Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:21659' (ECDSA) to the list of known hosts. 2025/01/26 05:25:28 fuzzer started 2025/01/26 05:25:28 dialing manager at localhost:40883 syzkaller login: [ 61.681402] cgroup: Unknown subsys name 'net' [ 61.798554] cgroup: Unknown subsys name 'cpuset' [ 61.841713] cgroup: Unknown subsys name 'rlimit' [ 66.939546] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 05:25:47 syscalls: 2217 2025/01/26 05:25:47 code coverage: enabled 2025/01/26 05:25:47 comparison tracing: enabled 2025/01/26 05:25:47 extra coverage: enabled 2025/01/26 05:25:47 setuid sandbox: enabled 2025/01/26 05:25:47 namespace sandbox: enabled 2025/01/26 05:25:47 Android sandbox: enabled 2025/01/26 05:25:47 fault injection: enabled 2025/01/26 05:25:47 leak checking: enabled 2025/01/26 05:25:47 net packet injection: enabled 2025/01/26 05:25:47 net device setup: enabled 2025/01/26 05:25:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 05:25:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 05:25:47 USB emulation: enabled 2025/01/26 05:25:47 hci packet injection: enabled 2025/01/26 05:25:47 wifi device emulation: enabled 2025/01/26 05:25:47 802.15.4 emulation: enabled 2025/01/26 05:25:47 fetching corpus: 50, signal 9579/10924 (executing program) 2025/01/26 05:25:47 fetching corpus: 100, signal 10313/12892 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/14662 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/15924 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/17163 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/18398 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/19665 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/20889 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/22147 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/23393 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/24627 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/25870 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/27081 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/28338 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/28842 (executing program) 2025/01/26 05:25:47 fetching corpus: 112, signal 10897/28842 (executing program) 2025/01/26 05:25:50 starting 8 fuzzer processes 05:25:50 executing program 0: ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x8faf) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0xfffc000000000000}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) fcntl$setpipe(r0, 0x407, 0x6) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x7, "1d7370"}, 0x6) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x1, 0x5, 0x0, {0x4, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x40, 0x7f}}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xf, 0x24, [{0x3}, {0x36, 0x1}, {0x16, 0x1}, {0x6}, {0x30, 0x1}, {0x5}, {0x12}, {0x30, 0x1}, {0x16}, {0x4}, {0x1b, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x1, 0x0, 0x0, {0x8001, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x4cc0, 0x2}}, @NL80211_ATTR_MCAST_RATE={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "21623afe5b72d60afdf06b84fb"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000440)=0x1) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000480)) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2050}, 0x4000054) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000640)={0x1, 0x3, 0x1000, 0x26, &(0x7f00000005c0)="fa3184cef34cf3d311ef18fdb53511d58e8685e2620664dcf2b970472d5fb83ff7cc23a5d9c3", 0x15, 0x0, &(0x7f0000000600)="ac4211efc1374778f7631d71e748ed7c8f833318fe"}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, r1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000700)) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000740)) poll(&(0x7f0000000780)=[{r1}, {r1, 0x1}, {r0, 0x2}, {r2, 0x2000}], 0x4, 0x8001) 05:25:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30300100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040084}, 0x4080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000240)={'wlan0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x10000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x75f9846a0dc466f0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x33}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x94}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x10}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x13}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) accept$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xc8, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) clone3(&(0x7f0000000d00)={0x18100200, &(0x7f0000000ac0)=0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b40), {0x38}, &(0x7f0000000b80)=""/204, 0xcc, &(0x7f0000000c80)=""/22, &(0x7f0000000cc0)=[r8], 0x1, {r2}}, 0x58) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f0000000d80)) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x45, 0x3eb, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x10, 0x10, 0x101, 0x10}}) 05:25:50 executing program 2: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8024}, 0xc001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x59}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9369}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x4040) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x234, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xae}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x59e}, {0x6, 0x16, 