd8b83d444096e6a6a986b4b2f37ed4aaf7bca0b171adb18480bc59b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "898ff337b7793c8afceaa3af684ffa64f4c2966539c9341985caec44384ce88c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @local, 0x10001}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x98f}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xc0000, @local, 0x8}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @mcast1, 0x2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6e81b282d7010ec9d196222852f4d085882630083e3d0d2d41278b0251317376"}]}, {0x554, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "670bac787fb2c66e1f17a2ef480ca90b78d4e1560d412dc6cea520dedc8ea308"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb8e, @remote, 0x10000}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x3e8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b4, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @loopback, 0x46cb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xc20}, 0x1, 0x0, 0x0, 0x84}, 0x480) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001b00)=[r3], 0x1) 02:24:41 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x169100, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000) read$char_usb(r0, &(0x7f0000000380)=""/205, 0xcd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3d1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r5, 0x30, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r6 = geteuid() ioprio_get$uid(0x3, r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r7, 0x900, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="45f22578e41c"}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 02:24:41 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "545b4423b72ad3caf78c311261490e7941eaa00457c6a4d3ee2313e65592c2348f2f2d098c594445282cbc52fd61e367a433f1c902b7fa336c353854a761517c", 0x40}, 0x48, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "0f8b26b512d7bfac77966b81e78ce8db9ac72302f16777bf50eea42a08e144745571a13e44d122a8bfd12ad84b1858f7dc3ee79400b1de4921fb7892b353acfb", 0x3f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r4, 0x1) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$link(0x8, r4, r5) keyctl$clear(0x7, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r6) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r7, 0x0) keyctl$link(0x8, r7, r7) r8 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "914fa268b5fb9d4ca25e255744d063b94cf56b7a66907d412cd4c6b535acc54285044a30b08af0e20d55c6b93bbae2df0956b4a7b268aa5da79f2382fd66b2a0", 0x30}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r8, r5, r7, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) keyctl$KEYCTL_MOVE(0x1e, r7, r1, r5, 0x1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x37, 0x59, 0x34, 0x31, 0x65, 0x38, 0x37, 0x63, 0x39, 0x61, 0x30, 0x65, 0x63, 0x36, 0x31, 0x37]}, &(0x7f0000000680)={0x0, "42ce2730e86d9d0a3030cbe15d0cef513b82fd8a5207e4fb052e7508ffb7de374f4bca9b1604bb4707f0a821497dcbb4da413a6494263f1b2c2558b8990bfe2f", 0x32}, 0x48, r1) keyctl$unlink(0x9, r3, r8) 02:24:41 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48805}, 0x408c0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x481fb131e222fb4b}, 0x4040810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x90) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf90}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048800) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '}}\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x44094) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000048}, 0x80c0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x4000008) [ 81.102406] audit: type=1400 audit(1737426281.386:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:24:41 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x1}, 0x8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x1, 'client1\x00', 0x0, "8645ade819ff79a9", "fc27fb9f00e40d339f1c2dba63a34070d15c5a1035b16e27b23e01e174ef1b4b", 0x4a0, 0x7214}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x1, 0x1, "722de44945fdb3054ccafd877c34e5250c85816ab327792f4ef6910496b553dff315fc8a35dd291c0c7ac5cfd90d3c9221f125286a607c0e5269646e27b1bf74837f823bc1b18ff8cd984365e39df2ad73f9840c9a3edb3bfee7066d438d5d37bedbcc748e8cf355ad607adbeef70525799e217cfab5b3a5970805ddb875cc36a404a6564536ef59e9955fc1f57de9762ea3b63565068fcccb9b877f10bad99bc9ac4e9c8fb73d1bc92994eac7675ca36565e67b51c25220f359eade6df461fcf4512f49b515f3b0acf4ebe62fe57e0fd7bbf337f30586dd6bda08747b7092a9c760292a5bd46569f46c7aaa71eb6b1affc62cd0a3dc"}, 