Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15330' (ECDSA) to the list of known hosts. 2025/01/25 22:21:49 fuzzer started 2025/01/25 22:21:49 dialing manager at localhost:40883 syzkaller login: [ 61.151094] cgroup: Unknown subsys name 'net' [ 61.277934] cgroup: Unknown subsys name 'cpuset' [ 61.312817] cgroup: Unknown subsys name 'rlimit' [ 68.209723] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.414310] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 22:22:08 syscalls: 2217 2025/01/25 22:22:08 code coverage: enabled 2025/01/25 22:22:08 comparison tracing: enabled 2025/01/25 22:22:08 extra coverage: enabled 2025/01/25 22:22:08 setuid sandbox: enabled 2025/01/25 22:22:08 namespace sandbox: enabled 2025/01/25 22:22:08 Android sandbox: enabled 2025/01/25 22:22:08 fault injection: enabled 2025/01/25 22:22:08 leak checking: enabled 2025/01/25 22:22:08 net packet injection: enabled 2025/01/25 22:22:08 net device setup: enabled 2025/01/25 22:22:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 22:22:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 22:22:08 USB emulation: enabled 2025/01/25 22:22:08 hci packet injection: enabled 2025/01/25 22:22:08 wifi device emulation: enabled 2025/01/25 22:22:08 802.15.4 emulation: enabled 2025/01/25 22:22:08 fetching corpus: 50, signal 8222/9530 (executing program) 2025/01/25 22:22:08 fetching corpus: 74, signal 9697/12118 (executing program) 2025/01/25 22:22:08 fetching corpus: 74, signal 9697/13323 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/14555 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/15769 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/16977 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/18186 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/19405 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/20655 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/21895 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/23139 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/24411 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/25100 (executing program) 2025/01/25 22:22:09 fetching corpus: 74, signal 9697/25100 (executing program) 2025/01/25 22:22:13 starting 8 fuzzer processes 22:22:13 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3ff) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x100000001) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) fchown(r0, 0xee01, r1) tee(r0, r0, 0x5, 0x9) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000100)='o') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) r3 = signalfd(r2, &(0x7f00000001c0)={[0x6]}, 0x8) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000200)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000240)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000002c0)={0x7, 0x1000, 0x10000, 0x5, 0x8}) signalfd(r2, &(0x7f0000000300)={[0x1]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) write$cgroup_freezer_state(r6, &(0x7f0000000380)='FREEZING\x00', 0x9) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x1e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x9e80) 22:22:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xecf}}, '.\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@private=0xa010101, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xee00}, {0x0, 0x381a, 0xd270, 0x7fff, 0x40, 0x81, 0x7, 0x8000}, {0x0, 0x3a, 0x2, 0x4}, 0x5, 0x6e6bb6}, {{@in=@loopback, 0x4d6, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x3502, 0x4, 0x2, 0x3, 0x8001, 0x3, 0xe93}}, 0xe8) r1 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000180)=0x1c, 0x800) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x105800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r2, 0x2, 0x4, 0x4}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x88294ad8ee4cb31d}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000440)=0x4) recvmmsg(r3, &(0x7f0000005280)=[{{&(0x7f0000000480)=@phonet, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000680)=""/167, 0xa7}], 0x3, &(0x7f0000000780)=""/165, 0xa5}, 0x4}, {{&(0x7f0000000840)=@rc, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/137, 0x89}], 0x2, &(0x7f00000019c0)=""/182, 0xb6}, 0x7}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/176, 0xb0}, {&(0x7f0000002bc0)=""/7, 0x7}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/152, 0x98}, {&(0x7f0000003cc0)=""/133, 0x85}], 0x6, &(0x7f0000003e00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e80)=""/251, 0xfb}], 0x1, &(0x7f0000004fc0)=""/149, 0x95}, 0x40}, {{&(0x7f0000005080)=@nl=@unspec, 0x80, &(0x7f0000005140)=[{&(0x7f0000005100)=""/25, 0x19}], 0x1, &(0x7f0000005180)=""/194, 0xc2}, 0x9}], 0x5, 0x2000, &(0x7f00000053c0)={0x77359400}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000005500)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40880}, 0x40001) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000005680)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005640)={&(0x7f0000005580)={0xb4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000056c0)={'wlan1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000005700)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000005740)={{0x1, 0x1, 0x18, r6, {0x7, 0x8001}}, './file0\x00'}) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005840)='/proc/sysvipc/msg\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f0000005880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000058c0)=0x14, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000005900)={{{@in=@multicast2, @in6=@local, 0x4e20, 0x101, 0x4e24, 0x7f, 0xa, 0x80, 0x20, 0x0, r8, 0xee00}, {0x3, 0x10000000000, 0x7, 0x4, 0xff, 0x8, 0x7}, {0xffffffff, 0xfffffffffffffe1b, 0xff, 0x6}, 0x9, 0x6e6bbe, 0x1, 0x1, 0x2, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0xa, @in=@private=0xa010100, 0x34ff, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x1}}, 0xe8) fcntl$getown(r1, 0x9) 22:22:13 executing program 2: ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x5) flock(0xffffffffffffffff, 