Warning: Permanently added '[localhost]:1875' (ECDSA) to the list of known hosts. 2025/01/25 22:30:49 fuzzer started 2025/01/25 22:30:50 dialing manager at localhost:40883 syzkaller login: [ 69.697752] cgroup: Unknown subsys name 'net' [ 69.803022] cgroup: Unknown subsys name 'cpuset' [ 69.837093] cgroup: Unknown subsys name 'rlimit' [ 76.612571] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.689981] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 22:31:07 syscalls: 2217 2025/01/25 22:31:07 code coverage: enabled 2025/01/25 22:31:07 comparison tracing: enabled 2025/01/25 22:31:07 extra coverage: enabled 2025/01/25 22:31:07 setuid sandbox: enabled 2025/01/25 22:31:07 namespace sandbox: enabled 2025/01/25 22:31:07 Android sandbox: enabled 2025/01/25 22:31:07 fault injection: enabled 2025/01/25 22:31:07 leak checking: enabled 2025/01/25 22:31:07 net packet injection: enabled 2025/01/25 22:31:07 net device setup: enabled 2025/01/25 22:31:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 22:31:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 22:31:07 USB emulation: enabled 2025/01/25 22:31:07 hci packet injection: enabled 2025/01/25 22:31:07 wifi device emulation: enabled 2025/01/25 22:31:07 802.15.4 emulation: enabled 2025/01/25 22:31:07 fetching corpus: 50, signal 9347/10615 (executing program) 2025/01/25 22:31:07 fetching corpus: 85, signal 9926/12326 (executing program) 2025/01/25 22:31:07 fetching corpus: 85, signal 9926/13512 (executing program) 2025/01/25 22:31:07 fetching corpus: 85, signal 9926/14735 (executing program) 2025/01/25 22:31:07 fetching corpus: 85, signal 9926/15980 (executing program) 2025/01/25 22:31:07 fetching corpus: 85, signal 9926/17196 (executing program) 2025/01/25 22:31:07 fetching corpus: 85, signal 9926/18420 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/19611 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/20808 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/22038 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/23252 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/24481 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/25245 (executing program) 2025/01/25 22:31:08 fetching corpus: 85, signal 9926/25245 (executing program) 2025/01/25 22:31:10 starting 8 fuzzer processes 22:31:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40050) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x600, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1f}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x2c}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4880) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x54}}, 0x8040) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe229}]}, 0x88}}, 0x2000c800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008044}, 0x24084040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r8, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x40, 0xb, 0x201, 0x70bd27, 0x25dfdbfd, {0xc, 0x0, 0x3}, [@typed={0x14, 0x17, 0x0, 0x0, @ipv6=@loopback}, @nested={0x14, 0x6e, 0x0, 0x1, [@typed={0xf, 0x39, 0x0, 0x0, @str='NLBL_UNLBL\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 22:31:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="78b828ff897348f0ccfac9c94393e3a7e302775c57d77b43e3b32128dc4c729c930a18101e5ecded88103e7bfd8df22810f55b24c08636324fd1095590a291733589fc671dbdfab76a010d0547fd2e77a62ccb8c97c7fd517ef44a1b55f7aa3bbfc310d2f328b72c1697f8d2052970b3a782abc0476b05a90f9a7325d24680c73b1c9af5ab420c48e8321010e7ff29d1bee71aa6fe62bb1fa417cbccf6872d4f155b882836907dc31d9c1ea089f7a41eda7a", 0xb2) r1 = mq_open(&(0x7f0000000100)='^\\\x00', 0x80, 0x20, &(0x7f0000000140)={0x0, 0x101, 0x1, 0x4}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)) r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x18, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000600)={r3, 0x2, 0x5}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a00)={r4, 0x2}) r5 = syz_open_dev$vcsa(&(0x7f0000000e00), 0x9, 0x40) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = perf_event_open(&(0x7f0000000e40)={0x5, 0x80, 0x4, 0x20, 0x8, 0x20, 0x0, 0x7, 0x840, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x20, 0x2cd}, 0x48, 0x1, 0xd064, 0x6, 0xcf30, 0x8, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xd, r0, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000ec0)={r7}) r8 = epoll_create1(0x80000) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000f00), &(0x7f0000000f40)={'L+', 0x3}, 0x16, 0x3) r9 = syz_open_pts(r0, 0x88000) dup2(r9, r1) recvfrom$inet(r5, &(0x7f0000000f80)=""/120, 0x78, 0x42, &(0x7f0000001000)={0x2, 0x4e21, @multicast2}, 0x10) write$binfmt_misc(r9, &(0x7f0000001040)={'syz1', "6648371f92e50865d64c0d3813ceb3c726b00656a974ea3b1f2fb1f2ca1e7d85c51dbf9e6fb7b5c6fe60235040a5388cc5a31948e12c03fbd823e562f4d08a382ec38e8174c2ce3d8e62ca9dd11ec193474694288e533bd104bdcc729324d8f9a683bd086c99bc77a024aa1f3a0cfa6d6a417188cd6afa057dcce125eb93eb59114f365d82809ad105a74f2e7c951cee8b1412a36e1051fde77146bc7b860de4e1ff71"}, 0xa7) ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000001100)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001140)) 22:31:10 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @dev}, &(0x7f00000001c0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x160, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x178, 0x3c, 0x2, 0x70bd26, 0x25dfdbfe, {0x10}, [@typed={0x30, 0x40, 0x0, 0x0, @binary="8576be31a426911656a1d4784676f563b30d52f9d943a150069e9b333047672ede87f7ecf36bb06f4d3c4d80"}, @generic="7b332e77558e671660890532ae2094551f037f845bed8278d1b6a4a53ff1b0087d7fd845915454b823f233a3bf98bc422db4fcbceeb266b0da1cebd154b7ce6db194bc", @generic="0340c31dd75d90414218e4161f39761ac592a0531e02ae323cde05d90248dc9bbcc25a778cf1efff1f664ed5bfa93dcfea188047cf4ab19540b57fe0f9cbbce9e329fe5f15255e0e5443bc642c76b9afb138fbfec898aafdaa2c851155d4671a65d9645da238ef52fbb5409d67c5e0fa9f0d28dc35996daa24968e8a2f280df1e79f28e7383bfbb694537578c2950811663768d3e7a4ef7f6eb7bb621dc04569cf823edf9b8eb33f08ebf96e510f6036d2d1bae3a6b3c33f4587afc378e15f67cbbf23f3b335d7c08b3f8cb5530df3eec89dcffbd01f921733b212fca0429d8e9ee9308db3f6c6902925074431aa"]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000640)={{0x2, 