0x106) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000003c0)="630a5de3229ce1c1881ab1c63d0bd2b517e60846b7f5e82ae580596e4a371b7f42c48bae7dd24551415fc07b78a40f6dd1ab3b69dfb6934428787a2081306c48e52e2a2724ebb219bbac609f970c7014b2b2ddc2cce2412427b33b6a3fe1ebb223aa21e323b6439525ed595d4add17b2c07da6a3baec397ca468cdca5ed62ebd93fa5f5c1b85ab94b0ea9c9e0e", 0x8d) r3 = syz_open_dev$loop(&(0x7f0000000480), 0xffffffffffffffff, 0x800) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) read$rfkill(r2, &(0x7f00000004c0), 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x200100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000540)={0x2, 0x81, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000580)={{0x20, 0x2}, 'port1\x00', 0x8, 0x1000, 0xcb0, 0x9, 0x9, 0xb2d, 0xcd8f, 0x0, 0x2, 0x1}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000640)=0x81) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) write$rfkill(r5, &(0x7f00000006c0)={0x4, 0x6, 0x40, 0x0, 0x1}, 0x8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 02:24:41 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) r12 = mq_open(&(0x7f0000000240)='ns/cgroup\x00', 0x840, 0x100, &(0x7f0000000280)={0x5ee, 0x3, 0x6, 0x6}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r12, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)={r13, r14+60000000}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 02:24:41 executing program 7: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, r0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "6b6073001d04c47730832c204e43e5036d98f615e822668db83fef6b18532e7af31a20cd91be8e3733ddaa44a4bbfeba1848136967e417e1375ddb5d028ff85c", 0x13}, 0x48, r0) keyctl$unlink(0x9, r2, r0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r3) keyctl$reject(0x13, r1, 0x4144, 0x4, r2) keyctl$reject(0x13, 0x0, 0x16ee, 0x8, r2) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r2) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "edadd1b1d84f373a5457ff8ad51d6e67053cde145856b1f324662aa95b7203114446145553b194cab9a2026751ee494fb50286684ab8686cefffe821dcb631af", 0x1b}, 0x48, r4) keyctl$link(0x8, r5, r6) r7 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "cd03c7e95bc286a81aeaa997ec449056f6faa846b7dd4dfd0a08240283d82cfaebfdda99cc447f111753add788d423ee7d2d765082ac6b8a242138792fb143c2", 0x37}, 0x48, 0xfffffffffffffff9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r7) r8 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "6faf9cdf38d6e89f373ee161574b544ea9e32ea5ccd13c512239087c5203ac2d23d3fddcbf52d65be767cfe7ab4806be6ede8eca955a372c90fb52f3cc3e05e1", 0x28}, 0x48, 0xfffffffffffffffc) keyctl$negate(0xd, r2, 0x800, r8) r9 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc3}, &(0x7f0000000800)={0x0, "41a67a0dd2e14ef05c03174a7b90ca1a360e0392769882ef71fce65459854e50b3bf4f52a3632907cf487fdaa8ada0d22a7a955bf62617b20356da404dd15f12", 0x3a}, 0x48, r8) keyctl$reject(0x13, r9, 0x1, 0xf6, r6) [ 82.423529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.429441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.434454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.444730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.448631] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.454543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.607198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.613066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.617398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.619581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.620165] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.626480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.628395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.631530] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.633242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.633484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.642369] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.644236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.659120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.676706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.698721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.707036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.712388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.713732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.716767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.719882] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.720543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.725089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.727390