0x7) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x24002, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000088) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x13546ae33d6d46cc) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x150, 0x13, 0x721, 0x70bd2b, 0x25dfdbfe, {0x3c, 0x6, 0x1f, 0xb0, {0x4e20, 0x4e20, [0x30, 0xffffffff, 0x80, 0x1f], [0x1, 0xaf5, 0x7, 0x2], 0x0, [0x8, 0xffff]}, 0x1, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c010}, 0x2404005d) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x40000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000008c0)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000900)) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x4c}}, 0x4000000) [ 84.465112] audit: type=1400 audit(1737843733.504:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:22:13 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8942, &(0x7f0000000000)={'ipvlan1\x00', @ifru_hwaddr=@dev}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4840}, 0x4004) bind(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x1, {0xa, 0x4e24, 0xc6ea, @private1, 0x80000}}}, 0x80) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000580)={@mcast1, r0}, 0x14) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)={0xd5, {{0x2, 0x4e20, @empty}}, 0x0, 0x9, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @local}}]}, 0x510) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000b00)=""/155, &(0x7f0000000bc0)=0x9b) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c00)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c80)="704ac0f1029e91e4a43e07952f0711c1fd0a609ddd83ecb4d6a888689430cd7a6920946d01fea0b38d5c3fa64d549d391f688cd47a721e456574d5ed0f5ed488762b85be357dbee5c34463ffe1800d806a52651b5a63ef40fd6d788a95e50f16ef37286e3bf0e45a775181f9812aa9303357d04b836ce61a20b058e0202edc69d749b61beb05f38db799fb80284844fd96a15765ccb183700d84b661238023435f75ee9cc5900c97223caf4c09eee4ff8731bb8acbbb9ba423d89bb18600fdc65e1190e4f48a99ca231067747245494273e476b470fdf368eb1ed1", 0xdb}], 0x1, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x6dd}}], 0x18}, 0x40000) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000e40)={@empty, 0x3f, r2}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000e80)={0xa, 0x4e20, 0x20, @private2, 0x3ff}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000ec0)="f1ab6ddb601da6543d2329b6419b79821e78f292012b548e088063fc83b05f71ed1622a7b089fa31ae", 0x29}], 0x1, &(0x7f0000000f40)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x1, 0x0, 0x0, [@private0, @mcast1]}}}, @rthdr={{0x88, 0x29, 0x39, {0x33, 0xe, 0x2, 0x11, 0x0, [@remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2c, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x1f, 0x25, "4cae63d7167e3710ced1bf017df6c05da8609c779f49fcf50acf1b4b0e321269d518b01984"}]}}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x11, 0x1c, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x40, 0xd0, "24df7260691498083f4c9d05aff515f01f5a6c5b6bf7092c1e311e677917742db3bdc392faa1bc1745e4f11e93c72d6a9abe5de337a2f73d60db6d46dd86b464ea1e3e5dc7a2ccbd6d7275147f0a1ef4e128ef66071d1e3468ad945bce8ca4db606e1b0dd7fcd566ca0955936db9493ef997bc3a4b69f057b90822f51b5e77cc8a11502b9061882e79d4f856d57834c33639bdd133e2e3ef48ee671500839ce7fe1c3a324cc77fda05363d62cc2494dbf4c337f31cd33616c5832e4414adc88bb335b8c4e50e6368ab7cea203ba95636"}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x9}]}}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x0, 0xd, '\x00', [@hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x48, {0x0, 0x10, 0x80, 0x6, [0xfffffffffffffff7, 0x8001, 0x1, 0x78, 0x20, 0x1, 0x2, 0xfffffffffffffff9]}}, @jumbo={0xc2, 0x4, 0x7747}, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x1000}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3c}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}]}}}], 0x2e8}, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000001280)={'veth1_to_bond\x00', @ifru_flags}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x78, 0x0, 0xd10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001400), 0x880, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001580)={{0x1, 0x1, 0x18}, './file0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001c80)=@nat={'nat\x00', 0x19, 0x5, 0x666, [0x20001600, 0x0, 0x0, 0x200016d6, 0x20001962], 0x0, &(0x7f00000015c0), &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x49, 0x8848, 'veth0_vlan\x00', 'netdevsim0\x00', 'hsr0\x00', 'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x9, 0x44, 0x8847, 'team0\x00', 'macsec0\x00', 'ip6gre0\x00', 'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xfe, 0xfe, 0x146, [@time={{'time\x00', 0x0, 0x18}, {{0xb453, 0xcc, 0x11df3, 0xe9bb, 0x3f, 0x7}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0xfffffffffffffff9}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1f, 0x0, {0x7fffffff}}}}}, {0x3, 0x1, 0x8808, 'veth0_to_bond\x00', 'bridge0\x00', 'veth0_virt_wifi\x00', 'bridge_slave_0\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'syz_tun\x00', {0xff}, 'veth1_to_batadv\x00', {0xff}, 0x1, 0x1a}}}], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x3, 0x18, 0x6, 'veth0_to_bridge\x00', 'ipvlan1\x00', 'vlan0\x00', 'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0x0, 0xff, 0x0, 0x1fe], @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x196, 0x196, 0x1c6, [@comment={{'comment\x00', 0x0, 0x100}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x11, 0x2, 0x88e7, 'ipvlan0\x00', 'veth1_macvtap\x00', 'veth0_to_batadv\x00', 'veth0_to_bond\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}]}]}, 0x6de) 22:22:13 executing program 4: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x43) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xb63d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x66) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffffffffffff8001) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x81) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7c73) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffffffffffffffc) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffffffffffffafc) 22:22:13 executing program 5: r0 = gettid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80000) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r2, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x80000001}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000540)={{'\x00', 0x2}, {0x1}, 0x8, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x142, 0x0, &(0x7f0000000300)={0x2, 0x161, {0x0, 0xc, 0xca, "e86b5ceadf4d94a09986e9588c8771000781e7324c7c16a886483ce69c3f23975c6fb7da1cbdad891ea2ecd372f906439e6d92a45c58e137ab3ed92b59d5d8ce40eef24ef0221bd0e7e00903f246ee3fccdd8b1c76d83f457ac428a493c1c28fed4958f8b5ca78f050c45f2871557183b9e4f3126f3ff61e5510711e328d0c598233c9865779eb3ecd344aff43b0d03f39a78ba3848a4c7d50471c8762f20dc96246eb6032250958c608a2c627c2894b6590998bf297e3977eb0595c2d7080a125c5b3c5a2fd1ab927e2", 0x8a, "7f01bb44bc37afd97ed7278eda50fdadad36c6cc3a6d5438cadb301a9b9e095bc2d89caac57d0c88d350211eb04f8d37effcc6602af6e2b8c91ef47b774b79938813f5f0137cd87877a64660c7bac037789607fdb0f47c1d596bd8f2feda3f43173a9623dbaad322522b6471f6b54711888db23fa577bcd8781b74204e4c267ee4264f2c2fa898daab1f"}, 0xcc, "d51345af175493efa1f9444eeac22ac43839247c23064fea1e5ecbe9d7f2ad10b9446726e93fcd6798ba7ea09232d222fbd6c2b60dd8cbb2d4d4318c84cc5069e9e9ed8e3ff016a148eed4dfe7a2a5ed120d3481cafe8d86350e5c5a1364efe0a80cf2e17c895a214a8389828fcbfd224ce1649a5f865d07323cb8287d2fc98ef7f2be666be6cb1e9ad8173b7f26af2f6ad41052be89405d70449e0c61b039c441b727c8870ff5303be1d0f2bda6dff551305fc540c017cf630e4be278f5dd94fc9d7d02bfb35dd55e3c289c"}, 0x239}) r5 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x3, 0x200) write$P9_RXATTRWALK(r5, &(0x7f0000000600)={0xf, 0x1f, 0x2, 0x2}, 0xf) fcntl$getownex(r1, 0x10, &(0x7f0000000680)={0x0, 0x0}) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000010) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x206341) r10 = clone3(&(0x7f0000000a40)={0x8b203200, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900), {0x24}, &(0x7f0000000940)=""/103, 0x67, &(0x7f00000009c0)=""/39, &(0x7f0000000a00)=[r0], 0x1, {r7}}, 0x58) fcntl$lock(r9, 0x26, &(0x7f0000000ac0)={0x3, 0x1, 0x6, 0x5, r10}) write$P9_RLINK(r7, &(0x7f0000000b00)={0x7, 0x47, 0x1}, 0x7) write$P9_RLCREATE(r5, &(0x7f0000000b40)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x3}, 0x7}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000c40)={'tunl0\x00', &(0x7f0000000b80)={'tunl0\x00', r4, 0x80, 0x20, 0x5, 0x1, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xb, 0x6b, [@dev={0xac, 0x14, 0x14, 0xc}, @broadcast]}, @rr={0x7, 0x17, 0xa7, [@local, @local, @rand_addr=0x64010101, @empty, @empty]}, @timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x2, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}}]}, @ssrr={0x89, 0x13, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @broadcast]}, @timestamp={0x44, 0xc, 0xb3, 0x0, 0x4, [0x3ff, 0x7]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xac, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) connect$packet(r5, &(0x7f0000000c80)={0x11, 0xf8, r11, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f0000000cc0)={0x80000000, 0x8001, 0xc5}) mount$9p_unix(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x1000, &(0x7f0000000e00)={'trans=unix,', {[{@cache_mmap}], [{@measure}, {@seclabel}, {@dont_hash}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 22:22:13 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0xb0d8870abb0cadc4, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3e}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7f}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20d0}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1ec, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x5c68051a06ba3353) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000a40)={0x128c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}}}}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff1acd}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc73}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x18de}]}, @TIPC_NLA_NODE={0x1140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "1062d348f0f0211ec22e6eb2604d3749c9c4f67198"}}, @TIPC_NLA_NODE_ID={0x53, 0x3, "3e1dec600aa0073aff85b053df84fe5ab7c645f509cbf025110f1b01333d4d317cd16f3ce88d19d9bebdd6295c5f6abd30a2aa0d5afc8841e7f4858e60f58058a7cc6d632d16e04f68fcda8630d3d8"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a5706e160f7eacf2b8966e2c13c45613492fd83a29587d1408fb"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "825e62e2c198976aba9b489e856b526234ca2fe7d2877262e8086ce2a5701d0abb0548"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40058d5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001d80), 0x0, 0x20000085) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c080}, 0x8000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r0, 0xc00, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008014}, 0x20000004) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000002000), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'syztnl1\x00', &(0x7f0000002080)={'ip6_vti0\x00', r4, 0x13, 0x40, 0x0, 0x1f, 0x80, @rand_addr=' \x01\x00', @private0, 0x7, 0x8, 0x1, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002180)={@broadcast, @local, 0x0}, &(0x7f00000021c0)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000002680)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x160, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) 22:22:13 executing program 7: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000080)={0x3, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000000c0)=0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) tee(0xffffffffffffffff, r0, 0x6, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000100)={{0x0, 0x2, 0x6, 0x20, 0x1f, 0x1f, 0x3f, 0x80000001, 0x1, 0x5, 0x1ff, 0x569c85e2, 0x800, 0x6, 0x8283}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4840) r1 = inotify_init1(0x800) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001200)={0x0, 0x0, 0x81, 0x2, 0x7c54, 0x5f}) bind$bt_l2cap(r0, &(0x7f0000001240)={0x1f, 0x5, @any, 0x8, 0x1}, 0xe) r2 = creat(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001380)=0x2) setsockopt(r2, 0x7, 