Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:14803' (ECDSA) to the list of known hosts. 2025/01/23 23:53:58 fuzzer started 2025/01/23 23:53:59 dialing manager at localhost:45511 syzkaller login: [ 68.962973] cgroup: Unknown subsys name 'net' [ 69.048944] cgroup: Unknown subsys name 'cpuset' [ 69.108297] cgroup: Unknown subsys name 'rlimit' [ 76.251578] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 23:54:17 syscalls: 2217 2025/01/23 23:54:17 code coverage: enabled 2025/01/23 23:54:17 comparison tracing: enabled 2025/01/23 23:54:17 extra coverage: enabled 2025/01/23 23:54:17 setuid sandbox: enabled 2025/01/23 23:54:17 namespace sandbox: enabled 2025/01/23 23:54:17 Android sandbox: enabled 2025/01/23 23:54:17 fault injection: enabled 2025/01/23 23:54:17 leak checking: enabled 2025/01/23 23:54:17 net packet injection: enabled 2025/01/23 23:54:17 net device setup: enabled 2025/01/23 23:54:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 23:54:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 23:54:17 USB emulation: enabled 2025/01/23 23:54:17 hci packet injection: enabled 2025/01/23 23:54:17 wifi device emulation: enabled 2025/01/23 23:54:17 802.15.4 emulation: enabled 2025/01/23 23:54:17 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 23:54:17 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 23:54:17 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 23:54:17 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 23:54:17 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/23 23:54:17 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/23 23:54:19 starting 8 fuzzer processes 23:54:19 executing program 0: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0xdcd, 0x4e21, 0x0, 0x2, 0x100, 0x80, 0x62}, {0xea, 0x0, 0x2, 0x40, 0x2, 0xffff, 0xfff, 0xb2b}, {0x7fffffff, 0x5, 0x6, 0x3}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@loopback, 0x4d6, 0xff}, 0xa, @in=@multicast2, 0x3501, 0x1, 0x3, 0x1, 0xff, 0x8, 0x5}}, 0xe8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x430, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x4, 0x2000, 0x20}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xb1d059e523613b63) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x24044010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x110, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x72}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7f, 0x9b2e, 0xd4, 0x0, 0xfffffffe, 0x1, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x64a]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x173}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x8, 0x8, 0x5, 0x7, 0x53c, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xed5c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x163}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x60000000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc890) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, 0x0, 0x100, 0x200, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4005}, 0x40020) r4 = syz_io_uring_complete(0x0) getsockname$packet(r4, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a40)=0x14) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) read$eventfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) 23:54:19 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{0x2, 0x4, r0}], {}, [{0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x0, r2}, {0x8, 0x5, r4}, {0x8, 0x4, 0xee00}], {0x10, 0x6}, {0x20, 0x4}}, 0x54, 0x2) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000300)=""/167) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa920}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000440)={0xff, 0xcfde, 0xfffffffffffffff8, 0x4, 0x7, 0x15d}) getgroups(0x2, &(0x7f0000000480)=[0xffffffffffffffff, r4]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {r1, r3}}, './file0\x00'}) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @local}, {0x1, @remote}, 0x4c, {0x2, 0x4e20, @private=0xa010102}, 'ip6_vti0\x00'}) r9 = fsmount(r6, 0x1, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000580)) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f00000005c0)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x88) accept4$unix(r9, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e, 0x0) r10 = openat2(r6, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x202a00, 0x1c1, 0x8}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f00000007c0)={0x2, 'bond0\x00', {0x7f}, 0x5}) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x36f1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x90000) keyctl$describe(0x6, 0x0, &(0x7f0000000a00)=""/206, 0xce) 23:54:19 executing program 2: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe2, 0x3, 0xff, 0x4, 0xc5, 0x61a0}, &(0x7f0000000080)=0x20) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e24, 0x7, 0x4e24, 0x6, 0x1c, 0x20, 0x20}, {0xfffffffffffffffe, 0x69, 0x8001, 0x3, 0x2f2a, 0xe73a, 0x1, 0xff}, {0x80000000, 0xb0dc, 0x0, 0x5}, 0x401, 0x6e6bbb, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x3506, 0x3, 0x0, 0x81, 0x4, 0x6, 0x1}}, 0xe8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x17) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x55, 0x1, 0x0, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x20, 0xfffffffc, 0x8001}}) r3 = accept$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xfc, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xcc, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r5 = accept(r1, &(0x7f0000000540)=@tipc, &(0x7f00000005c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r2, 0x4, 0xff, 0x9, 0x2, 0x29, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x700, 0x3, 0xc4d4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x10c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x81) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000900)={{r3}, 0x2, &(0x7f00000008c0)=[0x1c80000000000, 0x228], 0x8001, 0x1, [0xffff, 0x0, 0x0, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0x80000000, 0x7}}, './file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000009c0)) ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000000a00)) r8 = accept(r5, &(0x7f0000000a40)=@phonet, &(0x7f0000000ac0)=0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000000b00)={0x8, 'bridge_slave_0\x00', {'batadv_slave_1\x00'}, 0x3ff}) 23:54:19 executing program 3: sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f4, 0x0, 0x222, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, ']K'}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5b2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "817426c26f30a30ad54d596b05dc2299ec3728e8a859c958d02c2754a4"}}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4c536cd627ffdeb17c74bff150dcc33439fabd6b02730d40aec6a069"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x77}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "409545b257a35f3d5f7cda85ff0d844625edf8ca47"}}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1025}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb59e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5ef0d464}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x23}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a29bf3ae44fd"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}}, 0x44000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40801) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r3, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000805) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000009c0), 0x400880, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000a00)={0x4d5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "0c3879589b12a0"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001a00)={r5, 0x9}) mq_timedreceive(r0, &(0x7f0000002a00)=""/251, 0xfb, 0x9, 0x0) r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x346) poll(&(0x7f0000002b00)=[{r1, 0x6c0}, {r6, 0xc208}], 0x2, 0x2) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000002b40)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x28, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x3d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 23:54:19 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x3) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x2) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x14, "87d74e01f2ca55"}, 0x9, 0x1) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r2 = fsmount(r1, 0x0, 0x90) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000240)) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000280)) r3 = io_uring_setup(0x6aba, &(0x7f00000002c0)={0x0, 0xdf1a, 0x0, 0x1, 0xa2, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0\x00'}) r5 = openat$cgroup_type(r4, &(0x7f0000000380), 0x2, 0x0) fdatasync(r5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getpeername$inet(r6, &(0x7f0000000400)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) open_by_handle_at(r0, &(0x7f0000000480)=@OVL_FILEID_V1={0xf4, 0xf8, {'\x00', {0x0, 0xfb, 0xf1, 0x1, 0x7, "5d29e46992adb7accfd80c330f6e6750", "14585b5aed63581da0fc0cc63955da0fb17d0a2d0c88b7db004ebb9c8adaffd2e929fd10988508581e1e1547fc80b280f67191bd4e84b8e09411bfd73c065c0fe060c568fcba7146c184d8e71cb0a764d058c814359cd9fdb9d5479b150e4c0669a3481b510df389124b7a2b0d21fa391f218c11dbf25634bcc37295adc81cbab4a955d918dbb2d5da85ca29d9f6f9ef5b82cd697a08a1bdcb28a906c624740a8c06afda785ae1727a160489618de8841f1a195a52b3d5f83b75c07b3426c6c22ab202ad068f0032abac2ebb2cbd2d48f1bb31fb85f667c90fb97d63"}}}, 0x220200) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x210280, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f00000005c0)='^\\\x00', &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff) [ 89.382909] audit: type=1400 audit(1737676459.742:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:54:19 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x8000, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) r1 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x200800, 0x20, 0x12}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x581202) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000100)="07f2e9de9b856d709c76d3140e17cc9ff32b34475d24fee289108ca653ccc64af3a995a222", 0x25, 0x401, 0x0, 0x0, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x401, r2, &(0x7f0000000400)="ecf4149c22eba8ab0c28580fb8768a41d5834d73bb1b1ee5a0ec33cc15024a5b18fb91114ae2b20f898cb0b8f2099ec51c4c", 0x32, 0x401, 0x0, 0x2, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f00000004c0)="51c3aad52f3fcee9fc6fb9d30d2cf38aa461f218d6ed6503a71dcb1b609ef121f1d4d8ed69c68ec79baaacb53810746da74a55edd89b2b7fb78f400f436701acc42d4dd6dbb1138ff7350649089ef65f3aa6de47348527b5cb8e3217073af6d2a9f6d9ab04082db7235fc3f80745862c66be9d7bae1492223b93cf283b4cbd5ad964094cbc6d4f050234215c5b3f8d093cc44a3c2003a63beff827070bc781fd", 0xa0, 0x2, 0x0, 0x1, r0}]) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000640)={0x0, 0x1, 0x80, 0x1ff, 0xf, "22293d16cec1a22f8c63d53cb75cdb714832dc"}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000680)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x81, 