0x3}, 0x1, 0xa098, 0x8001, {0x80, 0x7}, 0x8b, 0x6}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000055) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000800)={'veth1_to_bridge\x00'}) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000840)={'raw\x00', 0x0, [0x3, 0x10001, 0xfffffffd, 0x3, 0x10001]}, &(0x7f00000008c0)=0x54) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000bc0)={{}, r4, 0x1e, @inherit={0x88, &(0x7f0000000b00)={0x1, 0x8, 0x2, 0x8, {0x22, 0xd0d, 0x10000, 0x2, 0x323}, [0x8, 0x4d66, 0x2, 0x50000000, 0x51, 0x5, 0x401, 0x74]}}, @devid}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, 0x0, 0x1000, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "03a7cc1a23adb80c47bb4323"}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) fcntl$dupfd(r0, 0x406, r0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000001d00)=""/217) 22:31:10 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x600800, 0xb0) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200, 0x4, &(0x7f0000001280)=[{&(0x7f00000000c0)="efe63a000f9da29bab893400c0b5cff1faa18870d1a6d2e49788ddbd3e26504dec6ffcc2b7da1e3e6d0da7e195462e778297ed3c9e3fa33e38d2c5685e07788321c0ca2ae9371143a4fb5a5cdaf31fcca6c676ddf62ff1402107426851138be3820fb07db841beaf8c27b736a5c2320534b426db9d4ab6967f74aa50bee2146ffa", 0x81, 0xd20}, {&(0x7f0000000180)="cacbe10ef2733d839f4853b6ee82a8301eb095d347e4f167a07d", 0x1a, 0x401}, {&(0x7f00000001c0)="189c57d07cd4aa69de654dde08501db6e11d2712831ffae3b55cdeb54ed262cf3e90ce902b2b11a52d38dbc7ce0681756b031c667d10d06bc6016763f4efa48bd8be259c1394379412344bcb0099028d219418695c406c9a7e0433ee20aa677144af71278622ad0b76b8e4d5f34b86a55b2985c50b3ec738e9a32e05a9feaf73e7ff83d5bac30a4e13e221a4d7266522442897ff40c940498fd02b1e73b24850f321c7fbb42e27b369b0561da51f30631086f98892c625b7d780effa6f5792c621a9398ebdd281fe36466c02a9090d4f92a3b438fbd438ca967ec430f6a4edf68b7085595c473140cf5969222a96ca080999aaf6618bd60b41b29064c2a17a290b48b754d64486ab8ea4733601b9b3fd955fa785db0e914a937424ee820d97459a36509f5517470b130c425a05083944de4e9d9b370ecdf6fbe6b17c6eba076e94899b34e9cb956517eb9c927314156861fa4f70d731ed698739518832ad14a2df77a45c2d97ce06a80b9864584a49e316884214d40b115dac65598245010874e6268a573298e80713df760d5b01d039152fb4e4067fd96486ea2c546f4127d6043b568a63fc46a4bf991c3a34cf34ddd2e20802fbc3cbc94f143a8b1e66d400550b2881f8636cf79c6e09ccb8ae7de2140d18365174aca03da35313e43f503bc7143aa1759a14dc09ce50899854ab667aac304f83467e43847354c47e0489e9d5b06020d457bbc74c62b9d3cd14b4050c8e5768d28e85455a1acb2a6da77ce602ca13ce60785847e112e8cf3e40efabb494e8e9da7441ae4994085d25d0e94837528c203a7f6284e47e8fe29b1e4fdbb5787a03d466271d3c3b0d1bb7d9052d04b9cacb45829bccced5175ad84f64f5c0078a277b287b836287c1e736ba1a8873e4196e40e6b13f96882c2888c7777478038d07670303af087a426afc008ca9f73acbc7793e14ec99d2b62ded72ce486b1da4b3cbd097c5a9f3883de59b41788c430a8e24a9cf418133ea2ed6a40b3029dad133c0c09b569bca74b2ca672164e298e2d3f95bc2c0825e472b39496194635e147a6bb5e4a3ac34edc43be0a59f8741a7e47daaf9e8f4db91f9e3af679a70ce38f2e7f90f92473b5d292a5fdbd5af461c143b538cbc8bc61d75347af60f89b6030fa29942efc6a542de732c377a1b3aed44300cb51107b3b632f3efd9f3e2e248edac108ba43775e2518315485b236dcd50475b12b6c1b0720ed46bd69a8dab3ea5d9d6cc2f40f2c39a677095fe2b11a6df3ec2338f90a5e2c6ef70fff8d71180507d0edcac2547049ae390350bfd133776d2fd691a9aa50db57e1268eea346aba2f967a79c25ea5ae8db0214aebf0f79d24a99d63fd14157e0872e7f5800cf58de9a36077ba6dbb62f2fdf19f256b43103cba8c8af3511d8cfb49ba03794967de952d3c048aaaeb3b76c601f65d0bae97877b25aa33dc86f21946fbe77828f44a3a8497348fc2e67b05fb7afbca59850315654f1ab01500715d7a842efe3c87c6d88e8f3ca5fdfd901b484b6be24c35878a9b7754bbe162edb331e92b1264b89718baf4f39845c7835367cd9aea342021d4568d8d706f148b066371b54e97bd69fdecda06cd18ddbdfb55151d965a0799f1e321dad4128c202da561b4a9314fa815480707d2399020797d9b8374b6332bacfe093c12bb429a0b9326beb8477160cddfa1aa556a8c0c58f833f6da76e12f024953375713d4433373ff7d5b64936f4fac61d39c792298e9ba1b6f23d193e99c54c759d03d3043ef7a65391f5e4bb9906ce57d02a787cd5cf404498725f5ef62767c05a1a60dba1293ba98b82756eb4480e780396c60654bcd5e74bbb8c1e684c778bf47ce65d3d546be7d99776cb10f1f2aa8d767503d27cf90d2587c69b76c94aa87529a70a124a1519191d383ec42e8e5b2180abda69bbd8be19f3ce30071b8497431516555be49e17497ddc35ea1754fb1f12631a730f410dca9b068f11f36b892c33ee020f59ac60da9069b01c396121e3528407352f12d1378480582b8d09917831d9cbf5f670cd9a199450decb5b84ca370d06adb5018e8f5951c85e67efb0dc56c8b79530661ecc19e514ebc7f1c4736835d7aca3cd3d23e65d2975b72e55addfa95918fe9a9a8d03bd69bba7a2f89be5086de7ce2db151a52d5b8e966fe9f176382efae7382ee8df1d02585dcf03e6457549b6a33eea699afb47b84d1f4e4945eea68d833b2de81a146bb89f54f332d032168c1d6e5d3e8dc97a96b9b9a1e09e4f45b76e1d30a1bb04afee498a935324dc5e77736a7be9d406b1b677883198eaf0cc6fd9795040a93772d9508fcd94727cc6b513945bbde1cd0d8b3e0800fc701a78f21c5231f093187317f9e736e90c0cf0b794106b849ee9e159d4aeade0fa81603b54c1c3f8820ef1e4dadc4316d4aa0e0272cf1e71dc1cb19647a3338bbb80be6ce4d056780a2ff1a72b085c826a31a86de6823f846d9385321ee59e069c2a37b202bf17d037e1de7ef628ac7846e1b0f0f2b6d1e5f13578399c3a63244f0fa827193a1936c9bc393988b1153f9936febd7e27a5d657f20e26ed904474238aa880f69b13a0b3d1f0427f6a5815dc6e7c412f392e6a0258ad300515f1f705d4710e337000532349638164108acc591b2515f8b3b6a2001afad7550ae4aeb4ff7d87b31cf5fe5f42baf9c4ef8cc85ef1448944c1c50ccdc7a0bf50db844a7ad0ba1b21fb6df334acdeff7de995777274edf5eb2977b8b62e8e3d62a25c5f90171f3acdae2a88bdddad10e72fd02e8cd5ea1b1312dbb7c7b3150d687220582c2a05f3a18a199b4d1206c8ea42c345efd6f4cdadf29bf27e9940e513b5348f706d410119465cd0ed1db0be9440c9f18aa36066c4d4f69c51900c6b8787a0de5212d7a761bf50eb794114449521049b3256bc5e28a8c97387911aa029398e6c0751cb2f249df4bfbc6bded518b104ada9fb364b4e33befafddc47a770d41837bf36877adcc9c732286c1454d3feb0d60072bb403ce4c2a5807fd7f9f14e02000588160c4e279b96c0027358a658f02924fdb620c59d8690f9a6fb08181339d1b6057ec7c572aadf2038803f13440d547d915cd7897e3afbbcae4297b81fca34c6b82c5b131ccb33bd661cd8c7f6f5813bef8e93a44998fe8e6e93249919c8bb1e5944c495645385ef3a8c669d360693d5f2e01987fc47fa695b9d44d1eb3e346068c81020dee22e0af1b13acc499e419c6124d61284cbfbb9ce