0x101, &(0x7f00000013c0)="4cf1fef6a0938e4217604adef43ec0ca4bab9eeac04354a22f293c2bbaa7f4f1e5344ce0f3fd101be403e68fe791e3e8cd96bf2812419672a8c93526530bd5924c6102f4b2947326", 0x48) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001440)=0x0) fcntl$lock(r2, 0x26, &(0x7f0000001480)={0x0, 0x3, 0x9, 0xc00000000000000, r3}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000001500)) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001540), 0x2101, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000001580)=0x951) [ 86.046278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.053853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.056894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.067239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.074194] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.077170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.103290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.108003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.112269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.118309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.121634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.123728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.164194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.166753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.171146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.174226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.182622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.195147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.197848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.207116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.209174] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.220759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.233501] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.243312] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.247742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.250006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.253222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.259742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.269499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.279757] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.286575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.288115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.313797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.331549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.362587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.364152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.370746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.381539] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.384633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.412807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.428308] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.431292] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.436750] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.438924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.441135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.469801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.491006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.495078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.125958] Bluetooth: hci0: command tx timeout [ 88.189495] Bluetooth: hci1: command tx timeout [ 88.317753] Bluetooth: hci2: command tx timeout [ 88.319005] Bluetooth: hci3: command tx timeout [ 88.381554] Bluetooth: hci5: command tx timeout [ 88.510645] Bluetooth: hci6: command tx timeout [ 88.512188] Bluetooth: hci4: command tx timeout [ 88.572730] Bluetooth: hci7: command tx timeout [ 90.173215] Bluetooth: hci0: command tx timeout [ 90.237972] Bluetooth: hci1: command tx timeout [ 90.364719] Bluetooth: hci3: command tx timeout [ 90.366488] Bluetooth: hci2: command tx timeout [ 90.429865] Bluetooth: hci5: command tx timeout [ 90.558459] Bluetooth: hci6: command tx timeout [ 90.559449] Bluetooth: hci4: command tx timeout [ 90.620666] Bluetooth: hci7: command tx timeout [ 92.222429] Bluetooth: hci0: command tx timeout [ 92.284435] Bluetooth: hci1: command tx timeout [ 92.413594] Bluetooth: hci3: command tx timeout [ 92.414099] Bluetooth: hci2: command tx timeout [ 92.476493] Bluetooth: hci5: command tx timeout [ 92.605532] Bluetooth: hci6: command tx timeout [ 92.606073] Bluetooth: hci4: command tx timeout [ 92.668557] Bluetooth: hci7: command tx timeout [ 94.268528] Bluetooth: hci0: command tx timeout [ 94.332462] Bluetooth: hci1: command tx timeout [ 94.460502] Bluetooth: hci2: command tx timeout [ 94.461110] Bluetooth: hci3: command tx timeout [ 94.524418] Bluetooth: hci5: command tx timeout [ 94.655442] Bluetooth: hci4: command tx timeout [ 94.655941] Bluetooth: hci6: command tx timeout [ 94.716608] Bluetooth: hci7: command tx timeout [ 148.582043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.586769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.598899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.599996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.603731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.607307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.616620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.623890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.626924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.630580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.632838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.633836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.637274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.643118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.643246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.650556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.653668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.655823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.657641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.671654] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