0x7f}}, './file0\x00'}) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000700)=0x94e) r6 = openat2(r4, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x4000, 0x142, 0x1}, 0x18) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f00000007c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000800)=0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:54:19 executing program 6: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x235d, 0x1, 0x9, 0x1}, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/195, 0xc3}], 0x5, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x100) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbf6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40050}, 0x4080010) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xcc004}, 0xc800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000a00)={0x100000001, {0x50, 0x2, 0x81, 0x80, 0x6}}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) mq_open(&(0x7f0000000bc0)='\x00', 0x1, 0x26, &(0x7f0000000c00)={0x68e2, 0x7fffffff, 0x10001, 0x8000}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x108, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 23:54:19 executing program 7: sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, 0x0, 0x2a, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0xff, 0x2a, [@preq={0x82, 0x72, @not_ext={{}, 0xf8, 0x2, 0x8, @device_b, 0x10a, "", 0x9, 0x83, 0x8, [{{0x1}}, {{0x0, 0x0, 0x1}, @device_a, 0x1e}, {{}, @device_a, 0x9}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xb631}, {{0x1}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @broadcast, 0x34}, {{0x1, 0x0, 0x1}, @device_b, 0x9}]}}, @ibss={0x6, 0x2, 0x9}, @random_vendor={0xdd, 0x81, "fbd24b00d3c9a421f3a49e5b2d3d971b6ab24b4ec87ef4ec9b3e4e6446965122129708dd322a749c6d27affb2c112639f0e699a2ddfe0c10bb9c7ec72f0c5c36ea083d57cc54abe09fb9444617cd09a6c809adafd5c3d8db24ef3a0c6d98ff529ec7d05e2c33498a07d9508ac5fb5ddb7b0b1917619c480fc372fd5d71326490be"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x148}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x38}}, 0x11) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000802}, 0x10) r0 = socket(0x1, 0x2, 0x3f) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x20800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000005c0)=0x60, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8eb3, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c015) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x240040c0) sendmsg$AUDIT_SET(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x3e9, 0x10, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x39d, 0x2, 0x81, 0x0, 0x0, 0x10000}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x48801) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004d}, 0x8050) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000c00)) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x7c}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0x30}}, 0x4080) [ 90.828089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.829444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.831883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.835758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.838521] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.839771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.894117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.905727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.910965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.912638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.913814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.917946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.919332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.921929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.923546] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.923820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.924430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.927823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.928332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.932452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.936114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.937642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.938817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.941834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.944456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.954149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.957030] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.964557] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.964678] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.966707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.968980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.971004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.976634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.978715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.991275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.993947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.995771] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.008909] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.019724] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.020675] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.021644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.027760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.037570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.041761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.046147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.083080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.089689] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.091932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.918888] Bluetooth: hci0: command tx timeout [ 92.981593] Bluetooth: hci2: command tx timeout [ 92.981879] Bluetooth: hci1: command tx timeout [ 93.045571] Bluetooth: hci3: command tx timeout [ 93.046669] Bluetooth: hci4: command tx timeout [ 93.110611] Bluetooth: hci6: command tx timeout [ 93.110778] Bluetooth: hci5: command tx timeout [ 93.173618] Bluetooth: hci7: command tx timeout [ 94.967564] Bluetooth: hci0: command tx timeout [ 95.031559] Bluetooth: hci1: command tx timeout [ 95.032023] Bluetooth: hci2: command tx timeout [ 95.093750] Bluetooth: hci4: command tx timeout [ 95.095066] Bluetooth: hci3: command tx timeout [ 95.157673] Bluetooth: hci5: command tx timeout [ 95.157702] Bluetooth: hci6: command tx timeout [ 95.222594] Bluetooth: hci7: command tx timeout [ 97.013766] Bluetooth: hci0: command tx timeout [ 97.077655] Bluetooth: hci2: command tx timeout [ 97.077738] Bluetooth: hci1: command tx timeout [ 97.141608] Bluetooth: hci3: command tx timeout [ 97.141658] Bluetooth: hci4: command tx timeout [ 97.206011] Bluetooth: hci6: command tx timeout [ 97.206866] Bluetooth: hci5: command tx timeout [ 97.269713] Bluetooth: hci7: command tx timeout [ 99.062558] Bluetooth: hci0: command tx timeout [ 99.127528] Bluetooth: hci1: command tx timeout [ 99.127570] Bluetooth: hci2: command tx timeout [ 99.189762] Bluetooth: hci3: command tx timeout [ 99.190697] Bluetooth: hci4: command tx timeout [ 99.253655] Bluetooth: hci5: command tx timeout [ 99.254559] Bluetooth: hci6: command tx timeout [ 99.318570] Bluetooth: hci7: command tx timeout [ 153.542271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.546244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.548870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.558030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.564061] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.566393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.660877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.666729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.675335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.681437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.684438] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.688945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.714840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.727791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.739155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.740235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.744644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.753227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.761059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.763993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.765608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.768040] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.768450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.770404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.793224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.796349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.798077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.804729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.808882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.810072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.854245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.874814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.885937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.908447] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.912109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.915269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.923883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.931845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.935990] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.939883] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.946921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.949830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.081031] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.093958] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.096193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.117846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.121890] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.139372] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.639817] Bluetooth: hci0: command tx timeout [ 155.766824] Bluetooth: hci1: command tx timeout [ 155.829929] Bluetooth: hci3: command tx timeout [ 155.893969] Bluetooth: hci2: command tx timeout [ 155.894555] Bluetooth: hci4: command tx timeout [ 156.022760] Bluetooth: hci5: command tx timeout [ 156.085686] Bluetooth: hci6: command tx timeout [ 156.278654] Bluetooth: hci7: command tx timeout [ 157.685622] Bluetooth: hci0: command tx timeout [ 157.813650] Bluetooth: hci1: command tx timeout [ 157.879539] Bluetooth: hci3: command tx timeout [ 157.941532] Bluetooth: hci4: command tx timeout [ 157.941927] Bluetooth: hci2: command tx timeout [ 158.069665] Bluetooth: hci5: command tx timeout [ 158.134541] Bluetooth: hci6: command tx timeout [ 158.326632] Bluetooth: hci7: command tx timeout [ 159.733555] Bluetooth: hci0: command tx timeout [ 159.861796] Bluetooth: hci1: command tx timeout [ 159.927805] Bluetooth: hci3: command tx timeout [ 159.989794] Bluetooth: hci4: command tx timeout [ 159.990224] Bluetooth: hci2: command tx timeout [ 160.117667] Bluetooth: hci5: command tx timeout [ 160.181928] Bluetooth: hci6: command tx timeout [ 160.373553] Bluetooth: hci7: command tx timeout [ 161.781900] Bluetooth: hci0: command tx timeout [ 161.909568] Bluetooth: hci1: command tx timeout [ 161.974878] Bluetooth: hci3: command tx timeout [ 162.037620] Bluetooth: hci2: command tx timeout [ 162.038984] Bluetooth: hci4: command tx timeout [ 162.165642] Bluetooth: hci5: command tx timeout [ 162.229702] Bluetooth: hci6: command tx timeout [ 162.422893] Bluetooth: hci7: command tx timeout [ 215.433841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.437972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.441962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.450346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.455490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.460123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.560706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.569701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.574780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.590349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.597731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.597821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.602052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.605000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.611158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.616998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.621552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.628980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.699937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.707083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.732509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.758568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.763978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.771999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.784926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.797070] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.806722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.819926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.833275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.840931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.933003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.946222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.948528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.952079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.954887] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.958404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.968957] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.982240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.987624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.992369] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.995306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.998152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.005058] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.010191] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.012632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.015998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.018818] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.020433] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.525573] Bluetooth: hci0: command tx timeout [ 217.653647] Bluetooth: hci2: command tx timeout [ 217.717566] Bluetooth: hci1: command tx timeout [ 217.909567] Bluetooth: hci4: command tx timeout [ 217.910359] Bluetooth: hci3: command tx timeout [ 217.973530] Bluetooth: hci5: command tx timeout [ 218.038664] Bluetooth: hci7: command tx timeout [ 218.101621] Bluetooth: hci6: command tx timeout [ 219.573602] Bluetooth: hci0: command tx timeout [ 219.703475] Bluetooth: hci2: command tx timeout [ 219.772932] Bluetooth: hci1: command tx timeout [ 219.958050] Bluetooth: hci3: command tx timeout [ 219.958939] Bluetooth: hci4: command tx timeout [ 220.021690] Bluetooth: hci5: command tx timeout [ 220.085599] Bluetooth: hci7: command tx timeout [ 220.149653] Bluetooth: hci6: command tx timeout [ 221.622631] Bluetooth: hci0: command tx timeout [ 221.751225] Bluetooth: hci2: command tx timeout [ 221.813550] Bluetooth: hci1: command tx timeout [ 222.005528] Bluetooth: hci3: command tx timeout [ 222.006036] Bluetooth: hci4: command tx timeout [ 222.071482] Bluetooth: hci5: command tx timeout [ 222.134589] Bluetooth: hci7: command tx timeout [ 222.198594] Bluetooth: hci6: command tx timeout [ 223.671556] Bluetooth: hci0: command tx timeout [ 223.797811] Bluetooth: hci2: command tx timeout [ 223.862515] Bluetooth: hci1: command tx timeout [ 224.053563] Bluetooth: hci4: command tx timeout [ 224.054036] Bluetooth: hci3: command tx timeout [ 224.117539] Bluetooth: hci5: command tx timeout [ 224.181716] Bluetooth: hci7: command tx timeout [ 224.245556] Bluetooth: hci6: command tx timeout [ 