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.729077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.731000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.747758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.768349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.779271] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.791190] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.791470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.791629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.799218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.805072] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.815281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.825489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.827846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.830216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.836337] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.837888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.841077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.854618] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.872595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.504427] Bluetooth: hci0: command tx timeout [ 84.696107] Bluetooth: hci1: command tx timeout [ 84.760347] Bluetooth: hci2: command tx timeout [ 84.824680] Bluetooth: hci4: command tx timeout [ 84.825291] Bluetooth: hci3: command tx timeout [ 84.888030] Bluetooth: hci7: command tx timeout [ 84.888064] Bluetooth: hci5: command tx timeout [ 84.951978] Bluetooth: hci6: command tx timeout [ 86.551977] Bluetooth: hci0: command tx timeout [ 86.744109] Bluetooth: hci1: command tx timeout [ 86.809279] Bluetooth: hci2: command tx timeout [ 86.872157] Bluetooth: hci4: command tx timeout [ 86.874954] Bluetooth: hci3: command tx timeout [ 86.936070] Bluetooth: hci7: command tx timeout [ 86.937022] Bluetooth: hci5: command tx timeout [ 86.999988] Bluetooth: hci6: command tx timeout [ 88.600935] Bluetooth: hci0: command tx timeout [ 88.793954] Bluetooth: hci1: command tx timeout [ 88.856055] Bluetooth: hci2: command tx timeout [ 88.920101] Bluetooth: hci4: command tx timeout [ 88.921179] Bluetooth: hci3: command tx timeout [ 88.984130] Bluetooth: hci7: command tx timeout [ 88.986968] Bluetooth: hci5: command tx timeout [ 89.047982] Bluetooth: hci6: command tx timeout [ 90.648973] Bluetooth: hci0: command tx timeout [ 90.841145] Bluetooth: hci1: command tx timeout [ 90.905002] Bluetooth: hci2: command tx timeout [ 90.968023] Bluetooth: hci3: command tx timeout [ 90.968105] Bluetooth: hci4: command tx timeout [ 91.032063] Bluetooth: hci5: command tx timeout [ 91.032199] Bluetooth: hci7: command tx timeout [ 91.096981] Bluetooth: hci6: command tx timeout [ 138.570760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.571259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.802351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.802436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.686056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.686188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.041999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.042082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.423057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.423169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.680964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.681726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:25:40 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) r12 = mq_open(&(0x7f0000000240)='ns/cgroup\x00', 0x840, 0x100, &(0x7f0000000280)={0x5ee, 0x3, 0x6, 0x6}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r12, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)={r13, r14+60000000}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 140.901985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.902068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:25:41 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) r12 = mq_open(&(0x7f0000000240)='ns/cgroup\x00', 0x840, 0x100, &(0x7f0000000280)={0x5ee, 0x3, 0x6, 0x6}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r12, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)={r13, r14+60000000}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 141.169672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.169752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:25:41 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) r12 = mq_open(&(0x7f0000000240)='ns/cgroup\x00', 0x840, 0x100, &(0x7f0000000280)={0x5ee, 0x3, 