Warning: Permanently added '[localhost]:51910' (ECDSA) to the list of known hosts.
2025/01/26 07:14:16 fuzzer started
2025/01/26 07:14:17 dialing manager at localhost:40883
syzkaller login: [   70.203285] cgroup: Unknown subsys name 'net'
[   70.299914] cgroup: Unknown subsys name 'cpuset'
[   70.376792] cgroup: Unknown subsys name 'rlimit'
[   76.562866] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/26 07:14:35 syscalls: 201
2025/01/26 07:14:35 code coverage: enabled
2025/01/26 07:14:35 comparison tracing: enabled
2025/01/26 07:14:35 extra coverage: enabled
2025/01/26 07:14:35 setuid sandbox: enabled
2025/01/26 07:14:35 namespace sandbox: enabled
2025/01/26 07:14:35 Android sandbox: enabled
2025/01/26 07:14:35 fault injection: enabled
2025/01/26 07:14:35 leak checking: enabled
2025/01/26 07:14:35 net packet injection: enabled
2025/01/26 07:14:35 net device setup: enabled
2025/01/26 07:14:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/26 07:14:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/26 07:14:35 USB emulation: enabled
2025/01/26 07:14:35 hci packet injection: enabled
2025/01/26 07:14:35 wifi device emulation: enabled
2025/01/26 07:14:35 802.15.4 emulation: enabled
2025/01/26 07:14:35 fetching corpus: 0, signal 0/0 (executing program)
2025/01/26 07:14:38 starting 8 fuzzer processes
07:14:38 executing program 0:
socketpair(0x6, 0x3, 0x101, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x40000)
read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x616}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc041)
r4 = syz_io_uring_setup(0x51c0, &(0x7f0000000380)={0x0, 0xf981, 0x0, 0x0, 0x1fe, 0x0, r2}, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
geteuid()
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r7=>r2, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f0000000580)=0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0/file0\x00'})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000000600))
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x45}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4d}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000045)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x7f121e48a12576a8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80)

07:14:38 executing program 1:
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000))
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x6a1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x4, r0, 0x8})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x3f}}, './file0\x00'})
write$cgroup_type(r1, &(0x7f0000000100), 0x9)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x80000000}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x825d}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r0, {0x3ff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r6=>r0, {0x3}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x104, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44890)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000004c0)={<r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r8=>r2}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000580)={r7, 0x2, r8, 0x8, 0x80000})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8b5}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r6, 0x10000000)
write$selinux_attr(r4, &(0x7f0000000700)='system_u:object_r:etc_mail_t:s0\x00', 0x20)

07:14:38 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x3f}}, './file0\x00'})
io_setup(0x8000, &(0x7f00000000c0))
setns(r1, 0x20000)
openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
socketpair(0x26, 0x6, 0x7, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$nbd(r4, &(0x7f0000000180)={0x67446698, 0x0, 0x1, 0x0, 0x4, "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"}, 0x1010)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000011c0), 0xa8100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001200)={{0x1, 0x1, 0x18, <r6=>r3, @out_args}, './file0\x00'})
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000001240)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x4}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x408, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4080)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000013c0), r6)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r8, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000014c0)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0x7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000001500)={{0x1, 0x1, 0x18, <r10=>0xffffffffffffffff, {0x800}}, './file0\x00'})
r11 = openat$cgroup_type(r1, &(0x7f0000001540), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r11}, './file0\x00'})
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x48, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040004}, 0x40048c4)

07:14:38 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000000040)="86b351d8b778804525a2f38fd691ca11fdaaae46f5480ed263bf65a212dc61c2c0e42c80152f86cfa51ac3d7998995c99b04bf08e04e19a4a78618bba728", 0x3e, 0x9, 0x0, 0x1, r0}, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x3}}, './file0\x00'})
r2 = syz_io_uring_setup(0x30d, &(0x7f0000000140)={0x0, 0xccbf, 0x0, 0x2, 0x3b8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'})
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r0, {0xffffffff}}, './file0\x00'})
syz_io_uring_setup(0x7fd3, &(0x7f00000002c0)={0x0, 0x8ea1, 0x4, 0x0, 0x335, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380))
mq_notify(r0, &(0x7f00000004c0)={0x0, 0x37, 0x2, @thr={&(0x7f00000003c0)="1a90e3cc1b1c7023b1d68535a7215a47a0c2b3ccfe096cc39dbf5914b12121bb620b81afd0ec66c6515a9928ee52a460decbe3fe616ebe9752684caf75bc8e9482e1d075b97bfe2510102bd5445c3f7ce9415eccadaaaa2cff0c360cd63516f794e18ec836d977d60cb9bb2854e3f2c6b03b273fa31af6a18f92142484946de210e83f6d873b1f0141c7ae4cb308f2b1ee7432a2c152560cc1182ca3", &(0x7f0000000480)="43f3f4460b6951ce"}})
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000500))
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r4, {0x3}}, './file0\x00'})
r6 = openat$cgroup_procs(r5, &(0x7f00000005c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r8=>r7, @out_args}, './file0\x00'})
r9 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x100, 0x1)
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r10=>r9, {0x9}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r10, 0x3312, 0x5)