77846d4120c372eadeb42888cc79aa4374e748ca9d758861154a7780302d072bd75ce7c8acc01bf0c2a12f7f20d3a2793946a886bbf89db0beb2b163216152419efcbab7b7a0d8e1ad390b6504f6dbdc5b3dcf1d4d5f1970277931aeafb868a0a6b18f372200e5a999d57a551a8b61b9b860ab078d9b3603469434f4fdf388cf2960e9ebcd14b4cc7eacbcd93e3961eae87a727129153f3347ad01f4ddad38ce698554053b1228eea08f4889d15e441f30a7a743eb234febce240fc9bfcb4db83e72e2aba4aa80b97742b09a47f7414967581425e227ac62e289855b71204c90f9dd41218080638f0d0115f4ef7ca6475a1a2d6662b1a84e5db43a9797995d992f14dc29a82f58bc9bf2843c0d88d867df5eb43e70ad995d06f2c7043f942cc050dd596923ca9f8e54b6d4901c7e3f0df4c29eab0e9b9610bd7093ca729e6de35f4cfbdd152c65dfb1d7f90e340e7e0200333c84a842443848720d01025686e848e2c46ffb9f72f1178839829929fa7de43cd293d25456a207c27d44c8a21d7c5ae199397395ed02326a3228b3b95e66a54212ed99770fea18cce07ad33b16a891594f8ba9e84cc7ad2477c92605194d233c8305db3c85e42fdc740a2f52dd1c1921f5a943f0ac66f81c4cab5f80cec010e5cbd3d5c8a836da3ddf362a419d3c51806b4df6982d2b2aa8fb303a9259cdcf0d214f76fd12c067977f4ff0ac2ae9df1339f89b296ad4a971d105ca54007a72f60ad2aae41fe74f403b1c3a9bf66b8c78787dfa8e06dd219c571b8a2fceb826ee135ffdf8bd7fa7dbb31c8a86d9dd52c5aedddf6e035e20dd4f76f97c901f1d2c959a1eb28d8ab5c45cc409eeddf6866d745d471b2d23ed70fada7aad99fbd090ac62e58301873b8f0969afa055d2d9cc047e53ee44184337429d186b1c56c2036754321145abb4e3ce538905fbfd625ff9c98d7158bd232332e570af1871e660769ceac2597341ded227818ea6c0feb274a505c1e51fb9aa318f96910b967cc42883457af4f2fb2d11499ee84ff821f9d199e7899527e396161d6f8b2b86b7c3f1956336cb75d92b9cd8dd7360c35224135d629fecb24faf2151ae34cb5b918656251ceb1538f9b93b90d1180c3eec55a2af7c2b9d9629ffda82137ce45ec3a09e5aa4a7f1e966a7f7c83bd6bfc896680f93e06088ca80bcd0a29831cd33f8802c118e87bd61125a75e60f5616bf33fa553eca776f287c3a006a4ce156bc553bace50ae0783415b4753a6fa76dead829f9cf2c8412553d102025e7efae49957777121aeafe0289d701b43c864e7ca3bee07d8197f0f782adf202610808fb309fe4a20cd1aaa12f3125343bf7976053aad0723c5cb371fc7a616c507c0c8bfcd14646f95b63ede136eefa31b40d667815fe9b18327d265d2d55c403fc4ef43a33e66a10f674aef3c310ea598534bce0064e9a7eaffd799951f5c3def7c08400d62aef99e7831b8ec3ba50a38c50e47c87309a16c8510e5545649b119fd91d23b8287777256278d3083504c4b1b936de2fee94f3d2d21b9162d8325a95a38fd6b7b88691f321ef62000cc04fc31bad463178c73bf95c67d3e35f3f3b0fd088b53dcc0022e95ebe69b8563a05424de235cdb8a77311be9ad16dcfff693d6094d8ec89f7c8e904b931f02caaacc1cd000e435457811e481fe0d84dfa31cca56ca83859ff300e22a6bbdf72fbf13eff8f69a5fd2bbd3af49712290ca0e1d5f268f0000db5f63de3ee0005e4110da54fe557014f9a353e74a72424d406654e0bd069e06a31ad5edd320a2b80dfcafefab05433fd74dc69b398d126a8819971f61b1d57a3395dd7223e586c78765284b7bf36747b2fb07f063cc5c05350e1af22cda9a40b76150aba4c3b668f02836097fa17f5510f010d4c450eea26a490ef3870f9d0c451cbbf47ac472e3bb5a5bb58f6b4e9151a257da5709f8351bbf51a1eac339d5794b3503255200e743057484ebddd57ec492cc07f87be433a6ab7eaa11183d3275d4e64fa2542c9360bd62806f6fde8806a5750b485760193c5dc7af4c5803b55e3de3e805b7955bf5c51478bd866fe7623769f379ee0bb49bedd47fb54ca158a080c366e0a4c87637b474fc0cb92eacf3a3a089321ff202bcc00bbeee45ccf146a843340fd7e25d8108db4caae8f4a5eebc89d5560e0fc2ee1e8d2fa2a4f38d50a45860ae3c9f75ae37931d249c6eec9df9511481fb9b9d8c8f35e10b4907dbb758b146ce872b3bb8504ef159ae2a84023a992311879912b93ffd155d22efd5f620676bb40081fd4802ac5ac1977486b4301c838e0fd3cf219ad663f59ccded8ae02a899343459d3f54746ff9b3464376d5c045f879b84a985d03165727506cf646e8e385390f448ff1b70207f4071671b2f21808b881afb91a17ab7dcaeb66e115d7840168583c2e289f7273bf7f80390dc3ba5533fd994fb6c21d0411632fe990dd45ea05636f64f012b2a302182bcfd19cbd040771c87cdb8a8e499b71be198243fc2c4112bcbd78dce", 0x1000}, {&(0x7f00000011c0)="cc5220d6cb2009dc322173e7e8498ef9ea44114052f81f20e76163cf4d6493443a1e1c0cd5973cb96c99c349d3a4c01d790049249dcae66d424468b5e017f0b300bc900c46ba21d310bf7e7a4dd9ed8286c43b43fa71f591f982aa052b713ccbba0e8d66b1a16df220e0ca701a81c81a2407914c75b3449e642676cd480d892d08e45ef587aab5a4", 0x88, 0x100}], 0x40000, &(0x7f0000001300)={[{@size={'size', 0x3d, [0x2d, 0x37, 0x6b, 0x16, 0x4e, 0x25, 0x78, 0x36, 0x38, 0x32]}}, {@gid={'gid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x37, 0x2c, 0x32, 0x39]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x7f, 0x65, 0x34, 0x74, 0x78]}}, {@mode={'mode', 0x3d, 0xda}}, {@nr_blocks={'nr_blocks', 0x3d, [0x36]}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x34, 0x42, 0x65, 0x78]}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, ']!'}}]}) r2 = syz_mount_image$nfs(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x6000000000000, 0x4, &(0x7f0000001680)=[{&(0x7f0000001480)="d1e3db35b7c3d69dd884c1951a9fc46aa7b83afa17d96343c14b253ea6a3ae19b6f388", 0x23, 0x198a000}, {&(0x7f00000014c0)="04f652806383dfa92fcb2c19bd86fe3c3a597ac7291c482dfbdc651136c39f9b6d5863bb48c4fb1357cb04acdd7d088c533d4a9e72d33b28381e386ecd86fefc43d9bf10bce9bb40962c4a0b39db1da92c54b46967eab991e0ec112d90bd1d5b227c1f6b640f2ce29f792e053fc9d8ad9b4d98f049e3b229f04abc88877b9f78bd8a353c0e71417a5c67a60a90949421aa21ba6ff719948cd1e05bc3da1201914b5daf35576e3c9af3bc862b3d09877012ef478fb1321e8b75ab", 0xba, 0xfffffffffffffffa}, {&(0x7f0000001580)="525e60d4687714d406d7ef337af711a5371267318dd0e928f63091fc4029eff31f486f7af1e1f3aaad1cfe4e873887b47a5cfa1790d9ac675e160bace9e716cf970a7972995a2bfe9dcdd2e0bf6439", 0x4f, 0x3f}, {&(0x7f0000001600)="c69d0e4f7f80e64085ec03f5d756bb628e077f29e48065de72e58462e903a4a341b7f17ce22e0321865727a0dc20862ea6e32372f012a683189a5d34010ddb8456d1381f434925931bca3bd9a58dd81da3aa067f11fe767281e39e3e85faaa593cffa78cc3481960106984d8e79c098a22fb40", 0x73, 0x100000001}], 0x200800, &(0x7f0000001700)={[{}, {'[.:#@'}, {']!'}, {'{/]['}], [{@fsname={'fsname', 0x3d, '.)