0x6, 0x6}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r12, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)={r13, r14+60000000}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 02:25:41 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) r12 = mq_open(&(0x7f0000000240)='ns/cgroup\x00', 0x840, 0x100, &(0x7f0000000280)={0x5ee, 0x3, 0x6, 0x6}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r12, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)={r13, r14+60000000}) 02:25:41 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) r12 = mq_open(&(0x7f0000000240)='ns/cgroup\x00', 0x840, 0x100, &(0x7f0000000280)={0x5ee, 0x3, 0x6, 0x6}) mq_timedsend(r12, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)) 02:25:42 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000000c0)="eb1419ac4d10f18ab0cb57f60a23cf11e5ce2116c6fff3f82d92f6f163810609a09ef203859c62e0ee595bedc1d98b33c3d3dc574f24f891cd62403f697fdda81ad3c287be7cf173b4a7c9458062bdcfbeb3793322477cdd92389b516c8172187e1be6fd300527e55dbadb386a6606936681a2dcb91b8245f5d0ae398cc61740510f642117c81c5787604b5864c06ad1e9f1fcef8c06ec220a44d8050acd04bef4c551bccb01518eb37ea3eb21446f8137cc458f6e0b088e896589b201413bb7d64831a76c29", 0xc6, 0x34, &(0x7f0000000200)={r10, r11+60000000}) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)) 02:25:42 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r1) r7 = epoll_create1(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) clock_gettime(0x0, &(0x7f00000001c0)) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)) [ 142.050084] [ 142.050338] ====================================================== [ 142.050932] WARNING: possible circular locking dependency detected [ 142.051532] 6.13.0-rc7-next-20250120 #1 Not tainted [ 142.052004] ------------------------------------------------------ [ 142.053774] kworker/u8:1/66 is trying to acquire lock: [ 142.054879] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.057411] [ 142.057411] but task is already holding lock: [ 142.058787] ffff888015df0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.061104] [ 142.061104] which lock already depends on the new lock. [ 142.061104] [ 142.061854] [ 142.061854] the existing dependency chain (in reverse order) is: [ 142.062568] [ 142.062568] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 142.063246] __mutex_lock+0x13d/0xb50 [ 142.063711] wiphy_register+0x1b2e/0x25d0 [ 142.064210] ieee80211_register_hw+0x23a4/0x3d60 [ 142.064750] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 142.065330] init_mac80211_hwsim+0x389/0x870 [ 142.065850] do_one_initcall+0xf9/0x640 [ 142.066331] kernel_init_freeable+0x53d/0x7a0 [ 142.066853] kernel_init+0x1e/0x2d0 [ 142.067277] ret_from_fork+0x48/0x80 [ 142.067706] ret_from_fork_asm+0x1a/0x30 [ 142.068185] [ 142.068185] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 142.068809] __lock_acquire+0x29fd/0x4580 [ 142.069303] lock_acquire+0x19b/0x520 [ 142.069756] __mutex_lock+0x13d/0xb50 [ 142.070216] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.070827] unregister_netdevice_queue+0x224/0x2e0 [ 142.071376] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.071932] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.072480] ieee80211_unregister_hw+0x55/0x3a0 [ 142.073012] hwsim_exit_net+0x3a0/0x730 [ 142.073489] ops_exit_list+0xb3/0x180 [ 142.073937] cleanup_net+0x546/0xad0 [ 142.074381] process_one_work+0x8ee/0x1a10 [ 142.074884] worker_thread+0x674/0xe70 [ 142.075355] kthread+0x3ab/0x720 [ 142.075775] ret_from_fork+0x48/0x80 [ 142.076201] ret_from_fork_asm+0x1a/0x30 [ 142.076680] [ 142.076680] other info that might help us debug this: [ 142.076680] [ 142.077456] Possible unsafe locking scenario: [ 142.077456] [ 142.078026] CPU0 CPU1 [ 142.078479] ---- ---- [ 142.078923] lock(&rdev->wiphy.mtx); [ 142.079321] lock(rtnl_mutex); [ 142.079895] lock(&rdev->wiphy.mtx); [ 142.080517] lock(rtnl_mutex); [ 142.080869] [ 142.080869] *** DEADLOCK *** [ 142.080869] [ 142.081447] 4 locks held by kworker/u8:1/66: [ 142.081868] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 142.082850] #1: ffff88800eb07d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 142.083793] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 142.084685] #3: ffff888015df0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.085689] [ 142.085689] stack backtrace: [ 142.086122] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250120 #1 [ 142.086911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.087673] Workqueue: netns cleanup_net [ 142.088088] Call Trace: [ 142.088340] [ 