[   91.082695] audit: type=1400 audit(1737875678.443:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:14:38 executing program 4:
recvmsg(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002340)=""/168, 0xa8}, 0x23)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002440), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002480)={{0x1, 0x1, 0x18, <r2=>r1, {0x80000001}}, './file0\x00'})
openat$cgroup_freezer_state(r2, &(0x7f00000024c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000002500)={{0x1, 0x1, 0x18, <r3=>r0, {0x2}}, './file0\x00'})
r4 = openat$cgroup_pressure(r3, &(0x7f0000002540)='cpu.pressure\x00', 0x2, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x60, 0x13, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
mkdirat$cgroup(r3, &(0x7f00000026c0)='syz1\x00', 0x1ff)
write$selinux_attr(r2, &(0x7f0000002700)='system_u:object_r:crypt_device_t:s0\x00', 0x24)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000002740)={{0x1, 0x1, 0x18, <r5=>r0, {0x40}}, './file0\x00'})
openat$autofs(0xffffffffffffff9c, &(0x7f0000002780), 0x403, 0x0)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000027c0))
io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000002800)=0x6)
setns(0xffffffffffffffff, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000002840)={{0x1, 0x1, 0x18, <r6=>r5, {0x7}}, './file0\x00'})
r7 = openat$cgroup_int(r2, &(0x7f0000002880)='rdma.max\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000028c0)={{0x1, 0x1, 0x18, <r8=>r7, {0xfffff001}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002900)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

07:14:38 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x449d}}, './file0\x00'})
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x1e821177cd5b3354, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48810}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000200))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x900, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r4, {0x2}}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x9, &(0x7f0000000300)=[{0x100, 0x6, 0x7, 0x100}, {0xffff, 0x8, 0x9}, {0x9, 0xc0, 0x20, 0xfffffff7}, {0x0, 0x0, 0x3f, 0x8}, {0x5, 0x81, 0x9, 0x9}, {0x7, 0xff, 0x5, 0x5}, {0x0, 0x1, 0x4, 0x23}, {0x0, 0x80, 0x3, 0x6}, {0xff, 0x8, 0x5, 0x7fff}]})
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
socketpair(0x11, 0x4, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r6)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r9, 0xc09, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000800)
syz_open_dev$char_usb(0xc, 0xb4, 0x2)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000600)=0x1)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000640), 0x80000000, &(0x7f00000006c0))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})

07:14:38 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x100000001, 0xfb7c407})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x100, 0x3, 0x1f, 0x1}, {0x0, 0x3f, 0x1, 0x8}, {0x4, 0x29, 0x1f, 0x7ff}, {0x400, 0x1, 0x81, 0x7fff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000280)=r1)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000002c0))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r4}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r6=>r4, {0x1}}, './file0\x00'})
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0)
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000000}, 0x20010011)
ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f00000004c0))
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x107001, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8)
write$nbd(r5, &(0x7f0000000580)={0x67446698, 0x0, 0x1, 0x1, 0x2, "e628b147f4c4761ded212bd5eb5ef7957383d3681872bc81cf76634894b5f447953aae99ee1ea412762643febe630965de5869ae107585253d70ebf77e320388bd7ee42a6c6b30e61629225d31cb58233f4ec6897a0ef3c2e065b4db807ea14e1c4841c94e0bbf06b081a09f992ac7fee1a3d76ca12683d659e2fdc155583977b37de4040036addd75"}, 0x99)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r10=>r6}, './file0\x00'})
ioctl$HIDIOCGRAWNAME(r10, 0x80404804, &(0x7f0000000680))
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x820}, 0xc000800)

07:14:38 executing program 7:
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x35}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x40000c8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'syztnl1\x00', <r2=>r0, 0x8, 0x8, 0x5, 0x6, {{0x15, 0x4, 0x3, 0x8, 0x54, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0xfffff375}, {@remote, 0x200}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x9f1f}, {@private=0xa010100, 0x80}, {@loopback, 0x4}, {@multicast2, 0xfffeffff}]}, @ssrr={0x89, 0x7, 0xb1, [@multicast1]}, @noop, @end]}}}}})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x110, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x164}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x81)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000900)={<r3=>0x0, <r4=>0x0})
r5 = syz_open_procfs$userns(r4, &(0x7f0000000980))
recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a40)=""/244, 0xf4}, {&(0x7f0000000b40)=""/78, 0x4e}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/41, 0x29}, {&(0x7f0000000d00)=""/122, 0x7a}, {&(0x7f0000000d80)=""/196, 0xc4}, {&(0x7f0000000e80)=""/200, 0xc8}, {&(0x7f0000000f80)=""/16, 0x10}, {&(0x7f0000000fc0)=""/232, 0xe8}, {&(0x7f00000010c0)=""/193, 0xc1}], 0xa, &(0x7f0000001280)=""/65, 0x41}, 0x10000)
getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000001340), &(0x7f0000001380)=0x10)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000013c0)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffe0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048004}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xab00000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r8=>r7, {0x1}}, './file0\x00'})
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000016c0)={r3, 0x0, r9, 0x7, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001700)={0x0, <r10=>0x0})
syz_open_procfs$userns(r10, &(0x7f0000001780))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000017c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001940)={'tunl0\x00', &(0x7f0000001900)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x4, 0x0, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0xe4, 0x29, 0x0, @multicast1, @local, {[@noop]}}}}})