277.900320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.903728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.907234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.914381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.919004] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.921854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.962735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.970977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.973963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.981338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.988772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.991978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.084294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.090775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.093924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.111403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.119929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.123276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.124886] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.130627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.134761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.143289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.152165] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.157373] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.201216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.203509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.217715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.224783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.226100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.233567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.267306] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.270554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.275206] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.287305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.293542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.298005] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.306346] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.314843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.316387] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.317320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.319891] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.322860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.328865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.333746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.336686] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.392816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.397706] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.405870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.989623] Bluetooth: hci0: command tx timeout [ 280.054919] Bluetooth: hci1: command tx timeout [ 280.183456] Bluetooth: hci2: command tx timeout [ 280.309531] Bluetooth: hci3: command tx timeout [ 280.437608] Bluetooth: hci4: command tx timeout [ 280.437659] Bluetooth: hci7: command tx timeout [ 280.502160] Bluetooth: hci6: command tx timeout [ 280.565639] Bluetooth: hci5: command tx timeout [ 282.038263] Bluetooth: hci0: command tx timeout [ 282.103504] Bluetooth: hci1: command tx timeout [ 282.229756] Bluetooth: hci2: command tx timeout [ 282.358252] Bluetooth: hci3: command tx timeout [ 282.485547] Bluetooth: hci7: command tx timeout [ 282.486013] Bluetooth: hci4: command tx timeout [ 282.549647] Bluetooth: hci6: command tx timeout [ 282.615679] Bluetooth: hci5: command tx timeout [ 284.086731] Bluetooth: hci0: command tx timeout [ 284.152546] Bluetooth: hci1: command tx timeout [ 284.277926] Bluetooth: hci2: command tx timeout [ 284.406718] Bluetooth: hci3: command tx timeout [ 284.533746] Bluetooth: hci4: command tx timeout [ 284.534480] Bluetooth: hci7: command tx timeout [ 284.597651] Bluetooth: hci6: command tx timeout [ 284.661551] Bluetooth: hci5: command tx timeout [ 286.133581] Bluetooth: hci0: command tx timeout [ 286.197645] Bluetooth: hci1: command tx timeout [ 286.325501] Bluetooth: hci2: command tx timeout [ 286.453667] Bluetooth: hci3: command tx timeout [ 286.583490] Bluetooth: hci4: command tx timeout [ 286.584056] Bluetooth: hci7: command tx timeout [ 286.646536] Bluetooth: hci6: command tx timeout [ 286.709539] Bluetooth: hci5: command tx timeout [ 336.764869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.765612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.935025] [ 337.935250] ====================================================== [ 337.935766] WARNING: possible circular locking dependency detected [ 337.936283] 6.13.0-next-20250123 #1 Not tainted [ 337.936679] ------------------------------------------------------ [ 337.937188] kworker/u8:0/11 is trying to acquire lock: [ 337.938378] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.940175] [ 337.940175] but task is already holding lock: [ 337.941198] ffff8880334c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.942871] [ 337.942871] which lock already depends on the new lock. [ 337.942871] [ 337.944160] [ 337.944160] the existing dependency chain (in reverse order) is: [ 337.945362] [ 337.945362] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.946911] __mutex_lock+0x13d/0xb50 [ 337.947789] wiphy_register+0x1b2e/0x25d0 [ 337.948643] ieee80211_register_hw+0x23a4/0x3d60 [ 337.949533] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.950552] init_mac80211_hwsim+0x389/0x870 [ 337.951432] do_one_initcall+0xf9/0x640 [ 337.952322] kernel_init_freeable+0x53d/0x7a0 [ 337.952946] kernel_init+0x1e/0x2d0 [ 337.953443] ret_from_fork+0x48/0x80 [ 337.953962] ret_from_fork_asm+0x1a/0x30 [ 337.954547] [ 337.954547] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.955261] __lock_acquire+0x29fd/0x4580 [ 337.955832] lock_acquire+0x19b/0x520 [ 337.956360] __mutex_lock+0x13d/0xb50 [ 337.956906] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.957685] unregister_netdevice_queue+0x224/0x2e0 [ 337.958368] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.959026] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.959678] ieee80211_unregister_hw+0x55/0x3a0 [ 337.960294] hwsim_exit_net+0x3a0/0x730 [ 337.960839] ops_exit_list+0xb3/0x180 [ 337.961360] cleanup_net+0x546/0xad0 [ 337.961879] process_one_work+0x8ee/0x1a10 [ 337.962490] worker_thread+0x674/0xe70 [ 337.963054] kthread+0x3ab/0x720 [ 337.963590] ret_from_fork+0x48/0x80 [ 337.964108] ret_from_fork_asm+0x1a/0x30 [ 337.964747] [ 337.964747] other info that might help us debug this: [ 337.964747] [ 337.965638] Possible unsafe locking scenario: [ 337.965638] [ 337.966326] CPU0 CPU1 [ 337.966845] ---- ---- [ 337.967362] lock(&rdev->wiphy.mtx); [ 337.967844] lock(rtnl_mutex); [ 337.968538] lock(&rdev->wiphy.mtx); [ 337.969273] lock(rtnl_mutex); [ 337.969696] [ 337.969696] *** DEADLOCK *** [ 337.969696] [ 337.970371] 4 locks held by kworker/u8:0/11: [ 337.970894] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.972110] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.973246] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.974306] #3: ffff8880334c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.975618] [ 337.975618] stack backtrace: [ 337.976218] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250123 #1 [ 337.976277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.976313] Workqueue: netns cleanup_net [ 337.976378] Call Trace: [ 337.976395] [ 337.976414] dump_stack_lvl+0xca/0x120 [ 337.976507] print_circular_bug+0x47b/0x750 [ 337.976582] check_noncircular+0x2e9/0x3c0 [ 337.976648] ? __pfx_check_noncircular+0x10/0x10 [ 337.976712] ? hlock_class+0x4e/0x130 [ 337.976759] ? mark_lock+0xac/0xed0 [ 337.976822] ? srso_return_thunk+0x5/0x5f [ 337.976910] ? timerqueue_del+0x83/0x150 [ 337.976978] ? lockdep_lock+0xba/0x1b0 [ 337.977068] ? __pfx_lockdep_lock+0x10/0x10 [ 337.977173] __lock_acquire+0x29fd/0x4580 [ 337.977257] ? __pfx___lock_acquire+0x10/0x10 [ 337.977327] ? lock_release+0x20f/0x6f0 [ 337.977397] ? __pfx_lock_release+0x10/0x10 [ 337.977468] lock_acquire+0x19b/0x520 [ 337.977529] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.977599] ? __pfx_lock_acquire+0x10/0x10 [ 337.977661] ? srso_return_thunk+0x5/0x5f [ 337.977740] ? lock_release+0x20f/0x6f0 [ 337.977800] ? srso_return_thunk+0x5/0x5f [ 337.977879] ? lock_is_held_type+0x9e/0x120 [ 337.977975] ? srso_return_thunk+0x5/0x5f [ 337.978059] __mutex_lock+0x13d/0xb50 [ 337.978134] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.978198] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.978264] ? srso_return_thunk+0x5/0x5f [ 337.978342] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.978403] ? __pfx___mutex_lock+0x10/0x10 [ 337.978479] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.978555] ? srso_return_thunk+0x5/0x5f [ 337.978633] ? kasan_quarantine_put+0x84/0x1e0 [ 337.978718] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.978767] ? srso_return_thunk+0x5/0x5f [ 337.978851] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.978916] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.978990] ? __pfx_lock_release+0x10/0x10 [ 337.979053] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.979118] ? find_held_lock+0x2c/0x110 [ 337.979199] ? srso_return_thunk+0x5/0x5f [ 337.979280] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.979364] ? srso_return_thunk+0x5/0x5f [ 337.979443] ? lock_release+0x20f/0x6f0 [ 337.979504] ? __pfx_lock_release+0x10/0x10 [ 337.979564] ? srso_return_thunk+0x5/0x5f [ 337.979642] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.979709] ? srso_return_thunk+0x5/0x5f [ 337.979794] unregister_netdevice_queue+0x224/0x2e0 [ 337.979856] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.979918] ? up_write+0x195/0x520 [ 337.979995] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.980070] ? srso_return_thunk+0x5/0x5f [ 337.980153] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.980209] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.980264] ? srso_return_thunk+0x5/0x5f [ 337.980342] ? srso_return_thunk+0x5/0x5f [ 337.980420] ? synchronize_rcu+0x1ff/0x260 [ 337.980480] ieee80211_unregister_hw+0x55/0x3a0 [ 337.980545] hwsim_exit_net+0x3a0/0x730 [ 337.980606] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.980664] ? srso_return_thunk+0x5/0x5f [ 337.980742] ? netdev_run_todo+0x788/0x1040 [ 337.980808] ? srso_return_thunk+0x5/0x5f [ 337.980889] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.980950] ops_exit_list+0xb3/0x180 [ 337.981011] cleanup_net+0x546/0xad0 [ 337.981075] ? __pfx_cleanup_net+0x10/0x10 [ 337.981151] process_one_work+0x8ee/0x1a10 [ 337.981243] ? __pfx_lock_acquire+0x10/0x10 [ 337.981305] ? __pfx_process_one_work+0x10/0x10 [ 337.981386] ? srso_return_thunk+0x5/0x5f [ 337.981464] ? move_linked_works+0x172/0x270 [ 337.981527] ? srso_return_thunk+0x5/0x5f [ 337.981605] ? assign_work+0x196/0x240 [ 337.981685] worker_thread+0x674/0xe70 [ 