0x10}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa25}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x6}}]}, 0x234}}, 0x20008814) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x41000800}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xfc, 0x15, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x93, 0x1, "06ea096b255c6a1cf6bbcebcade4aec75c7500450fb9adbf12e48fa3b7d3f62cf690b6fc127bae5c821cfe32f0a08cac6a07c59957bb1a1bd0beafa23724094385b494f78af580149ef504521e96062e72435246f11ed733c000395155ccc6f44c84b0d457ee78b5995d28a6390c5c51a7d28f0ba910e6f0fcfd2639b9d4794651ae931dbf4095c30cffb2104b507d"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "dd8018272f09e6dc261c60666fff1e92000ed1898c96e8185c"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "035b72217e0e01f745d3897b15db392f674a1877df1748ea961b950c494d4f20f5af9551a5707f0ce5c427"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x28884}, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0xf, 0x8, 0x5, 0x70bd25, 0x25dfdbfb, {0x5, 0x0, 0x4}, [@typed={0xc, 0x12, 0x0, 0x0, @str='ethtool\x00'}, @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x77, 0x0, 0x0, @str='udp\x00'}, @typed={0x4, 0x1e}, @nested={0xc, 0x36, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @uid=0xee00}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000ac0)={[0x4]}, 0x8) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3f5, 0x100, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000}, 0x40c0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000c00)) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400a0}, 0x4) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000d80)=0x1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044801}, 0x100) r3 = openat$incfs(r2, &(0x7f0000000f00)='.pending_reads\x00', 0x80, 0x95) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000f80)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x20, 0x3b, 0x0, @remote, @rand_addr=' \x01\x00', 0x40, 0x8000, 0xfffff649, 0x200}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xac, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20020001}, 0x84) r5 = openat$incfs(r3, &(0x7f0000001180)='.log\x00', 0x4001, 0x1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20090}, 0x0) 05:25:50 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x21c0, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000000c0)=""/160, &(0x7f0000000180)=0xa0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000200), &(0x7f0000000240)=@ng={0x4, 0x7, "2b497c2f6fe408e5"}, 0xa, 0x81bce08f4cb7d5e4) process_madvise(r0, &(0x7f0000000280), 0x0, 0x15, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20000000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) fcntl$setstatus(r0, 0x4, 0x3b6978c3c8cf3b2b) r3 = signalfd(r0, &(0x7f0000000380)={[0x40]}, 0x8) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x48}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x200, 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000500)={0x3, 0x46cb2d66, 0x11c00, 0x7, 0xfdb, 0xfffffff7}) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000540)={{r2}, "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"}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001540), 0x40840, 0x0) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000001740)={0x99f8, 0x20, '\x00', 0x1, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001780)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000001800)='net/dev_mcast\x00') 05:25:50 executing program 4: rt_sigprocmask(0x2, &(0x7f0000000000)={[0x5]}, &(0x7f0000000040), 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = signalfd(r0, &(0x7f00000000c0)={[0x3]}, 0x8) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x26f6, 0x10083) r3 = signalfd4(r2, &(0x7f0000000140)={[0xa]}, 0x8, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000180)) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000001c0)=""/196) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x541f1c21a4c69072, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x50, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fff}}, {0x34, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x30, 0x2, "0ae61dbb82c1bfcf9444d25ea24e990879034053ea20a376377e64bc729abf9eae0a4e6fdf8d11269fe05979"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0xc6c254cab8cafd51}, 0x44041) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000004c0)={0x0, 0x6c, &(0x7f0000000440)="4aa89640d3bd93f89883de3ca45612a3c454ccd50d81009d15696b406cb5eadae1def4d633f646c721063e9e7d6314317efd4e080d806010515462b02bae30ca0dd97a1f440d2563dc0d7fd3cd74875915e9145623eb25feb8501e11849926f9fe359aafe0bee2673b0c58f2"}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x24001, 0x0) write$binfmt_aout(r4, &(0x7f0000000540)={{0x108, 0x5, 0x2e, 0x2eb, 0x368, 0x80, 0x344, 0x3f}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x71f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "73505b66c8"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f1edda7efe"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000e00)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x90a, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$binfmt_misc(r3, &(0x7f0000000fc0)={'syz0', "a061f5d0545b5c"}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001080)={0x2a4, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1ff, 0x1c}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x268, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @broadcast, @initial, {0x1, 0xffc}}, @a_msdu=[{@device_b, @broadcast, 