@'}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001780)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) mount_setattr(r1, &(0x7f0000001740)='./file0\x00', 0x1100, &(0x7f00000017c0)={0x100081, 0x100002, 0x40000, {r3}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001800)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001840), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001880)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) sendmsg$sock(r3, &(0x7f0000001b00)={&(0x7f0000001900)=@can, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)="2fda6ea51b7f56d92ecaa79952dcc5ae06197caf19168663fe833cc00020ba41f8ef823f81661e93a795acad2f16fe8bc9548c147d7bc883ad8b2154e286", 0x3e}, {&(0x7f00000019c0)="02ba8f70d6ba5eba0a9e6d9c21a6dc01aa7761e06473eb8570b17bc4fb2d80c4d7977df237b7cfcfdb58a5af39f8ea93fbc3de6246a63af2fb5d672234f7517a8c19088964d9059ea4e2f6d320f2d3c3590883fbdbaeabc57fbb594e3ed6044cdfc07b0b6360daadf9b60f157a6c9cb9d3288fa09123ec14bfad5bcaa71a3f4d769f3800ca9771128b3595a8bf1fdc5c2272a9577502a27a13848d3872942306d52b487b41cb7c0123b78b1f65cb1466b194512d65734c24736229e1c2a49fa5ac63d8b842be298c5e3abedac203f845af035225805dc9beb22d909df6800666f7955f", 0xe3}], 0x2}, 0x14) setxattr$trusted_overlay_origin(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), &(0x7f0000001bc0), 0x2, 0x5) r9 = syz_mount_image$tmpfs(&(0x7f0000001f80), &(0x7f0000001fc0)='./file0\x00', 0x90, 0x1, &(0x7f0000002100)=[{&(0x7f0000002000)="d878f1f7139b8acf13513189ca718d4c0458cbea684eeca1ce46c8b47f94df5e6423811c5d824d8cd1a94e70d6788e1ac73c127926202a5839a8a6f72ec1122e93a05904d7cb0313c41420132730e6551072bf5ecc47556fb8b45632e4e5cbc462cbf4573bdb58ad3a68bbaad02bb6d74db711894bece98234590390645fa7c11d23b547af097b5a13cfe167ccc8f26d201b29df89419d833f7b0a0ddbe4302406330803271c67cef0a04d9f7636bb10f3bd62e74a86c58bc05bc312e151aceb5ee657202d14b7e48e67", 0xca, 0x4}], 0x102000, &(0x7f0000002140)={[{@gid={'gid', 0x3d, 0xee00}}, {@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x32, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x65, 0x31, 0x30, 0x34, 0x70, 0x70, 0x36]}}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x67, 0x32, 0x39, 0x39]}}, {@huge_within_size}, {@huge_advise}, {@mode={'mode', 0x3d, 0x7}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@measure}, {@context={'context', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) write$binfmt_script(r9, &(0x7f0000002280)={'#! ', './file0', [{0x20, 'audit'}, {0x20, '\x11}}{)'}, {0x20, '{/]['}, {0x20, '!^'}, {0x20, '-'}, {0x20, '.]\'\xb7'}, {0x20, 'huge=never'}, {0x20, '=static'}, {0x20, ')'}], 0xa, "764e38c836692d00e1d58409137c1f671ac6ccc653e55f498e102565a3ef1a89ba4849665185ee1fb10d07022640130508380bc3b26c86dfa90811f4daa84462157623698333b9e5cd8df1130c2ad0c863f3452f6c443e835d27b51da8ae7e2a337a8f9282345b7893b7366b893d18ea2baaabd00734349aa17196050c17887beeec2b0589cbdac2dbf7fdf0"}, 0xc7) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002380), 0x3e3400, 0x0) r11 = syz_open_dev$mouse(&(0x7f00000024c0), 0x1000, 0x451000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000003640)={{0x1, 0x1, 0x18, r9, {0x3ff}}, './file0\x00'}) io_submit(0x0, 0x4, &(0x7f00000036c0)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x6, 0x1, r10, &(0x7f00000023c0)="d4f12fcfc4ace022a3a233a79485cc947092a5432fd25fc5fa2fa3c2d10defb0e72ce5199f1c496921b584f786eddffe6aae4c3805b5360084e50e348fe89f508baa57319c681c0396f61e1bb81afe62e187c0f82603b082709989da3cf762ea2b7d92c11e8ec0b8f6c978e110731ad06008005af09d71d7a2e6670b938aa0bbc7265bc00a627501", 0x88, 0x81, 0x0, 0x0, r3}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x6, 0x6, r11, &(0x7f0000002500)="51b97057e33681ab92208e868ac5bea91fcad97bf6bcc8f90f8738954a6ab51547f8cfdfa64c851408c2f0314c5ccbdb5f769f1edbcafc3d68420cd5a4e93f9822fde1", 0x43, 0x4, 0x0, 0x3, r6}, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x8, 0x20, r7, &(0x7f00000025c0)="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", 0x1000, 0x3c5d}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x5, 0x6, r8, &(0x7f0000003600)="35575b3970e766a5e19f7644d23134bb79d665908a0d70bef0a528a1bfbb448056c5612e71011c68cba90964c7f251b4d0cdca74dff5", 0x36, 0xfffffffffffffbff, 0x0, 0x1, r12}]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000003700)={{0x1, 0x1, 0x18, r8, {0x8}}, '.\x00'}) pwritev(r1, &(0x7f0000003840)=[{&(0x7f0000003740)="30aa094fd2f8ea59dfde4c413f302939c031bbb6780de25a1a3079d35320a89f5a3c9d84b0c17f9c5acaad8c4eb81abca6fd78d79a2b66a4711c287903dabe3185db267d9b235d451b20282a886ecfe1796dd75137cb0265d204a731474221c91065cfbd76789210bca10dc114bad7d055ffe1d7f7491db8405a0eafe26b818fecc6eb64d043ea5393d1764416987372c5fb45ec212284a54cd8e8e936a251308d52df104d5567a5a09a4bfb1c48ed37e21e32af9c144f1e3a2f7aed73d16ff081a3ea78ed087269797cd8b3891c595ea36b54f81f5bd9a2d566", 0xda}], 0x1, 0x2, 0x0) mkdirat(r0, &(0x7f0000003880)='./file0\x00', 0xb997c4c5497bc8cf) 22:31:10 executing program 4: shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/122) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001480)=0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001540)=""/63, 0x3f}, {&(0x7f0000001580)=""/13, 0xd}, {&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/65, 0x41}, {&(0x7f00000017c0)=""/98, 0x62}], 0x6}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/187, 0xbb}], 0x1, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001b40)=""/224, 0xe0}, {&(0x7f0000001c40)=""/84, 0x54}, {&(0x7f0000001cc0)=""/217, 0xd9}], 0x4, &(0x7f0000001e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}], 0x3, 0x40000121, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001f00)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01, 0x4, 0x7fff}, 0x7fffffff, 0x3, 0x1, 0x0, r0, r1}) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000001f80)=""/26) r6 = shmget(0x1, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) r7 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000001fc0)=""/89) mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000, &(0x7f0000002040)=0x8, 0x101, 0x4) shmat(r7, &(0x7f00008d1000/0x3000)=nil, 0x2000) shmat(r7, &(0x7f0000fff000/0x1000)=nil, 0x2000) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000002080)=""/87) shmctl$IPC_SET(r7, 0x1, &(0x7f0000002100)={{0x1, 0x0, r5, r2, 0xee01, 0x11, 0x1}, 0x9, 0xfb84, 0x1, 0x75fb, r1, r0, 0x7}) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000002180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x0, 0x80010, r8, 0x8000000) shmctl$SHM_UNLOCK(r7, 0xc) [ 90.086754] audit: type=1400 audit(1737844270.862:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:31:10 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x430800, 