[   92.615493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.618623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.621257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.627796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.633483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.636009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.819295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.824823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.827002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.836433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.838500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.842578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.844750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.856475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.860433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.862725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.869004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.872179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.881464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.884538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.884761] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.887652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.897919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.899945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.903545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.914581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.918477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.928357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.930969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.934407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.938429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.940268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.942232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.951406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.956529] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.962550] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.964858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.965896] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.967366] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.971707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.975008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.985713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.990001] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   93.000859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   93.004576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   93.026289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   93.034803] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   93.038803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.701877] Bluetooth: hci0: command tx timeout
[   94.957244] Bluetooth: hci2: command tx timeout
[   94.958345] Bluetooth: hci1: command tx timeout
[   95.022153] Bluetooth: hci3: command tx timeout
[   95.022837] Bluetooth: hci7: command tx timeout
[   95.023549] Bluetooth: hci5: command tx timeout
[   95.085196] Bluetooth: hci4: command tx timeout
[   95.086818] Bluetooth: hci6: command tx timeout
[   96.749242] Bluetooth: hci0: command tx timeout
[   97.005265] Bluetooth: hci1: command tx timeout
[   97.005341] Bluetooth: hci2: command tx timeout
[   97.069198] Bluetooth: hci5: command tx timeout
[   97.069259] Bluetooth: hci3: command tx timeout
[   97.070190] Bluetooth: hci7: command tx timeout
[   97.133239] Bluetooth: hci6: command tx timeout
[   97.133357] Bluetooth: hci4: command tx timeout
[   98.797350] Bluetooth: hci0: command tx timeout
[   99.053231] Bluetooth: hci1: command tx timeout
[   99.053246] Bluetooth: hci2: command tx timeout
[   99.117303] Bluetooth: hci7: command tx timeout
[   99.118344] Bluetooth: hci3: command tx timeout
[   99.119079] Bluetooth: hci5: command tx timeout
[   99.181219] Bluetooth: hci6: command tx timeout
[   99.181749] Bluetooth: hci4: command tx timeout
[  100.847104] Bluetooth: hci0: command tx timeout
[  101.101167] Bluetooth: hci2: command tx timeout
[  101.102143] Bluetooth: hci1: command tx timeout
[  101.165122] Bluetooth: hci3: command tx timeout
[  101.165609] Bluetooth: hci5: command tx timeout
[  101.166451] Bluetooth: hci7: command tx timeout
[  101.229161] Bluetooth: hci6: command tx timeout
[  101.229295] Bluetooth: hci4: command tx timeout
[  152.495310] syz-executor.0 (280) used greatest stack depth: 23568 bytes left
[  155.090693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.094407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.096755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.105947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.110379] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  155.112669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.344450] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.348407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.351582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.368536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.376495] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  155.392696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.448881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.455449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.465518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.484993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.487552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.492920] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  155.497980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.503604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.505370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.515693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.521250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  