0x20, "5445bea499316dbcda92fa8f231c9c4eaa4cf03dfc09bc2c2b1f8335224ef063"}, {@broadcast, @device_a, 0x17, "8fa0c25fc77882e2e0e1b747f0d190a02929a006b35078"}, {@device_b, @device_a, 0x63, "5f02456393bd368f4f856617ad303cc83b507b2e43396deb4f0d55339a1f9ddf1fd619762026c936609f1b1f3a5729941e6e88d6bdce752380e343e75925370f58608cc6dc51df4462bc97c189a45cd12403df27862d38969821de399f9692652f7e0b"}, {@broadcast}, {@device_a, @device_a, 0x44, "e05ce9e1b4e06e6071599c585dd7ba6a0c4e7cccf099cf264367a5b5bf10c3e75155c8e4d7173b00f59ab33d22e4f44ac6b41d5668d7d811b85956c40b0551c43d851fab"}, {@broadcast, @device_b, 0xcd, "714e2a73c85cc2aefd510b080da85a98ff9a521fc6f295be0f3c207b2947b09274af6c25d4d660ae297a4a68e6b5e33a369edbe19e3ce0d1c1ab805de6f233945e450ab41066fbc619cd0e7cdaa82c784abd4127670ca28901c28d21327e2612b8698745eb67db125c3be73a3a0b01967aa5a4dadad719255492e5f8b928e5fa58cf6f013600e979225747d4eb332e37631e434d53d391a23f857a070667218af1a9d847227e1220b6ef73c7892415c8c45d3212b4e469823b4e0dfae8888e0592def89d6ded65a03dbc13243a"}, {@broadcast, @device_a, 0x31, "3d7e545859d8433de4ea573dd78c59d713597c820641843897b25d188a5d219cabb70be508fc470a51c0138fb521842d34"}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40014}, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) [ 83.378367] audit: type=1400 audit(1737869150.687:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:25:50 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000018c0)={[0x8000]}, 0x8, 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001900)) recvfrom(r0, &(0x7f0000001940)=""/161, 0xa1, 0x40, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001a00)={0x1, 0x9, 0x247, 0x7, 0x1f, 0x7fff}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r0, {0x6431}}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001ac0)={{{@in6=@loopback, @in6=@local, 0x4e23, 0x9, 0x4e23, 0x1ff, 0x2, 0xa0, 0x20, 0x67, 0x0, 0xee00}, {0x7fff, 0xffffffffffffff01, 0x9, 0x272, 0x2, 0x4, 0x0, 0x7}, {0x1, 0x11, 0x9, 0x8}, 0x51b, 0x6e6bb7, 0x1, 0x1, 0x3, 0x1}, {{@in=@multicast1, 0x4d4, 0xff}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x3, 0x0, 0x8, 0x3ff, 0x40}}, 0xe8) getsockname(r0, &(0x7f0000002580)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002600)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002640)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002780)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000002880)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000002a80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a40)={&(0x7f00000028c0)={0x148, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind(r0, &(0x7f0000002ac0)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bond_slave_1\x00'}}, 0x80) accept$inet6(r0, &(0x7f0000002b40)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002b80)=0x1c) r5 = syz_open_dev$vcsn(&(0x7f0000002bc0), 0x5, 0x301100) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002c40)={@multicast1, @private, 0x0}, &(0x7f0000002c80)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000002d40)={'syztnl0\x00', &(0x7f0000002cc0)={'syztnl0\x00', r4, 0x2f, 0x4, 0x3, 0xa000, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x10, 0x678b39ff, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002e00)={'erspan0\x00', &(0x7f0000002d80)={'gretap0\x00', r3, 0x1, 0x1, 0x5, 0x80, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x67, 0x0, 0x20, 0x2f, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x2c, 0xe5, 0x0, 0x2, [0x0, 0x7, 0xed, 0xffff70e6, 0xff, 0x9, 0x9, 0x8, 0xb2f, 0x10000]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000002f80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0xe4, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20004814}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002fc0)={'vxcan0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000)={0x0, 0x0}, &(0x7f0000003040)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003080)={{{@in6=@empty, @in=@remote, 0x4e24, 0xffff, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x5e, r9, r10}, {0x7, 0x6, 0xbfff, 0xffff, 0x3, 0x7, 0x101, 0x7fffffff}, {0x7, 0x2, 0xa5, 0x31}, 0x7a2e, 0x6e6bb7, 0x2, 0x1, 0x5a4d3ce0aed589ed, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x1, 0x1, 0x7, 0xfff, 0x33, 0x957b}}, 0xe8) 05:25:50 executing program 6: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc4ba}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x24}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1c}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000895) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba68}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa541}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10010421}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa270, 0x60}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2004801) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x204, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_SOCK={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x7fffffff, 0xaa, {{0x2b, 0x4, 0x3, 0x21, 0xac, 0x65, 0x0, 0x40, 0x2b, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x13, 0xd1, [@empty, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xbd, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x100}, {@broadcast, 0x32c3}, {@multicast2, 0x86f262f6}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x1d, [@multicast2]}, @timestamp_addr={0x44, 0x4c, 0xd3, 0x1, 0x3, [{@remote, 0xfffff000}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}}, {@multicast2, 0x200}, {@private=0xa010101, 0xfffffff9}, {@local, 