0x24) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x80, 0x4, 0x3, 0x6, 0x0, 0x484, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffff8c18, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x50, 0x8, 0x1, 0x8, 0x4d57, 0x9, 0x9, 0x0, 0x40, 0x0, 0x10000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000240)={{r1}, 0x0, 0x1a, @inherit={0x78, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x1, {0x10, 0x8, 0xa3, 0xfffffffffffffffd, 0x100000001}, [0x1, 0xa4a7, 0x1, 0x20, 0x7ff, 0x3]}}, @subvolid=0x7fff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000001280)={0xd0000011}) r3 = fspick(r0, &(0x7f00000012c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000001300)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001340), 0x2a0400, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000001380)) r5 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$int_out(r3, 0x5460, &(0x7f0000001400)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001440)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001480)='net/dev_snmp6\x00') recvfrom$packet(r6, &(0x7f00000014c0)=""/81, 0x51, 0x40000062, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000001540)={0x5, 0x6, 0x8, 0x40, 0x200}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001580)={{0x1, 0x1, 0x18, r6, {0x144}}, './file0/file0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f00000015c0)=0x3) r8 = syz_mount_image$msdos(&(0x7f0000001600), &(0x7f0000001640)='./file0/file0\x00', 0x0, 0x2, &(0x7f00000017c0)=[{&(0x7f0000001680)="de073f804a5737516e680348341a634d2ae8af0beee550292606c24829ea90414d566cb7d04a5c0dc2e78ca32a3c80", 0x2f, 0x80000001}, {&(0x7f00000016c0)="2f66973cae11902287848b5e1af807be7b6f38783ea1ab533bb40c8ec296bcd80e5cfcefb3bc2342ea9c564afbe42f7f84cd38d3d6e2529534a65feeaaab257272bc741179f545803f4f3b5e53aabd23df4bacc0e720730c444b9c9b453a925541bb1a27da831dc6411ac290c947a810163bb52e6b28fe325300b1227abf13a803a84a6a4c6a86879e0a1fed5a130cace306fba992554708dc624dc9bf2f5bd6c90e38e5b026320b9f6285e141ed95231e06396dd417f7b344e7cd82e8ed9355359848fdc08ffce5cdca124dc5", 0xcd, 0x7}], 0x20010, &(0x7f0000001800)={[{@nodots}], [{@uid_gt}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfstransmute}, {@audit}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, 'net/dev_snmp6\x00'}}]}) linkat(r8, &(0x7f0000001880)='./file0\x00', r0, &(0x7f00000018c0)='./file0/file0\x00', 0x0) 22:31:10 executing program 6: modify_ldt$write2(0x11, &(0x7f0000000000)={0xfffff732, 0x1000, 0x2000, 0x1, 0x2}, 0x10) get_thread_area(&(0x7f0000000040)={0x40, 0x100000, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0xfffff018, 0x20000000, 0x1000, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}) get_thread_area(&(0x7f00000000c0)={0x101, 0x0, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x60, 0x1000, 0x1000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) set_thread_area(&(0x7f0000000140)={0x4, 0x20000000, 0xd4e466a94dc92afb, 0x0, 0x2}) modify_ldt$write(0x1, &(0x7f0000000180)={0x3, 0x1000, 0x5000, 0x1, 0x0, 0x1}, 0x10) get_thread_area(&(0x7f00000001c0)={0x401, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000200)={0x6, 0x20001000, 0x400, 0x1, 0x3, 0x1}) modify_ldt$write(0x1, &(0x7f0000000240)={0x6, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) get_thread_area(&(0x7f0000000280)={0x80, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}) modify_ldt$write(0x1, &(0x7f00000002c0)={0x7, 0x1000, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) set_thread_area(&(0x7f0000000300)={0x4, 0xffffffffdfefefff, 0xffffffffffffffff, 0x1}) get_thread_area(&(0x7f0000000340)={0xfff, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}) get_thread_area(&(0x7f0000000380)={0xc8, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000003c0)={0x7fff, 0x20001000, 0x4000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000400)={0x1ff, 0x20000800, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000440)={0x600000, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) set_thread_area(&(0x7f0000000480)={0x5, 0x1000, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x6, 0x20001000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) 22:31:11 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x8, 0xff, 0x2f, 0x5, 0x0, 0x3, 0x58, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9edd, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x8000, 0x7fff, 0x6, 0x6, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x100}, r0, 0x6, r1, 0xf) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000100)) r3 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000180)={{0x0, 0x2b, 0xc7, 0x1, 0x1f, 0x4, 0xfffffffffffffffb, 0x1, 0xbb, 0x800, 0x7, 0x6, 0x5, 0xffffffff, 0x3}}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001180), 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000011c0), 0x10d200, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x6) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xc926, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x40000) pipe2(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000001380)={0x6, 0x4, 0x2, 0x1, 0x3}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r4) accept4$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001480)=0x14, 0x1800) accept$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000001640)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'sit0\x00', 0x0, 0x4, 0x2, 0x20, 0x8, 0x56, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x80, 0x81, 0xa}}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001740)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001880)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000001980)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000001f00)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f00000019c0)={0x4cc, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "8fa71194833f7a2270ee46fa6491769936d8a5f2d3eef618820b6074aaceb66bf9467f520792ae6b23bc26ffcf69a23a4c6b451f667ae6de3736b580bf092cb8abb16373f1c56d7c4fc393d99ecbea28ce5148449bf5a65190a69dc15f9a06dc5d10"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'cgroup.type\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x24c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '-[.