155.522208] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.542845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.563422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.615410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.648499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.649816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.653265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.750555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.773493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.791518] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.797414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.804266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.808553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.814517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.820476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.832780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.834204] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.839500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.842940] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  155.844946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  155.847930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.850673] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  155.852852] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  155.860387] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  155.877545] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  157.166112] Bluetooth: hci0: command tx timeout
[  157.486235] Bluetooth: hci1: command tx timeout
[  157.551053] Bluetooth: hci2: command tx timeout
[  157.613068] Bluetooth: hci3: command tx timeout
[  157.743296] Bluetooth: hci4: command tx timeout
[  157.869226] Bluetooth: hci5: command tx timeout
[  157.997195] Bluetooth: hci7: command tx timeout
[  157.998464] Bluetooth: hci6: command tx timeout
[  159.214189] Bluetooth: hci0: command tx timeout
[  159.535245] Bluetooth: hci1: command tx timeout
[  159.597168] Bluetooth: hci2: command tx timeout
[  159.661286] Bluetooth: hci3: command tx timeout
[  159.790039] Bluetooth: hci4: command tx timeout
[  159.918209] Bluetooth: hci5: command tx timeout
[  160.046163] Bluetooth: hci7: command tx timeout
[  160.046952] Bluetooth: hci6: command tx timeout
[  161.262108] Bluetooth: hci0: command tx timeout
[  161.581132] Bluetooth: hci1: command tx timeout
[  161.647109] Bluetooth: hci2: command tx timeout
[  161.709379] Bluetooth: hci3: command tx timeout
[  161.839088] Bluetooth: hci4: command tx timeout
[  161.966528] Bluetooth: hci5: command tx timeout
[  162.094133] Bluetooth: hci6: command tx timeout
[  162.094777] Bluetooth: hci7: command tx timeout
[  163.309183] Bluetooth: hci0: command tx timeout
[  163.630100] Bluetooth: hci1: command tx timeout
[  163.693235] Bluetooth: hci2: command tx timeout
[  163.757275] Bluetooth: hci3: command tx timeout
[  163.885143] Bluetooth: hci4: command tx timeout
[  164.013249] Bluetooth: hci5: command tx timeout
[  164.143068] Bluetooth: hci7: command tx timeout
[  164.143758] Bluetooth: hci6: command tx timeout
[  217.030822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.033362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.044650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.052612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.056219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  217.059233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.143468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  217.147415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  217.152691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  217.170686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  217.174239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  217.177584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.183369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.186547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  217.191414] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.210395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.217555] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  217.233500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.294964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  217.305664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  217.317703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  217.322575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.333445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.358615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.361925] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  217.364149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.366365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.390933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.408799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.410790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.416694] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.422696] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  217.428353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.433752] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.435371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  217.437289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.441776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.455178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.480317] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.485803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.503759] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.505352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.539554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.546976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  217.548741] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.569544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.587844] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  217.597250] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  219.118054] Bluetooth: hci0: command tx timeout
[  219.246117] Bluetooth: hci2: command tx timeout
[  219.309218] Bluetooth: hci1: command tx timeout
[  219.565112] Bluetooth: hci4: command tx timeout
[  219.566072] Bluetooth: hci3: command tx timeout
[  219.629097] Bluetooth: hci6: command tx timeout
[  219.629893] Bluetooth: hci5: command tx timeout
[  219.694106] Bluetooth: hci7: command tx timeout
[  221.166317] Bluetooth: hci0: command tx timeout
[  221.294057] Bluetooth: hci2: command tx timeout
[  221.358076] Bluetooth: hci1: command tx timeout
[  221.614243] Bluetooth: hci3: command tx timeout
[  221.614748] Bluetooth: hci4: command tx timeout