0x1}, {@empty, 0x78c}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbf}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r5 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x81000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r3, 0x820, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041004}, 0x8040) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb0, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x933}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x595}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x4040001) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffc01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0x4a100, 0x0) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1f, 0x18}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3fe1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe86}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) 05:25:50 executing program 7: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 84.855184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.860319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.864391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.869764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.875241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.877791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.925924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.936453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.938228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.939785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.942798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.948111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.963553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.966303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.968239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.971792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.979503] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.981399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.062715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.072124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.079650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.085568] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.104097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.111529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.113714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.128250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.134459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.136403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.154145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.158465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.164478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.169389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.185226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.214399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.227394] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.228393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.230454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.241689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.249519] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.254072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.262026] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.272201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.286423] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.290406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.292560] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.302887] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.308931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.312773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.943638] Bluetooth: hci0: command tx timeout [ 87.005949] Bluetooth: hci1: command tx timeout [ 87.071028] Bluetooth: hci2: command tx timeout [ 87.197978] Bluetooth: hci3: command tx timeout [ 87.262017] Bluetooth: hci4: command tx timeout [ 87.390189] Bluetooth: hci7: command tx timeout [ 87.453977] Bluetooth: hci6: command tx timeout [ 87.454668] Bluetooth: hci5: command tx timeout [ 88.989905] Bluetooth: hci0: command tx timeout [ 89.054133] Bluetooth: hci1: command tx timeout [ 89.117908] Bluetooth: hci2: command tx timeout [ 89.247260] Bluetooth: hci3: command tx timeout [ 89.310879] Bluetooth: hci4: command tx timeout [ 89.438138] Bluetooth: hci7: command tx timeout [ 89.503882] Bluetooth: hci6: command tx timeout [ 89.504361] Bluetooth: hci5: command tx timeout [ 91.038023] Bluetooth: hci0: command tx timeout [ 91.102931] Bluetooth: hci1: command tx timeout [ 91.166899] Bluetooth: hci2: command tx timeout [ 91.294874] Bluetooth: hci3: command tx timeout [ 91.359214] Bluetooth: hci4: command tx timeout [ 91.486931] Bluetooth: hci7: command tx timeout [ 91.549988] Bluetooth: hci5: command tx timeout [ 91.550458] Bluetooth: hci6: command tx timeout [ 93.085968] Bluetooth: hci0: command tx timeout [ 93.150912] Bluetooth: hci1: command tx timeout [ 93.214250] Bluetooth: hci2: command tx timeout [ 93.342910] Bluetooth: hci3: command tx timeout [ 93.405943] Bluetooth: hci4: command tx timeout [ 93.533920] Bluetooth: hci7: command tx timeout [ 93.599071] Bluetooth: hci6: command tx timeout [ 93.599549] Bluetooth: hci5: command tx timeout [ 