-]!%^\']&.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "5e0c47a327a2baf6c14ca8cc913da6733d3b54cbec82803b9f6a48f625c54a26f46261b81707e697f055bf58018c6956c9a81fe2004dd818c5bd0b7b95c501cb26948b256a9f1f385276707ae8fff830edbfd0aadbff61c60d3104abafd5e600c1002fad523ef85e6a81e78e2d4858025ff284e76ca56620a50ffe0a"}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "2347a8192dd1b968208fe0c7c3e213ddef57b5669f1dbd73a194478d26bf82bb9bef4dc3bf18d81353d72f64b6c673a70771de9d90d91105579b72f23872194fbe2c6feeab7bad74b9c3d311830e275f44462a0e5f1ab375ea002c3b84a94df4562667ab5ccfcc706d1d1602efdeaa69bf313846fd7209d8858eb7639ebb9e32fda35e7426f9d6e0a25362c3a73e8159fdef3b9f4d1309afe7e8a31d18dcb53bed9db8707d11b86526024262a942c461e5ee7993d68fffbba38a366ffffe24"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4000001}, 0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000001f40)={0x2}) [ 91.611530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.616015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.620316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.625771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.629262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.632249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.665922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.669203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.672008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.683989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.687373] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.689194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.814854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.822218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.824082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.834670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.840061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.841911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.849981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.852989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.867342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.873608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.875121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.879255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.881293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.899579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.903098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.927144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.964873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.967097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.969124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.970896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.990179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.991884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.000293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.005029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.006999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.010807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.011049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.016192] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.018528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.028066] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.049633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.051742] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.053086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.101951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.123579] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.144350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.698004] Bluetooth: hci0: command tx timeout [ 93.761681] Bluetooth: hci1: command tx timeout [ 93.953529] Bluetooth: hci3: command tx timeout [ 93.954560] Bluetooth: hci2: command tx timeout [ 94.081522] Bluetooth: hci6: command tx timeout [ 94.081575] Bluetooth: hci4: command tx timeout [ 94.146519] Bluetooth: hci5: command tx timeout [ 94.273853] Bluetooth: hci7: command tx timeout [ 95.746604] Bluetooth: hci0: command tx timeout [ 95.810723] Bluetooth: hci1: command tx timeout [ 96.001544] Bluetooth: hci2: command tx timeout [ 96.001579] Bluetooth: hci3: command tx timeout [ 96.131461] Bluetooth: hci4: command tx timeout [ 96.131962] Bluetooth: hci6: command tx timeout [ 96.193668] Bluetooth: hci5: command tx timeout [ 96.322701] Bluetooth: hci7: command tx timeout [ 97.795455] Bluetooth: hci0: command tx timeout [ 97.857558] Bluetooth: hci1: command tx timeout [ 98.049514] Bluetooth: hci3: command tx timeout [ 98.050141] Bluetooth: hci2: command tx timeout [ 98.177677] Bluetooth: hci6: command tx timeout [ 98.177710] Bluetooth: hci4: command tx timeout [ 98.241598] Bluetooth: hci5: command tx timeout [ 98.369674] Bluetooth: hci7: command tx timeout [ 99.841492] Bluetooth: hci0: command tx timeout [ 99.905675] Bluetooth: hci1: command tx timeout [ 100.097508] Bluetooth: hci2: command tx timeout [ 100.097532] Bluetooth: hci3: command tx timeout [ 100.226252] Bluetooth: hci6: command tx timeout [ 100.226580] Bluetooth: hci4: command tx timeout [ 100.289680] Bluetooth: hci5: command tx timeout [ 100.419612] Bluetooth: hci7: command tx timeout [ 149.890260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.891028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.084645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.085314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.411513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.412170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.422350] [ 151.422585] ====================================================== [ 151.423110] WARNING: possible circular locking dependency detected [ 151.423638] 6.13.0-next-20250124 #1 Not tainted [ 151.424044] ------------------------------------------------------ [ 151.424865] kworker/u8:0/11 is trying