.674247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.679867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.685162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.698516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.722190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.728490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.733964] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.735617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.738105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.739515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.745893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.751498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.754157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.765585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.790814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.795668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.800484] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.802669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.807138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.812288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.814708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.821229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.828819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.837967] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.840503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.849878] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.851751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.860085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.716513] Bluetooth: hci2: command tx timeout [ 150.780511] Bluetooth: hci3: command tx timeout [ 150.780546] Bluetooth: hci0: command tx timeout [ 150.781494] Bluetooth: hci1: command tx timeout [ 150.909499] Bluetooth: hci6: command tx timeout [ 150.909529] Bluetooth: hci4: command tx timeout [ 150.910427] Bluetooth: hci7: command tx timeout [ 150.972708] Bluetooth: hci5: command tx timeout [ 152.764614] Bluetooth: hci2: command tx timeout [ 152.828473] Bluetooth: hci0: command tx timeout [ 152.828517] Bluetooth: hci1: command tx timeout [ 152.828947] Bluetooth: hci3: command tx timeout [ 152.956670] Bluetooth: hci4: command tx timeout [ 152.956778] Bluetooth: hci7: command tx timeout [ 152.957135] Bluetooth: hci6: command tx timeout [ 153.020434] Bluetooth: hci5: command tx timeout [ 154.813032] Bluetooth: hci2: command tx timeout [ 154.876454] Bluetooth: hci3: command tx timeout [ 154.876923] Bluetooth: hci1: command tx timeout [ 154.877804] Bluetooth: hci0: command tx timeout [ 155.004423] Bluetooth: hci6: command tx timeout [ 155.004586] Bluetooth: hci7: command tx timeout [ 155.005414] Bluetooth: hci4: command tx timeout [ 155.068394] Bluetooth: hci5: command tx timeout [ 156.860596] Bluetooth: hci2: command tx timeout [ 156.925419] Bluetooth: hci3: command tx timeout [ 156.925483] Bluetooth: hci0: command tx timeout [ 156.925919] Bluetooth: hci1: command tx timeout [ 157.053393] Bluetooth: hci4: command tx timeout [ 157.053492] Bluetooth: hci7: command tx timeout [ 157.053870] Bluetooth: hci6: command tx timeout [ 157.116795] Bluetooth: hci5: command tx timeout [ 210.335588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.337178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.340680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.352745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.363430] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.365721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.503620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.511027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.513829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.524720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.532142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.534687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.575060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.587981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.593139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.597129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.601855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.604709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.639017] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.658820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.664803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.673256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.676487] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.695782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.812226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.816635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.836579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.838788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.852194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.878538] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.902543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.914899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.917124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.925726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.935877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.939235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.951433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.955710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.957863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.959154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.960876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.963006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.988857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.000769] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.015802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.017071] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.021508] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.022641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.412505] Bluetooth: hci0: command tx timeout [ 212.605417] Bluetooth: hci1: command tx timeout [ 212.669412] Bluetooth: hci2: command tx timeout [ 212.798412] Bluetooth: hci3: command tx timeout [ 212.989501] Bluetooth: hci4: command tx timeout [ 213.116453] Bluetooth: hci7: command tx timeout [ 213.116628] Bluetooth: hci6: command tx timeout [ 213.117147] Bluetooth: hci5: command tx timeout [ 214.460439] Bluetooth: hci0: command tx timeout [ 214.652423] Bluetooth: hci1: command tx timeout [ 214.716393] Bluetooth: hci2: command tx timeout [ 214.844584] Bluetooth: hci3: command tx timeout [ 215.036606] Bluetooth: hci4: command tx timeout [ 215.164503] Bluetooth: hci5: command tx timeout [ 215.165428] Bluetooth: hci6: command tx timeout [ 215.166194] Bluetooth: hci7: command tx timeout [ 216.508533] Bluetooth: hci0: command tx timeout [ 216.701717] Bluetooth: hci1: command tx timeout [ 216.764607] Bluetooth: hci2: command tx timeout [ 216.894400] Bluetooth: hci3: command tx timeout [ 217.084625] Bluetooth: hci4: command tx timeout [ 217.212632] Bluetooth: hci6: command tx timeout [ 217.213597] Bluetooth: hci7: command tx timeout [ 217.213623] Bluetooth: hci5: command tx timeout [ 218.556572] Bluetooth: hci0: command tx timeout [ 218.748461] Bluetooth: hci1: command tx timeout [ 218.812512] Bluetooth: hci2: command tx timeout [ 218.940406] Bluetooth: hci3: command tx timeout [ 219.133419] Bluetooth: hci4: command tx timeout [ 219.261397] Bluetooth: hci6: command tx timeout [ 219.261917] Bluetooth: hci5: command tx timeout [ 219.261970] Bluetooth: hci7: command tx timeout [ 272.718593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.723941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.730689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.738932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.742536] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.746889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.971925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.975221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.978122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.982818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.985860] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.987832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.166752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.173225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.178797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.193987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.196991] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.198915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.251888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.257727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.268191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.286820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.299807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.305683] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.310694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.329242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.339753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.364043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.402774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.412668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.416027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.420106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.422263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.424644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.424801] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.428777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.431725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.432363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.438675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.441276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.443382] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.446630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.448988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.453210] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.457470] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.470854] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.475714] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.476839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.812579] Bluetooth: hci0: command tx timeout [ 275.068465] Bluetooth: hci1: command tx timeout [ 275.260886] Bluetooth: hci2: command tx timeout [ 275.389567] Bluetooth: hci3: command tx timeout [ 275.517469] Bluetooth: hci7: command tx timeout [ 275.518556] Bluetooth: hci4: command tx timeout [ 275.581417] Bluetooth: hci6: command tx timeout [ 275.708797] Bluetooth: hci5: command tx timeout [ 276.860369] Bluetooth: hci0: command tx timeout [ 277.116580] Bluetooth: hci1: command tx timeout [ 277.308475] Bluetooth: hci2: command tx timeout [ 277.436503] Bluetooth: hci3: command tx timeout [ 277.564408] Bluetooth: hci4: command tx timeout [ 277.564856] Bluetooth: hci7: command tx timeout [ 277.629515] Bluetooth: hci6: command tx timeout [ 277.757448] Bluetooth: hci5: command tx timeout [ 278.908401] Bluetooth: hci0: command tx timeout [ 279.164365] Bluetooth: hci1: command tx timeout [ 279.356404] Bluetooth: hci2: command tx timeout [ 279.484455] Bluetooth: hci3: command tx timeout [ 279.612368] Bluetooth: hci7: command tx timeout [ 279.614209] Bluetooth: hci4: command tx timeout [ 279.677429] Bluetooth: hci6: command tx timeout [ 279.804538] Bluetooth: hci5: command tx timeout [ 280.956371] Bluetooth: hci0: command tx timeout [ 281.213247] Bluetooth: hci1: command tx timeout [ 281.404382] Bluetooth: hci2: command tx timeout [ 281.533198] Bluetooth: hci3: command tx timeout [ 281.660411] Bluetooth: hci4: command tx timeout [ 281.660440] Bluetooth: hci7: command tx timeout [ 281.724390] Bluetooth: hci6: command tx timeout [ 281.852590] Bluetooth: hci5: command tx timeout [ 332.157693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.158448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.212005] [ 333.212435] ====================================================== [ 333.213554] WARNING: possible circular locking dependency detected [ 333.214687] 6.13.0-next-20250124 #1 Not tainted [ 333.215536] ------------------------------------------------------ [ 333.222434] kworker/u8:1/65 is trying to acquire lock: [ 333.223400] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 333.225315] [ 333.225315] but task is already holding lock: [ 333.226400] ffff88802e380768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 333.228211] [ 333.228211] which lock already depends on the new lock. [ 333.228211] [ 333.229652] [ 333.229652] the existing dependency chain (in reverse order) is: [ 333.230987] [ 333.230987] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 333.232220] __mutex_lock+0x13d/0xb50 [ 333.233108] wiphy_register+0x1b2e/0x25d0 [ 333.234054] ieee80211_register_hw+0x23a4/0x3d60 [ 333.235080] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 333.236153] init_mac80211_hwsim+0x389/0x870 [ 333.237140] do_one_initcall+0xf9/0x640 [ 333.238066] kernel_init_freeable+0x53d/0x7a0 [ 333.239058] kernel_init+0x1e/0x2d0 [ 333.239857] ret_from_fork+0x48/0x80 [ 333.240668] ret_from_fork_asm+0x1a/0x30 [ 333.241602] [ 333.241602] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 333.242777] __lock_acquire+0x29fd/0x4580 [ 333.243704] lock_acquire+0x19b/0x520 [ 333.244562] __mutex_lock+0x13d/0xb50 [ 333.245441] unregister_netdevice_many_notify+0x1612/0x1c80 [ 333.246611] unregister_netdevice_queue+0x224/0x2e0 [ 333.247662] _cfg80211_unregister_wdev+0x57b/0x700 [ 333.248704] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 333.249765] ieee80211_unregister_hw+0x55/0x3a0 [ 333.250760] hwsim_exit_net+0x3a0/0x730 [ 333.251643] ops_exit_list+0xb3/0x180 [ 333.252500] cleanup_net+0x546/0xad0 [ 333.253342] process_one_work+0x8ee/0x1a10 [ 333.254323] worker_thread+0x674/0xe70 [ 333.255231] kthread+0x3ab/0x720 [ 333.256033] ret_from_fork+0x48/0x80 [ 333.256853] ret_from_fork_asm+0x1a/0x30 [ 333.257808] [ 333.257808] other info that might help us debug this: [ 333.257808] [ 333.259209] Possible unsafe locking scenario: [ 333.259209] [ 333.260271] CPU0 CPU1 [ 333.261103] ---- ---- [ 333.261962] lock(&rdev->wiphy.mtx); [ 333.262717] lock(rtnl_mutex); [ 333.263792] lock(&rdev->wiphy.mtx); [ 333.264941] lock(rtnl_mutex); [ 333.265634] [ 333.265634] *** DEADLOCK *** [ 333.265634] [ 333.266710] 4 locks held by kworker/u8:1/65: [ 333.267546] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 333.269458] #1: ffff88800cfcfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 333.271300] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 333.272999] #3: ffff88802e380768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 333.274936] [ 333.274936] stack backtrace: [ 333.275758] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 333.275840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 333.275888] Workqueue: netns cleanup_net [ 333.275977] Call Trace: [ 333.275998] [ 333.276023] dump_stack_lvl+0xca/0x120 [ 333.276149] print_circular_bug+0x47b/0x750 [ 333.276251] check_noncircular+0x2e9/0x3c0 [ 333.276346] ? __pfx_check_noncircular+0x10/0x10 [ 333.276441] ? hlock_class+0x4e/0x130 [ 333.276507] ? srso_return_thunk+0x5/0x5f [ 333.276630] ? mark_lock+0xac/0xed0 [ 333.276727] ? lockdep_lock+0xba/0x1b0 [ 333.276855] ? __pfx_lockdep_lock+0x10/0x10 [ 333.276993] __lock_acquire+0x29fd/0x4580 [ 333.277113] ? __pfx___lock_acquire+0x10/0x10 [ 333.277210] ? lock_release+0x20f/0x6f0 [ 333.277308] ? __pfx_lock_release+0x10/0x10 [ 333.277404] ? srso_return_thunk+0x5/0x5f [ 333.277537] lock_acquire+0x19b/0x520 [ 333.277666] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 333.277775] ? __pfx_lock_acquire+0x10/0x10 [ 333.277874] ? __pfx_lock_release+0x10/0x10 [ 333.277970] ? __pfx_try_to_wake_up+0x10/0x10 [ 333.278066] ? srso_return_thunk+0x5/0x5f [ 333.278189] ? lock_is_held_type+0x9e/0x120 [ 333.278311] ? srso_return_thunk+0x5/0x5f [ 333.278442] __mutex_lock+0x13d/0xb50 [ 333.278558] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 333.278658] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 333.278761] ? srso_return_thunk+0x5/0x5f [ 333.278884] ? synchronize_rcu_expedited+0x38a/0x420 [ 333.278981] ? __pfx___mutex_lock+0x10/0x10 [ 333.279102] ? srso_return_thunk+0x5/0x5f [ 333.279228] ? srso_return_thunk+0x5/0x5f [ 333.279325] ? kasan_quarantine_put+0x84/0x1e0 [ 333.279410] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 333.279459] ? srso_return_thunk+0x5/0x5f [ 333.279541] unregister_netdevice_many_notify+0x1612/0x1c80 [ 333.279605] ? __virt_addr_valid+0x2e8/0x5d0 [ 333.279678] ? __pfx_lock_release+0x10/0x10 [ 333.279741] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 333.279805] ? find_held_lock+0x2c/0x110 [ 333.279886] ? srso_return_thunk+0x5/0x5f [ 333.279966] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 333.280050] ? srso_return_thunk+0x5/0x5f [ 333.280126] ? lock_release+0x20f/0x6f0 [ 333.280188] ? __pfx_lock_release+0x10/0x10 [ 333.280248] ? srso_return_thunk+0x5/0x5f [ 333.280325] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 333.280391] ? srso_return_thunk+0x5/0x5f [ 333.280475] unregister_netdevice_queue+0x224/0x2e0 [ 333.280536] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 333.280597] ? up_write+0x195/0x520 [ 333.280673] _cfg80211_unregister_wdev+0x57b/0x700 [ 333.280746] ? srso_return_thunk+0x5/0x5f [ 333.280828] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 333.280881] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 333.280935] ? srso_return_thunk+0x5/0x5f [ 333.281012] ? srso_return_thunk+0x5/0x5f [ 333.281089] ? synchronize_rcu+0x1ff/0x260 [ 333.281148] ieee80211_unregister_hw+0x55/0x3a0 [ 333.281210] hwsim_exit_net+0x3a0/0x730 [ 333.281269] ? __pfx_hwsim_exit_net+0x10/0x10 [ 333.281326] ? srso_return_thunk+0x5/0x5f [ 333.281402] ? netdev_run_todo+0x788/0x1040 [ 333.281471] ? __pfx_hwsim_exit_net+0x10/0x10 [ 333.281531] ops_exit_list+0xb3/0x180 [ 