147.204789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.210164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.214416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.219466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.222588] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.237386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.239521] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.244130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.247287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.252521] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.255264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.257396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.330314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.339322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.340288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.348445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.349316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.354048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.356086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.370171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.374260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.375562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.379546] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.381609] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.385731] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.388612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.394063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.413270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.413360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.420199] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.421859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.423871] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.431639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.431886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.433001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.436466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.452652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.456489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.460081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.475357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.483336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.495309] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.498003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.510472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.511919] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.513122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.517533] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.518612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.277955] Bluetooth: hci0: command tx timeout [ 149.278655] Bluetooth: hci1: command tx timeout [ 149.470427] Bluetooth: hci3: command tx timeout [ 149.534517] Bluetooth: hci2: command tx timeout [ 149.535360] Bluetooth: hci4: command tx timeout [ 149.598006] Bluetooth: hci6: command tx timeout [ 149.598788] Bluetooth: hci5: command tx timeout [ 149.725938] Bluetooth: hci7: command tx timeout [ 151.326959] Bluetooth: hci0: command tx timeout [ 151.327478] Bluetooth: hci1: command tx timeout [ 151.518485] Bluetooth: hci3: command tx timeout [ 151.582025] Bluetooth: hci4: command tx timeout [ 151.582506] Bluetooth: hci2: command tx timeout [ 151.645997] Bluetooth: hci5: command tx timeout [ 151.646470] Bluetooth: hci6: command tx timeout [ 151.773997] Bluetooth: hci7: command tx timeout [ 153.374023] Bluetooth: hci0: command tx timeout [ 153.374543] Bluetooth: hci1: command tx timeout [ 153.565907] Bluetooth: hci3: command tx timeout [ 153.629966] Bluetooth: hci2: command tx timeout [ 153.630464] Bluetooth: hci4: command tx timeout [ 153.693946] Bluetooth: hci6: command tx timeout [ 153.694440] Bluetooth: hci5: command tx timeout [ 153.821901] Bluetooth: hci7: command tx timeout [ 155.422888] Bluetooth: hci1: command tx timeout [ 155.423378] Bluetooth: hci0: command tx timeout [ 155.613944] Bluetooth: hci3: command tx timeout [ 155.677903] Bluetooth: hci4: command tx timeout [ 155.678380] Bluetooth: hci2: command tx timeout [ 155.742019] Bluetooth: hci6: command tx timeout [ 155.742512] Bluetooth: hci5: command tx timeout [ 155.869880] Bluetooth: hci7: command tx timeout [ 207.637992] [ 207.638456] ====================================================== [ 207.639484] WARNING: possible circular locking dependency detected [ 207.640544] 6.13.0-next-20250124 #1 Not tainted [ 207.641390] ------------------------------------------------------ [ 207.642725] kworker/u8:0/11 is trying to acquire lock: [ 207.643567] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.645972] [ 207.645972] but task is already holding lock: [ 207.646865] ffff88802bc08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.648601] [ 207.648601] which lock already depends on the new lock. [ 207.648601] [ 207.652003] [ 207.652003] the existing dependency chain (in reverse order) is: [ 207.653081] [ 207.653081] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 207.655671] __mutex_lock+0x13d/0xb50 [ 207.656405] wiphy_register+0x1b2e/0x25d0 [ 207.657180] ieee80211_register_hw+0x23a4/0x3d60 [ 207.658058] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 207.658952] init_mac80211_hwsim+0x389/0x870 [ 207.659774] do_one_initcall+0xf9/0x640 [ 207.660610] kernel_init_freeable+0x53d/0x7a0 [ 