[  221.678440] Bluetooth: hci5: command tx timeout
[  221.679053] Bluetooth: hci6: command tx timeout
[  221.741117] Bluetooth: hci7: command tx timeout
[  223.214058] Bluetooth: hci0: command tx timeout
[  223.342081] Bluetooth: hci2: command tx timeout
[  223.407023] Bluetooth: hci1: command tx timeout
[  223.662065] Bluetooth: hci4: command tx timeout
[  223.662604] Bluetooth: hci3: command tx timeout
[  223.725078] Bluetooth: hci6: command tx timeout
[  223.725570] Bluetooth: hci5: command tx timeout
[  223.790145] Bluetooth: hci7: command tx timeout
[  225.262053] Bluetooth: hci0: command tx timeout
[  225.390065] Bluetooth: hci2: command tx timeout
[  225.453437] Bluetooth: hci1: command tx timeout
[  225.709411] Bluetooth: hci4: command tx timeout
[  225.709893] Bluetooth: hci3: command tx timeout
[  225.773072] Bluetooth: hci5: command tx timeout
[  225.773561] Bluetooth: hci6: command tx timeout
[  225.837071] Bluetooth: hci7: command tx timeout
[  279.495859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.509476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.512609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.520180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.532750] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  279.534853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.743169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  279.749242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  279.753463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  279.761966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  279.767531] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  279.769719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  279.817663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.822165] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.836450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.840582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.843771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  279.845733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.872322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  279.875813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  279.884717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  279.904927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  279.921468] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  279.933205] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  279.935344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  279.946346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  279.957501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  279.999406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  280.007643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  280.014650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  280.030261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  280.044899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  280.106245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  280.133276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  280.177597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  280.200583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  280.209173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  280.216278] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  280.220344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  280.222133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.222889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  280.227844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  280.230869] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  280.233274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.276404] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  280.282873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  280.292723] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  280.306485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  281.581282] Bluetooth: hci0: command tx timeout
[  281.837261] Bluetooth: hci1: command tx timeout
[  281.901133] Bluetooth: hci2: command tx timeout
[  282.029264] Bluetooth: hci3: command tx timeout
[  282.158059] Bluetooth: hci4: command tx timeout
[  282.351108] Bluetooth: hci6: command tx timeout
[  282.413149] Bluetooth: hci5: command tx timeout
[  282.479285] Bluetooth: hci7: command tx timeout
[  283.630120] Bluetooth: hci0: command tx timeout
[  283.885104] Bluetooth: hci1: command tx timeout
[  283.949413] Bluetooth: hci2: command tx timeout
[  284.077125] Bluetooth: hci3: command tx timeout
[  284.205149] Bluetooth: hci4: command tx timeout
[  284.399364] Bluetooth: hci6: command tx timeout
[  284.461312] Bluetooth: hci5: command tx timeout
[  284.525180] Bluetooth: hci7: command tx timeout
[  285.677128] Bluetooth: hci0: command tx timeout
[  285.933082] Bluetooth: hci1: command tx timeout
[  285.997121] Bluetooth: hci2: command tx timeout
[  286.125166] Bluetooth: hci3: command tx timeout
[  286.254059] Bluetooth: hci4: command tx timeout
[  286.447075] Bluetooth: hci6: command tx timeout
[  286.510693] Bluetooth: hci5: command tx timeout
[  286.574118] Bluetooth: hci7: command tx timeout
[  287.726027] Bluetooth: hci0: command tx timeout
[  287.982615] Bluetooth: hci1: command tx timeout
[  288.046689] Bluetooth: hci2: command tx timeout
[  288.174175] Bluetooth: hci3: command tx timeout
[  288.302261] Bluetooth: hci4: command tx timeout
[  288.494838] Bluetooth: hci6: command tx timeout
[  288.558139] Bluetooth: hci5: command tx timeout
[  288.622290] Bluetooth: hci7: command tx timeout
[  339.098501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.100464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.730867] 
[  340.731154] ======================================================
[  340.731861] WARNING: possible circular locking dependency detected
[  340.732570] 6.13.0-next-20250124 #1 Not tainted
[  340.733120] ------------------------------------------------------
[  340.738083] kworker/u8:0/11 is trying to acquire lock:
[  340.739020] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  340.740864] 
[  340.740864] but task is already holding lock:
[  340.741937] ffff88800c060768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  340.743754] 
[  340.743754] which lock already depends on the new lock.