333.281600] cleanup_net+0x546/0xad0 [ 333.281663] ? __pfx_cleanup_net+0x10/0x10 [ 333.281737] process_one_work+0x8ee/0x1a10 [ 333.281828] ? __pfx_lock_acquire+0x10/0x10 [ 333.281891] ? __pfx_process_one_work+0x10/0x10 [ 333.281972] ? srso_return_thunk+0x5/0x5f [ 333.282049] ? move_linked_works+0x172/0x270 [ 333.282111] ? srso_return_thunk+0x5/0x5f [ 333.282188] ? assign_work+0x196/0x240 [ 333.282268] worker_thread+0x674/0xe70 [ 333.282349] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 333.282421] ? srso_return_thunk+0x5/0x5f [ 333.282498] ? __pfx_worker_thread+0x10/0x10 [ 333.282581] kthread+0x3ab/0x720 [ 333.282653] ? __pfx_kthread+0x10/0x10 [ 333.282726] ? srso_return_thunk+0x5/0x5f [ 333.282803] ? finish_task_switch.isra.0+0x206/0x840 [ 333.282874] ? __pfx_kthread+0x10/0x10 [ 333.282949] ret_from_fork+0x48/0x80 [ 333.282992] ? __pfx_kthread+0x10/0x10 [ 333.283066] ret_from_fork_asm+0x1a/0x30 [ 333.283158] [ 334.537655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.543520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.546026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.551572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.557238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.559472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.661998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.664606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.669582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.673361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.675888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.678049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.858835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.860898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.864781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.874686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.887637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.891619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.938002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.944460] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.945809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.957650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.972613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.976807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.978869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.980926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.987426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.990126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.992407] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.995019] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.037083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.044928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.046143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.046750] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.054186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.066162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.075688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.086904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.093145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.104898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.106142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.118781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.209136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.231951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.278621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.312603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.340764] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.344631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.574320] Bluetooth: hci0: command tx timeout [ 336.700342] Bluetooth: hci1: command tx timeout [ 336.958388] Bluetooth: hci2: command tx timeout [ 337.084357] Bluetooth: hci3: command tx timeout [ 337.084566] Bluetooth: hci4: command tx timeout [ 337.276443] Bluetooth: hci5: command tx timeout [ 337.276464] Bluetooth: hci6: command tx timeout [ 337.468407] Bluetooth: hci7: command tx timeout [ 338.620535] Bluetooth: hci0: command tx timeout [ 338.749420] Bluetooth: hci1: command tx timeout [ 339.004330] Bluetooth: hci2: command tx timeout [ 339.132347] Bluetooth: hci3: command tx timeout [ 339.132379] Bluetooth: hci4: command tx timeout [ 339.326319] Bluetooth: hci6: command tx timeout [ 339.326392] Bluetooth: hci5: command tx timeout [ 339.516476] Bluetooth: hci7: command tx timeout [ 340.670302] Bluetooth: hci0: command tx timeout [ 340.796345] Bluetooth: hci1: command tx timeout [ 341.053684] Bluetooth: hci2: command tx timeout [ 341.180374] Bluetooth: hci4: command tx timeout [ 341.181339] Bluetooth: hci3: command tx timeout [ 341.372326] Bluetooth: hci5: command tx timeout [ 341.372590] Bluetooth: hci6: command tx timeout [ 341.564468] Bluetooth: hci7: command tx timeout [ 342.717353] Bluetooth: hci0: command tx timeout [ 342.844355] Bluetooth: hci1: command tx timeout [ 343.100380] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 22:26:22 Registers: info registers vcpu 0 RAX=0000000000057127 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e6feee5bd8 CR3=000000001587e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041197bc000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800cfcecc8 R8 =0000000000000000 R9 =ffffed100176b046 R10=00000000000fe503 R11=2d2d2d2d2d2d2d2d R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d2e66 R15=dffffc0000000000 RIP=ffffffff8283f125 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a0ed393078 CR3=000000000b652000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=bacaa9d0375b73b5f540effae3c39a3c XMM02=5d82995fcda3111200000000000fd7f0 XMM03=ee7587d5db12e8e300000000000fd8a8 XMM04=31501862e36e58f700000000000ae988 XMM05=f6016d1022f4ee78000000000014f120 XMM06=6098c19552daab4900000000001159d0 XMM07=a3797342f9eb3dd900000000000ffc50 XMM08=f61f520134a0d9c200000000000fd850 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000