207.661466] kernel_init+0x1e/0x2d0 [ 207.662128] ret_from_fork+0x48/0x80 [ 207.662813] ret_from_fork_asm+0x1a/0x30 [ 207.663584] [ 207.663584] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 207.664519] __lock_acquire+0x29fd/0x4580 [ 207.665282] lock_acquire+0x19b/0x520 [ 207.665994] __mutex_lock+0x13d/0xb50 [ 207.666709] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.667664] unregister_netdevice_queue+0x224/0x2e0 [ 207.668519] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.669395] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.670268] ieee80211_unregister_hw+0x55/0x3a0 [ 207.671083] hwsim_exit_net+0x3a0/0x730 [ 207.671809] ops_exit_list+0xb3/0x180 [ 207.672499] cleanup_net+0x546/0xad0 [ 207.673194] process_one_work+0x8ee/0x1a10 [ 207.673999] worker_thread+0x674/0xe70 [ 207.674741] kthread+0x3ab/0x720 [ 207.675397] ret_from_fork+0x48/0x80 [ 207.676062] ret_from_fork_asm+0x1a/0x30 [ 207.676825] [ 207.676825] other info that might help us debug this: [ 207.676825] [ 207.677980] Possible unsafe locking scenario: [ 207.677980] [ 207.678848] CPU0 CPU1 [ 207.679536] ---- ---- [ 207.680226] lock(&rdev->wiphy.mtx); [ 207.680840] lock(rtnl_mutex); [ 207.681734] lock(&rdev->wiphy.mtx); [ 207.682684] lock(rtnl_mutex); [ 207.683237] [ 207.683237] *** DEADLOCK *** [ 207.683237] [ 207.684099] 4 locks held by kworker/u8:0/11: [ 207.684860] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 207.686647] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 207.688432] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 207.690085] #3: ffff88802bc08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.691911] [ 207.691911] stack backtrace: [ 207.692683] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 207.692766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 207.692814] Workqueue: netns cleanup_net [ 207.692905] Call Trace: [ 207.692928] [ 207.692954] dump_stack_lvl+0xca/0x120 [ 207.693080] print_circular_bug+0x47b/0x750 [ 207.693184] check_noncircular+0x2e9/0x3c0 [ 207.693292] ? __pfx_check_noncircular+0x10/0x10 [ 207.693384] ? hlock_class+0x4e/0x130 [ 207.693453] ? mark_lock+0xac/0xed0 [ 207.693539] ? srso_return_thunk+0x5/0x5f [ 207.693657] ? lockdep_lock+0xba/0x1b0 [ 207.693774] ? __pfx_lockdep_lock+0x10/0x10 [ 207.693901] __lock_acquire+0x29fd/0x4580 [ 207.694010] ? __pfx___lock_acquire+0x10/0x10 [ 207.694098] ? lock_release+0x20f/0x6f0 [ 207.694188] ? __pfx_lock_release+0x10/0x10 [ 207.694286] lock_acquire+0x19b/0x520 [ 207.694374] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.694474] ? __pfx_lock_acquire+0x10/0x10 [ 207.694565] ? srso_return_thunk+0x5/0x5f [ 207.694677] ? lock_release+0x20f/0x6f0 [ 207.694765] ? srso_return_thunk+0x5/0x5f [ 207.694877] ? lock_is_held_type+0x9e/0x120 [ 207.694989] ? srso_return_thunk+0x5/0x5f [ 207.695109] __mutex_lock+0x13d/0xb50 [ 207.695216] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.695307] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.695402] ? srso_return_thunk+0x5/0x5f [ 207.695514] ? synchronize_rcu_expedited+0x38a/0x420 [ 207.695603] ? __pfx___mutex_lock+0x10/0x10 [ 207.695713] ? __pfx_autoremove_wake_function+0x10/0x10 [ 207.695824] ? srso_return_thunk+0x5/0x5f [ 207.695933] ? kasan_quarantine_put+0x84/0x1e0 [ 207.696047] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 207.696119] ? srso_return_thunk+0x5/0x5f [ 207.696230] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.696315] ? __virt_addr_valid+0x2e8/0x5d0 [ 207.696412] ? __pfx_lock_release+0x10/0x10 [ 207.696495] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 207.696581] ? find_held_lock+0x2c/0x110 [ 207.696689] ? srso_return_thunk+0x5/0x5f [ 207.696795] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 207.696907] ? srso_return_thunk+0x5/0x5f [ 207.697009] ? lock_release+0x20f/0x6f0 [ 207.697091] ? __pfx_lock_release+0x10/0x10 [ 207.697171] ? srso_return_thunk+0x5/0x5f [ 207.697291] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.697379] ? srso_return_thunk+0x5/0x5f [ 207.697492] unregister_netdevice_queue+0x224/0x2e0 [ 207.697573] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 207.697654] ? up_write+0x195/0x520 [ 207.697756] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.697853] ? srso_return_thunk+0x5/0x5f [ 207.697963] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.698034] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 207.698117] ? srso_return_thunk+0x5/0x5f [ 207.698240] ? srso_return_thunk+0x5/0x5f [ 207.698362] ? synchronize_rcu+0x1ff/0x260 [ 207.698446] ieee80211_unregister_hw+0x55/0x3a0 [ 207.698533] hwsim_exit_net+0x3a0/0x730 [ 207.698629] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.698720] ? srso_return_thunk+0x5/0x5f [ 207.698842] ? netdev_run_todo+0x788/0x1040 [ 207.698954] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.699050] ops_exit_list+0xb3/0x180 [ 207.699146] cleanup_net+0x546/0xad0 [ 207.699247] ? __pfx_cleanup_net+0x10/0x10 [ 207.699368] process_one_work+0x8ee/0x1a10 [ 207.699515] ? __pfx_lock_acquire+0x10/0x10 [ 207.699617] ? __pfx_process_one_work+0x10/0x10 [ 207.699749] ? srso_return_thunk+0x5/0x5f [ 207.699874] ? move_linked_works+0x172/0x270 [ 207.699975] ? srso_return_thunk+0x5/0x5f [ 207.700100] ? assign_work+0x196/0x240 [ 207.700231] worker_thread+0x674/0xe70 [ 207.700363] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.700483] ? __pfx_worker_thread+0x10/0x10 [ 207.700618] kthread+0x3ab/0x720 [ 207.700736] ? __pfx_kthread+0x10/0x10 [ 207.700853] ? srso_return_thunk+0x5/0x5f [ 