142.088566] dump_stack_lvl+0xca/0x120 [ 142.088980] print_circular_bug+0x47b/0x750 [ 142.089424] check_noncircular+0x2e9/0x3c0 [ 142.089847] ? __pfx_check_noncircular+0x10/0x10 [ 142.090319] ? hlock_class+0x4e/0x130 [ 142.090697] ? mark_lock+0xac/0xed0 [ 142.091070] ? srso_return_thunk+0x5/0x5f [ 142.091501] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 142.091960] ? lockdep_lock+0xba/0x1b0 [ 142.092373] ? __pfx_lockdep_lock+0x10/0x10 [ 142.092828] __lock_acquire+0x29fd/0x4580 [ 142.093266] ? __pfx___lock_acquire+0x10/0x10 [ 142.093724] ? lock_release+0x20f/0x6f0 [ 142.094127] ? __pfx_lock_release+0x10/0x10 [ 142.094564] lock_acquire+0x19b/0x520 [ 142.094951] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.095529] ? __pfx_lock_acquire+0x10/0x10 [ 142.095967] ? srso_return_thunk+0x5/0x5f [ 142.096404] ? lock_release+0x20f/0x6f0 [ 142.096810] ? srso_return_thunk+0x5/0x5f [ 142.097251] ? lock_is_held_type+0x9e/0x120 [ 142.097698] ? srso_return_thunk+0x5/0x5f [ 142.098137] __mutex_lock+0x13d/0xb50 [ 142.098534] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.099111] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.099681] ? srso_return_thunk+0x5/0x5f [ 142.100116] ? synchronize_rcu_expedited+0x38a/0x420 [ 142.100622] ? __pfx___mutex_lock+0x10/0x10 [ 142.101077] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.101609] ? srso_return_thunk+0x5/0x5f [ 142.102046] ? kasan_quarantine_put+0x84/0x1e0 [ 142.102523] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.102974] ? srso_return_thunk+0x5/0x5f [ 142.103414] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.103972] ? __virt_addr_valid+0x2e8/0x5d0 [ 142.104426] ? __pfx_lock_release+0x10/0x10 [ 142.104860] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 142.105458] ? find_held_lock+0x2c/0x110 [ 142.105887] ? srso_return_thunk+0x5/0x5f [ 142.106321] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 142.106829] ? srso_return_thunk+0x5/0x5f [ 142.107263] ? lock_release+0x20f/0x6f0 [ 142.107670] ? __pfx_lock_release+0x10/0x10 [ 142.108105] ? srso_return_thunk+0x5/0x5f [ 142.108536] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.109061] ? srso_return_thunk+0x5/0x5f [ 142.109500] unregister_netdevice_queue+0x224/0x2e0 [ 142.109994] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 142.110533] ? up_write+0x195/0x520 [ 142.110920] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.111419] ? srso_return_thunk+0x5/0x5f [ 142.111858] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.112357] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 142.112903] ? srso_return_thunk+0x5/0x5f [ 142.113345] ? srso_return_thunk+0x5/0x5f [ 142.113775] ? synchronize_rcu+0x1ff/0x260 [ 142.114201] ieee80211_unregister_hw+0x55/0x3a0 [ 142.114669] hwsim_exit_net+0x3a0/0x730 [ 142.115074] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.115525] ? srso_return_thunk+0x5/0x5f [ 142.115959] ? netdev_run_todo+0x788/0x1040 [ 142.116401] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.116852] ops_exit_list+0xb3/0x180 [ 142.117247] cleanup_net+0x546/0xad0 [ 142.117632] ? __pfx_cleanup_net+0x10/0x10 [ 142.118072] process_one_work+0x8ee/0x1a10 [ 142.118520] ? __pfx_lock_acquire+0x10/0x10 [ 142.118965] ? __pfx_process_one_work+0x10/0x10 [ 142.119455] ? srso_return_thunk+0x5/0x5f [ 142.119897] ? move_linked_works+0x172/0x270 [ 142.120363] ? srso_return_thunk+0x5/0x5f [ 142.120795] ? assign_work+0x196/0x240 [ 142.121217] worker_thread+0x674/0xe70 [ 142.121632] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.122160] ? __pfx_worker_thread+0x10/0x10 [ 142.122622] kthread+0x3ab/0x720 [ 142.122990] ? __pfx_kthread+0x10/0x10 [ 142.123401] ? srso_return_thunk+0x5/0x5f [ 142.123841] ? finish_task_switch.isra.0+0x206/0x840 [ 142.124352] ? __pfx_kthread+0x10/0x10 [ 142.124763] ret_from_fork+0x48/0x80 [ 142.125145] ? __pfx_kthread+0x10/0x10 [ 142.125556] ret_from_fork_asm+0x1a/0x30 [ 142.125998] 02:25:42 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x0, 0x6657) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, r0, r1, r2, r0, r0, r0, r3], 0x8) r4 = epoll_create(0x0) r5 = epoll_create(0xffffffff) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r1) r7 = epoll_create1(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="18045c0f1028bbfcd03860bee5db5dd45c39a907536ba0f5af1a5d790b8067fcdd0d20b48a86877687fb94fc8413cb7bb30d9d5601d46bad0ebc5fde052e16ea41c949f4766eb1a474d2530934bdb5e0291eacac48da15cd3d6ef384af6f256cc8a5a3615b555e51d0ceed2089d42dd24e7b7ea88914d6a5d300d355fbdb2b5231085389ce8fe4fa0b75e9d895aaa604071f1bc145bb093e2a11a30a953c99cca8e1b3869eef1ecc06e5e77d96e11cf32577699df85450e9e7d16dd39f2f466de40620fefb1a66c8ad9de7277b0150b5", 