to acquire lock: [ 151.426293] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.428414] [ 151.428414] but task is already holding lock: [ 151.430225] ffff88803acb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.432714] [ 151.432714] which lock already depends on the new lock. [ 151.432714] [ 151.433400] [ 151.433400] the existing dependency chain (in reverse order) is: [ 151.434047] [ 151.434047] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 151.434617] __mutex_lock+0x13d/0xb50 [ 151.435029] wiphy_register+0x1b2e/0x25d0 [ 151.435471] ieee80211_register_hw+0x23a4/0x3d60 [ 151.435942] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 151.436440] init_mac80211_hwsim+0x389/0x870 [ 151.436903] do_one_initcall+0xf9/0x640 [ 151.437326] kernel_init_freeable+0x53d/0x7a0 [ 151.437788] kernel_init+0x1e/0x2d0 [ 151.438174] ret_from_fork+0x48/0x80 [ 151.438555] ret_from_fork_asm+0x1a/0x30 [ 151.438988] [ 151.438988] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 151.439527] __lock_acquire+0x29fd/0x4580 [ 151.439953] lock_acquire+0x19b/0x520 [ 151.440351] __mutex_lock+0x13d/0xb50 [ 151.440754] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.441302] unregister_netdevice_queue+0x224/0x2e0 [ 151.441790] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.442290] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.442778] ieee80211_unregister_hw+0x55/0x3a0 [ 151.443241] hwsim_exit_net+0x3a0/0x730 [ 151.443650] ops_exit_list+0xb3/0x180 [ 151.444049] cleanup_net+0x546/0xad0 [ 151.444442] process_one_work+0x8ee/0x1a10 [ 151.444889] worker_thread+0x674/0xe70 [ 151.445311] kthread+0x3ab/0x720 [ 151.445682] ret_from_fork+0x48/0x80 [ 151.446068] ret_from_fork_asm+0x1a/0x30 [ 151.446497] [ 151.446497] other info that might help us debug this: [ 151.446497] [ 151.447155] Possible unsafe locking scenario: [ 151.447155] [ 151.447653] CPU0 CPU1 [ 151.448048] ---- ---- [ 151.448437] lock(&rdev->wiphy.mtx); [ 151.448787] lock(rtnl_mutex); [ 151.449292] lock(&rdev->wiphy.mtx); [ 151.449845] lock(rtnl_mutex); [ 151.450174] [ 151.450174] *** DEADLOCK *** [ 151.450174] [ 151.450676] 4 locks held by kworker/u8:0/11: [ 151.451068] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 151.451958] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 151.452811] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 151.453608] #3: ffff88803acb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.454511] [ 151.454511] stack backtrace: [ 151.454895] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 151.454932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 151.454954] Workqueue: netns cleanup_net [ 151.454995] Call Trace: [ 151.455004] [ 151.455015] dump_stack_lvl+0xca/0x120 [ 151.455073] print_circular_bug+0x47b/0x750 [ 151.455120] check_noncircular+0x2e9/0x3c0 [ 151.455162] ? __pfx_check_noncircular+0x10/0x10 [ 151.455203] ? hlock_class+0x4e/0x130 [ 151.455234] ? mark_lock+0xac/0xed0 [ 151.455274] ? srso_return_thunk+0x5/0x5f [ 151.455329] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 151.455375] ? lockdep_lock+0xba/0x1b0 [ 151.455432] ? __pfx_lockdep_lock+0x10/0x10 [ 151.455494] __lock_acquire+0x29fd/0x4580 [ 151.455548] ? __pfx___lock_acquire+0x10/0x10 [ 151.455591] ? lock_release+0x20f/0x6f0 [ 151.455635] ? __pfx_lock_release+0x10/0x10 [ 151.455683] lock_acquire+0x19b/0x520 [ 151.455726] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.455775] ? __pfx_lock_acquire+0x10/0x10 [ 151.455820] ? srso_return_thunk+0x5/0x5f [ 151.455875] ? lock_release+0x20f/0x6f0 [ 151.455918] ? srso_return_thunk+0x5/0x5f [ 151.455973] ? lock_is_held_type+0x9e/0x120 [ 151.456028] ? srso_return_thunk+0x5/0x5f [ 151.456087] __mutex_lock+0x13d/0xb50 [ 151.456139] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.456184] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.456230] ? srso_return_thunk+0x5/0x5f [ 151.456285] ? synchronize_rcu_expedited+0x38a/0x420 [ 151.456330] ? __pfx___mutex_lock+0x10/0x10 [ 151.456383] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.456437] ? srso_return_thunk+0x5/0x5f [ 151.456492] ? kasan_quarantine_put+0x84/0x1e0 [ 151.456553] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 151.456588] ? srso_return_thunk+0x5/0x5f [ 151.456648] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.456693] ? __virt_addr_valid+0x2e8/0x5d0 [ 151.456746] ? __pfx_lock_release+0x10/0x10 [ 151.456791] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 151.456837] ? find_held_lock+0x2c/0x110 [ 151.456895] ? srso_return_thunk+0x5/0x5f [ 151.456952] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 151.457013] ? srso_return_thunk+0x5/0x5f [ 151.457068] ? lock_release+0x20f/0x6f0 [ 151.457112] ? __pfx_lock_release+0x10/0x10 [ 151.457155] ? srso_return_thunk+0x5/0x5f [ 151.457210] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.457257] ? srso_return_thunk+0x5/0x5f [ 151.457318] unregister_netdevice_queue+0x224/0x2e0 [ 151.457361] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 151.457405] ? up_write+0x195/0x520 [ 151.457459] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.457511] ? srso_return_thunk+0x5/0x5f [ 151.457570] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.457609] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 151.457647] ? srso_return_thunk+0x5/0x5f [ 151.457702] ? srso_return_thunk+0x5/0x5f [ 151.457757] ? synchronize_rcu+0x1ff/0x260 [ 151.457800] ieee80211_unregister_hw+0x55/0x3a0 [ 151.457845] hwsim_exit_net+0x3a0/0x730 [ 151.457886] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.457927] ? srso_return_thunk+0x5/0x5f [ 151.457990] ? netdev_run_todo+0x788/0x1040 [ 151.458039] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.458082] ops_exit_list+0xb3/0x180 [ 151.458124] cleanup_net+0x546/0xad0 [ 151.458168] ? __pfx_cleanup_net+0x10/0x10 [ 151.458222] process_one_work+0x8ee/0x1a10 [ 151.458287] ? __pfx_lock_acquire+0x10/0x10 [ 151.458332] ? __pfx_process_one_work+0x10/0x10 [ 151.458390] ? srso_return_thunk+0x5/0x5f [ 151.458445] ? move_linked_works+0x172/0x270 [ 151.458490] ? srso_return_thunk+0x5/0x5f [ 151.458545] ? assign_work+0x196/0x240 [ 