207.700978] ? finish_task_switch.isra.0+0x206/0x840 [ 207.701093] ? __pfx_kthread+0x10/0x10 [ 207.701215] ret_from_fork+0x48/0x80 [ 207.701300] ? __pfx_kthread+0x10/0x10 [ 207.701421] ret_from_fork_asm+0x1a/0x30 [ 207.701574] [ 208.821895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.825924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.827474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.849677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.856147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.859101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.935278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.938112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.942656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.947346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.951485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.954388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.122932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.128228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.130926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.133750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.135639] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.137008] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.138473] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.144357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.153305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.167171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.187256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.191089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.276536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.281235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.287143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.294065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.295147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.308209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.313942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.324185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.333005] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.345362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.346888] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.348051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.359373] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.360700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.367121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.378302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.386006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.391155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.411538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.420136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.452091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.498031] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.500482] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.502318] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.910989] Bluetooth: hci0: command tx timeout [ 210.973922] Bluetooth: hci1: command tx timeout [ 211.166055] Bluetooth: hci2: command tx timeout [ 211.229902] Bluetooth: hci3: command tx timeout [ 211.422104] Bluetooth: hci4: command tx timeout [ 211.485941] Bluetooth: hci5: command tx timeout [ 211.549882] Bluetooth: hci7: command tx timeout [ 211.550668] Bluetooth: hci6: command tx timeout [ 212.958875] Bluetooth: hci0: command tx timeout [ 213.021863] Bluetooth: hci1: command tx timeout [ 213.213875] Bluetooth: hci2: command tx timeout [ 213.278810] Bluetooth: hci3: command tx timeout [ 213.469845] Bluetooth: hci4: command tx timeout [ 213.533863] Bluetooth: hci5: command tx timeout [ 213.597888] Bluetooth: hci7: command tx timeout [ 213.598308] Bluetooth: hci6: command tx timeout [ 215.005953] Bluetooth: hci0: command tx timeout [ 215.069993] Bluetooth: hci1: command tx timeout [ 215.262427] Bluetooth: hci2: command tx timeout [ 215.325859] Bluetooth: hci3: command tx timeout [ 215.517851] Bluetooth: hci4: command tx timeout [ 215.582316] Bluetooth: hci5: command tx timeout [ 215.645907] Bluetooth: hci6: command tx timeout [ 215.646313] Bluetooth: hci7: command tx timeout [ 217.054833] Bluetooth: hci0: command tx timeout [ 217.118195] Bluetooth: hci1: command tx timeout [ 217.309891] Bluetooth: hci2: command tx timeout [ 217.374161] Bluetooth: hci3: command tx timeout [ 217.565864] Bluetooth: hci4: command tx timeout [ 217.629861] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 05:27:55 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed100176f046 R10=0000000000000065 R11=6f6c206863696877 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9de2bf548 CR3=0000000015d12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000000000000000000000 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000 XMM10=20000000200000002000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea000027f340 RCX=00000000000000bc RDX=1ffffffff0afd840 RSI=0000000000000000 RDI=ffff888009fcda20 RBP=ffff888013788260 RSP=ffff88800f61fa50 R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=000000000000004c R12=000000000000004d R13=0000000000000064 R14=000000000000004c R15=0000000009fcd000 RIP=ffffffff84a7b1ab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556fb04400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f64814f7ff0 CR3=0000000015d88000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000