0xd0, 0x400, &(0x7f0000000400)) [ 144.548039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.550822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.551646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.561496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.565489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.566579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.608792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.611183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.612718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.616148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.617147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.617493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.624048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.627118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.628321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.629434] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.629864] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.630837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.676746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.681814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.682146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.693581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.708349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.709462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.715860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.718362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.720184] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.722198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.722517] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.724560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.758055] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.761189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.772015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.822110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.822408] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.831205] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.835050] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.835365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.854282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.893219] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.895568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.897400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.583943] Bluetooth: hci0: command tx timeout [ 146.712040] Bluetooth: hci1: command tx timeout [ 146.712124] Bluetooth: hci2: command tx timeout [ 146.776980] Bluetooth: hci4: command tx timeout [ 146.840961] Bluetooth: hci3: command tx timeout [ 146.969053] Bluetooth: hci7: command tx timeout [ 146.969245] Bluetooth: hci6: command tx timeout [ 148.633937] Bluetooth: hci0: command tx timeout [ 148.760994] Bluetooth: hci1: command tx timeout [ 148.761095] Bluetooth: hci2: command tx timeout [ 148.825029] Bluetooth: hci4: command tx timeout [ 148.889080] Bluetooth: hci3: command tx timeout [ 149.017089] Bluetooth: hci7: command tx timeout [ 149.017291] Bluetooth: hci6: command tx timeout [ 150.680110] Bluetooth: hci0: command tx timeout [ 150.809077] Bluetooth: hci2: command tx timeout [ 150.809778] Bluetooth: hci1: command tx timeout [ 150.871977] Bluetooth: hci4: command tx timeout [ 150.935926] Bluetooth: hci3: command tx timeout [ 151.064921] Bluetooth: hci7: command tx timeout [ 151.064989] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 02:25:42 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802a0e7ad8 RCX=ffffffff819cd88c RDX=ffff88801360b780 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88802a0e7610 R8 =0000000000000000 R9 =fffff940001750be R10=ffffffffffffffff R11=0000000000000400 R12=ffffffffffffffff R13=0000000000000001 R14=ffff88802a0e7ad8 R15=ffff88802a0e77c0 RIP=ffffffff819cd88f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005907010 CR3=000000000e75a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800eb06b28 R8 =0000000000000001 R9 =ffffed1001d60d55 R10=0000000000000066 R11=3038383866666666 R12=0000000000000066 R13=0000000000000001 R14=ffff888008fea05b R15=ffff88800eb06e28 RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0058a5010 CR3=00000000134b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004157059a00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000