151.458602] worker_thread+0x674/0xe70 [ 151.458660] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.458713] ? __pfx_worker_thread+0x10/0x10 [ 151.458772] kthread+0x3ab/0x720 [ 151.458824] ? __pfx_kthread+0x10/0x10 [ 151.458876] ? srso_return_thunk+0x5/0x5f [ 151.458931] ? finish_task_switch.isra.0+0x206/0x840 [ 151.458982] ? __pfx_kthread+0x10/0x10 [ 151.459036] ret_from_fork+0x48/0x80 [ 151.459066] ? __pfx_kthread+0x10/0x10 [ 151.459119] ret_from_fork_asm+0x1a/0x30 [ 151.459186] [ 153.808089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.812766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.814378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.820528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.828831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.830025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.863366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.865684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.866640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.869051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.873213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.878024] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.940762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.946352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.949524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.955431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.965835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.970187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.023243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.024256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.025236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.026153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.028181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.030101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.030097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.032947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.033242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.034861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.035192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.037207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.089693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.095635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.100752] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.103598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.112853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.113914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.118846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.123019] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.126563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.138544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.145555] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.152536] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.201657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.203726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.223588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.272125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.283613] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.292360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.906465] Bluetooth: hci1: command tx timeout [ 155.906940] Bluetooth: hci0: command tx timeout [ 156.033577] Bluetooth: hci2: command tx timeout [ 156.097464] Bluetooth: hci3: command tx timeout [ 156.098500] Bluetooth: hci4: command tx timeout [ 156.225535] Bluetooth: hci5: command tx timeout [ 156.289598] Bluetooth: hci7: command tx timeout [ 156.355410] Bluetooth: hci6: command tx timeout [ 157.954577] Bluetooth: hci0: command tx timeout [ 157.955037] Bluetooth: hci1: command tx timeout [ 158.081532] Bluetooth: hci2: command tx timeout [ 158.145592] Bluetooth: hci4: command tx timeout [ 158.146078] Bluetooth: hci3: command tx timeout [ 158.273499] Bluetooth: hci5: command tx timeout [ 158.338546] Bluetooth: hci7: command tx timeout [ 158.401452] Bluetooth: hci6: command tx timeout [ 160.002020] Bluetooth: hci1: command tx timeout [ 160.002539] Bluetooth: hci0: command tx timeout [ 160.130474] Bluetooth: hci2: command tx timeout [ 160.194465] Bluetooth: hci4: command tx timeout [ 160.194926] Bluetooth: hci3: command tx timeout [ 160.322507] Bluetooth: hci5: command tx timeout [ 160.385513] Bluetooth: hci7: command tx timeout [ 160.450447] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 22:32:12 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=000000c000031180 RCX=0000000000000097 RDX=000000001348cb28 RSI=000000c0000bbdc0 RDI=0000000000000001 RBP=000000c0000bbe58 RSP=000000c0000bbde8 R8 =0013335466fd35e0 R9 =00007fc6d564b000 R10=00007fc6d564b010 R11=0000000000042c54 R12=000000c000031880 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=0000000000463b96 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000031210 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561967732090 CR3=0000000013200000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0000ae000000000c0000afd40 XMM02=000000c0000bf69000000000008e84e0 XMM03=000000c0001724000000000000000080 XMM04=00000000000000080000000000b12868 XMM05=000000c0000bf69000000000008e84e0 XMM06=0000000000000055000000c0002e0400 XMM07=000000c0001724000000000000000080 XMM08=00000000000000800000000000000055 XMM09=0000000000000000000000000000d1dd XMM10=000000c0000afb8000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=000000c0000c7260000000c0000869c0 XMM14=000000c0000c72c0000000c0000c7290 XMM15=000000c000105080000000c0000c72f0 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec90 R8 =0000000000000000 R9 =ffffed10015ea046 R10=0000000000000030 R11=3038383866666666 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564d37b36248 CR3=000000000f05c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=00000000000000000000000000000000 XMM05=00000008000000020000564d37b3f930 XMM06=737574617453006563697665642e3069 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000