[  340.743754] 
[  340.745181] 
[  340.745181] the existing dependency chain (in reverse order) is:
[  340.746502] 
[  340.746502] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  340.747734]        __mutex_lock+0x13d/0xb50
[  340.748602]        wiphy_register+0x1b2e/0x25d0
[  340.749523]        ieee80211_register_hw+0x23a4/0x3d60
[  340.750518]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  340.751555]        init_mac80211_hwsim+0x389/0x870
[  340.752528]        do_one_initcall+0xf9/0x640
[  340.753450]        kernel_init_freeable+0x53d/0x7a0
[  340.754423]        kernel_init+0x1e/0x2d0
[  340.755212]        ret_from_fork+0x48/0x80
[  340.756013]        ret_from_fork_asm+0x1a/0x30
[  340.756928] 
[  340.756928] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  340.758203]        __lock_acquire+0x29fd/0x4580
[  340.759187]        lock_acquire+0x19b/0x520
[  340.760038]        __mutex_lock+0x13d/0xb50
[  340.760912]        unregister_netdevice_many_notify+0x1612/0x1c80
[  340.762098]        unregister_netdevice_queue+0x224/0x2e0
[  340.763146]        _cfg80211_unregister_wdev+0x57b/0x700
[  340.764209]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  340.765279]        ieee80211_unregister_hw+0x55/0x3a0
[  340.766276]        hwsim_exit_net+0x3a0/0x730
[  340.767159]        ops_exit_list+0xb3/0x180
[  340.768005]        cleanup_net+0x546/0xad0
[  340.768836]        process_one_work+0x8ee/0x1a10
[  340.769832]        worker_thread+0x674/0xe70
[  340.770745]        kthread+0x3ab/0x720
[  340.771543]        ret_from_fork+0x48/0x80
[  340.772345]        ret_from_fork_asm+0x1a/0x30
[  340.773281] 
[  340.773281] other info that might help us debug this:
[  340.773281] 
[  340.774698]  Possible unsafe locking scenario:
[  340.774698] 
[  340.775755]        CPU0                    CPU1
[  340.776596]        ----                    ----
[  340.777454]   lock(&rdev->wiphy.mtx);
[  340.778203]                                lock(rtnl_mutex);
[  340.779276]                                lock(&rdev->wiphy.mtx);
[  340.780426]   lock(rtnl_mutex);
[  340.781087] 
[  340.781087]  *** DEADLOCK ***
[  340.781087] 
[  340.782176] 4 locks held by kworker/u8:0/11:
[  340.782993]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  340.784885]  #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  340.786738]  #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  340.788435]  #3: ffff88800c060768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  340.790351] 
[  340.790351] stack backtrace:
[  340.791160] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1
[  340.791242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  340.791291] Workqueue: netns cleanup_net
[  340.791381] Call Trace:
[  340.791401]  <TASK>
[  340.791426]  dump_stack_lvl+0xca/0x120
[  340.791553]  print_circular_bug+0x47b/0x750
[  340.791655]  check_noncircular+0x2e9/0x3c0
[  340.791746]  ? lock_repin_lock+0x207/0x320
[  340.791876]  ? __pfx_check_noncircular+0x10/0x10
[  340.791969]  ? hlock_class+0x4e/0x130
[  340.792037]  ? mark_lock+0xac/0xed0
[  340.792125]  ? __pfx_lock_repin_lock+0x10/0x10
[  340.792257]  ? timerqueue_del+0x83/0x150
[  340.792352]  ? lockdep_lock+0xba/0x1b0
[  340.792480]  ? __pfx_lockdep_lock+0x10/0x10
[  340.792618]  __lock_acquire+0x29fd/0x4580
[  340.792738]  ? __pfx___lock_acquire+0x10/0x10
[  340.792835]  ? lock_release+0x20f/0x6f0
[  340.792933]  ? __pfx_lock_release+0x10/0x10
[  340.793040]  lock_acquire+0x19b/0x520
[  340.793151]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  340.793261]  ? __pfx_lock_acquire+0x10/0x10
[  340.793363]  ? srso_return_thunk+0x5/0x5f
[  340.793486]  ? lock_release+0x20f/0x6f0
[  340.793583]  ? srso_return_thunk+0x5/0x5f
[  340.793706]  ? lock_is_held_type+0x9e/0x120
[  340.793828]  ? srso_return_thunk+0x5/0x5f
[  340.793959]  __mutex_lock+0x13d/0xb50
[  340.794075]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  340.794176]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  340.794279]  ? srso_return_thunk+0x5/0x5f
[  340.794401]  ? synchronize_rcu_expedited+0x38a/0x420
[  340.794499]  ? __pfx___mutex_lock+0x10/0x10
[  340.794618]  ? __pfx_autoremove_wake_function+0x10/0x10
[  340.794738]  ? srso_return_thunk+0x5/0x5f
[  340.794861]  ? kasan_quarantine_put+0x84/0x1e0