337.981766] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.981839] ? __pfx_worker_thread+0x10/0x10 [ 337.981922] kthread+0x3ab/0x720 [ 337.982009] ? __pfx_kthread+0x10/0x10 [ 337.982081] ? srso_return_thunk+0x5/0x5f [ 337.982160] ? finish_task_switch.isra.0+0x206/0x840 [ 337.982231] ? __pfx_kthread+0x10/0x10 [ 337.982306] ret_from_fork+0x48/0x80 [ 337.982351] ? __pfx_kthread+0x10/0x10 [ 337.982425] ret_from_fork_asm+0x1a/0x30 [ 337.982519] [ 339.904940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.907557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.914754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.920892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.924102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.926063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.028570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.031707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.033769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.037524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.041691] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.045563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.106537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.108195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.109801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.111672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.114793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.117216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.119276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.126969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.128290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.142571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.147300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.152862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.506524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.532701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.542311] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.544344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.547736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.550476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.553741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.555612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.560695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.568202] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.569719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.570890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.573367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.579209] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.582327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.583614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.586103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.594244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.597629] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.600084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.600135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.602952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.631020] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.635359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.941516] Bluetooth: hci0: command tx timeout [ 342.069512] Bluetooth: hci1: command tx timeout [ 342.197508] Bluetooth: hci3: command tx timeout [ 342.263504] Bluetooth: hci2: command tx timeout [ 342.709680] Bluetooth: hci7: command tx timeout [ 342.709721] Bluetooth: hci5: command tx timeout [ 342.710940] Bluetooth: hci4: command tx timeout [ 342.775465] Bluetooth: hci6: command tx timeout [ 343.989499] Bluetooth: hci0: command tx timeout [ 344.117473] Bluetooth: hci1: command tx timeout [ 344.245472] Bluetooth: hci3: command tx timeout [ 344.310458] Bluetooth: hci2: command tx timeout [ 344.757502] Bluetooth: hci4: command tx timeout [ 344.757548] Bluetooth: hci5: command tx timeout [ 344.757971] Bluetooth: hci7: command tx timeout [ 344.821464] Bluetooth: hci6: command tx timeout [ 346.037476] Bluetooth: hci0: command tx timeout [ 346.165451] Bluetooth: hci1: command tx timeout [ 346.293522] Bluetooth: hci3: command tx timeout [ 346.357450] Bluetooth: hci2: command tx timeout [ 346.806526] Bluetooth: hci7: command tx timeout [ 346.806553] Bluetooth: hci5: command tx timeout [ 346.806986] Bluetooth: hci4: command tx timeout [ 346.869476] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:58:28 Registers: info registers vcpu 0 RAX=000000000004c619 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f844ca4e548 CR3=000000000e674000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000003000000000000563f91cdb840 XMM05=0000563f91d04c600000563f91cdb6e0 XMM06=0000000000000000ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000021 RCX=ffffffff8152564f RDX=ffff8880095c3780 RSI=0000000000000020 RDI=0000000000000007 RBP=0000000000000021 RSP=ffff8880095deb48 R8 =6f64202020202020 R9 =696e695f656e6f5f R10=000000000000000f R11=30343678302f3920 R12=ffffffff882656a0 R13=000000000000000f R14=0000000000000800 R15=000000000000000f RIP=ffffffff81525653 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005564402663a8 CR3=000000000e674000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff0000ff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000003000000000000563f91cdb840 XMM05=0000563f91d04c600000563f91cdb6e0 XMM06=0000000000000000ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000