[  340.794995]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  340.795073]  ? srso_return_thunk+0x5/0x5f
[  340.795206]  unregister_netdevice_many_notify+0x1612/0x1c80
[  340.795307]  ? __virt_addr_valid+0x2e8/0x5d0
[  340.795424]  ? __pfx_lock_release+0x10/0x10
[  340.795524]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  340.795627]  ? find_held_lock+0x2c/0x110
[  340.795756]  ? srso_return_thunk+0x5/0x5f
[  340.795884]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  340.796017]  ? srso_return_thunk+0x5/0x5f
[  340.796140]  ? lock_release+0x20f/0x6f0
[  340.796238]  ? __pfx_lock_release+0x10/0x10
[  340.796335]  ? srso_return_thunk+0x5/0x5f
[  340.796457]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  340.796563]  ? srso_return_thunk+0x5/0x5f
[  340.796698]  unregister_netdevice_queue+0x224/0x2e0
[  340.796795]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  340.796892]  ? up_write+0x195/0x520
[  340.797014]  _cfg80211_unregister_wdev+0x57b/0x700
[  340.797143]  ? srso_return_thunk+0x5/0x5f
[  340.797277]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  340.797363]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  340.797449]  ? srso_return_thunk+0x5/0x5f
[  340.797541]  ? srso_return_thunk+0x5/0x5f
[  340.797617]  ? synchronize_rcu+0x1ff/0x260
[  340.797677]  ieee80211_unregister_hw+0x55/0x3a0
[  340.797739]  hwsim_exit_net+0x3a0/0x730
[  340.797797]  ? __pfx_hwsim_exit_net+0x10/0x10
[  340.797854]  ? srso_return_thunk+0x5/0x5f
[  340.797931]  ? netdev_run_todo+0x788/0x1040
[  340.797999]  ? __pfx_hwsim_exit_net+0x10/0x10
[  340.798059]  ops_exit_list+0xb3/0x180
[  340.798118]  cleanup_net+0x546/0xad0
[  340.798180]  ? __pfx_cleanup_net+0x10/0x10
[  340.798255]  process_one_work+0x8ee/0x1a10
[  340.798346]  ? __pfx_lock_acquire+0x10/0x10
[  340.798408]  ? __pfx_process_one_work+0x10/0x10
[  340.798490]  ? srso_return_thunk+0x5/0x5f
[  340.798566]  ? move_linked_works+0x172/0x270
[  340.798629]  ? srso_return_thunk+0x5/0x5f
[  340.798705]  ? assign_work+0x196/0x240
[  340.798785]  worker_thread+0x674/0xe70
[  340.798866]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  340.798939]  ? __pfx_worker_thread+0x10/0x10
[  340.799022]  kthread+0x3ab/0x720
[  340.799094]  ? __pfx_kthread+0x10/0x10
[  340.799167]  ? srso_return_thunk+0x5/0x5f
[  340.799243]  ? finish_task_switch.isra.0+0x206/0x840
[  340.799314]  ? __pfx_kthread+0x10/0x10
[  340.799390]  ret_from_fork+0x48/0x80
[  340.799433]  ? __pfx_kthread+0x10/0x10
[  340.799507]  ret_from_fork_asm+0x1a/0x30
[  340.799599]  </TASK>
[  342.070039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  342.074336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  342.076524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  342.081689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  342.085493] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  342.087762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  342.202487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  342.205527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  342.207673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  342.211849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  342.214930] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.217067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.273070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.282485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.288614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.304365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.310344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.317558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.357602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.365270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.367220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.375415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.383206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.397723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.400266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.409844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.418487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.423120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.428801] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  342.431145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.436066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  342.440750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.442563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.450492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  342.462140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.471281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.473078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  342.498241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  342.502322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.541414] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.567606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.575251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.577793] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  342.585373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  342.613381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.646384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.648394] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.649926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  344.109268] Bluetooth: hci0: command tx timeout
[  344.237023] Bluetooth: hci1: command tx timeout
[  344.365121] Bluetooth: hci2: command tx timeout
[  344.559041] Bluetooth: hci3: command tx timeout
[  344.621026] Bluetooth: hci5: command tx timeout
[  344.621520] Bluetooth: hci6: command tx timeout
[  344.621933] Bluetooth: hci4: command tx timeout
[  344.749016] Bluetooth: hci7: command tx timeout
[  346.157068] Bluetooth: hci0: command tx timeout
[  346.285057] Bluetooth: hci1: command tx timeout
[  346.413214] Bluetooth: hci2: command tx timeout
[  346.605042] Bluetooth: hci3: command tx timeout
[  346.669080] Bluetooth: hci6: command tx timeout
[  346.669579] Bluetooth: hci4: command tx timeout
[  346.670079] Bluetooth: hci5: command tx timeout
[  346.797158] Bluetooth: hci7: command tx timeout
[  348.205016] Bluetooth: hci0: command tx timeout
[  348.333030] Bluetooth: hci1: command tx timeout
[  348.461094] Bluetooth: hci2: command tx timeout
[  348.653157] Bluetooth: hci3: command tx timeout
[  348.717044] Bluetooth: hci6: command tx timeout
[  348.717071] Bluetooth: hci5: command tx timeout
[  348.717501] Bluetooth: hci4: command tx timeout
[  348.845218] Bluetooth: hci7: command tx timeout
[  350.253130] Bluetooth: hci0: command tx timeout
[  350.380998] Bluetooth: hci1: command tx timeout
[  350.509022] Bluetooth: hci2: command tx timeout
[  350.702086] Bluetooth: hci3: command tx timeout

VM DIAGNOSIS:
07:18:48  Registers:
info registers vcpu 0
RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=ffffed100d9c6c4b
RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10
R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001
R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056241e0d7090 CR3=000000000d14c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000c0001518c0000000c0001492c0
XMM02=000000c0001493e0000000c0001493b0 XMM03=000000c0000e9a20000000c000149410
XMM04=000000c000148480000000c000148450 XMM05=000000c000148990000000c000148960
XMM06=000000c0001489f0000000c0001489c0 XMM07=000000c000148a50000000c000148a20
XMM08=000000c000148ab0000000c000148a80 XMM09=000000c000148ae0000000c00008f5c0
XMM10=000000c000148b40000000c000148b10 XMM11=000000c000148ba0000000c000148b70
XMM12=000000c00014e580000000c000148bd0 XMM13=000000c000132c30000000c000132c00
XMM14=000000c000132c90000000c000132c60 XMM15=000000c00013be40000000c00008f2c0
info registers vcpu 1
RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20
R8 =0000000000000000 R9 =ffffed100165a046 R10=000000000000002d R11=2d2d2d2d2d2d2d2d
R12=000000000000002d R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150
RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005577deefbe20 CR3=000000000ecd4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffff000056241e106890
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000056241e0f6780000056241e0ff6a0
XMM06=000056241e0f58d00000000300000000 XMM07=00000000000000000000000000000000
XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000