Warning: Permanently added '[localhost]:43815' (ECDSA) to the list of known hosts. 2025/01/27 12:57:51 fuzzer started 2025/01/27 12:57:51 dialing manager at localhost:40883 syzkaller login: [ 78.438619] cgroup: Unknown subsys name 'net' [ 78.541599] cgroup: Unknown subsys name 'cpuset' [ 78.568014] cgroup: Unknown subsys name 'rlimit' [ 85.216375] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 12:58:11 syscalls: 203 2025/01/27 12:58:11 code coverage: enabled 2025/01/27 12:58:11 comparison tracing: enabled 2025/01/27 12:58:11 extra coverage: enabled 2025/01/27 12:58:11 setuid sandbox: enabled 2025/01/27 12:58:11 namespace sandbox: enabled 2025/01/27 12:58:11 Android sandbox: enabled 2025/01/27 12:58:11 fault injection: enabled 2025/01/27 12:58:11 leak checking: enabled 2025/01/27 12:58:11 net packet injection: enabled 2025/01/27 12:58:11 net device setup: enabled 2025/01/27 12:58:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 12:58:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 12:58:11 USB emulation: enabled 2025/01/27 12:58:11 hci packet injection: enabled 2025/01/27 12:58:11 wifi device emulation: enabled 2025/01/27 12:58:11 802.15.4 emulation: enabled 2025/01/27 12:58:11 fetching corpus: 0, signal 0/0 (executing program) 2025/01/27 12:58:12 starting 8 fuzzer processes 12:58:12 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x4008810) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8f9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004001) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, r0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff81}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c800}, 0x24000004) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24080800}, 0x40040) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x30110000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '+-\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) socketpair(0x15, 0x2, 0x80000001, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xec, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000080}, 0x48040) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r4) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x90, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xe}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}]}, 0x90}}, 0x40000) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x80, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '!\\}#\\(*\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'IPVS\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) socketpair(0x2b, 0x5, 0x3ff, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000e80)=0x3, &(0x7f0000000ec0)=0x2) syz_io_uring_setup(0x26bb, &(0x7f0000000f00)={0x0, 0x132d, 0x0, 0x2, 0x2b4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000f80), &(0x7f0000000fc0)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000001000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65}, 0x6f) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x60, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20044004) 12:58:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) inotify_init1(0x80800) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) recvfrom$unix(r1, &(0x7f00000001c0)=""/11, 0xb, 0x0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0x1, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000002c0)=0x8000, &(0x7f0000000300)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000340)={0x5, 0x5, 0x1, 0x6, 0x4, 0x5}) recvmmsg$unix(r2, &(0x7f0000001d00)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/248, 0xf8}], 0x3, &(0x7f0000000600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)}, {&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000000840)=""/130, 0x82}], 0x3, &(0x7f0000000940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/167, 0xa7}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x3, 0x61, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x7510, &(0x7f0000001dc0)={0x0, 0x2a20, 0x20, 0x2, 0x7a, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001e40)=0x0, &(0x7f0000001e80)) r9 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000001ec0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r7, 0x0, r9}, 0x6) inotify_rm_watch(r3, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000012) socketpair(0x2, 0x5, 0x2, &(0x7f0000002040)) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000002180)={&(0x7f0000002080)="a09ace1048b4acc7d52e0cafe040ee08fa04a3ac7b761e1332595b833ae7fca4716954971737684c11329e18413395ba90542fd2e37ac753abcc338e67b079913fe09ab66f869d36ec2118d7fded3456a4d71458ecc6fa8af55e476d0a7446408d3c2fb2c8ae44f36ab0ce49abeb134b4c0a4faa51f16c3e410f6d0e6d504b51de7028fc889b592b22aaf7ed853f7354ca5ccf65f910040768198bdd527095623275f626ffcd7c6d044c7e4e132755dc8d9d442b8ff35620738fa536c9f5a654a463d4472c144d", 0xc7}) socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r6, &(0x7f0000002740)={&(0x7f00000021c0), 0x6e, &(0x7f0000002680)=[{&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/240, 0xf0}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002400)=""/136, 0x88}, {&(0x7f00000024c0)=""/173, 0xad}, {&(0x7f0000002580)=""/193, 0xc1}], 0x6, &(0x7f0000002700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x40000000) 12:58:12 executing program 3: clock_getres(0x3, &(0x7f0000000000)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) clock_gettime(0x1, &(0x7f0000000080)) clock_gettime(0x4, &(0x7f00000000c0)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/188, 0xbc}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000600)=""/44, 0x2c}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000680)=""/98, 0x62}], 0x3, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000a00)=""/174, 0xae}, {&(0x7f0000000ac0)=""/166, 0xa6}], 0x3, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x3, 0x40000000, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000d40)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/sys/bus/mipi-dsi', 0x200, 0x11e) mount_setattr(r3, &(0x7f0000000d80)='./file0\x00', 0x900, &(0x7f0000000e00)={0x84, 0xa, 0x80000, {r5}}, 0x20) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000e40), 0x80, 0x0) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) clock_settime(0x5, &(0x7f0000000e80)={0x77359400}) clock_gettime(0x2, &(0x7f0000000ec0)) clock_gettime(0x1, &(0x7f0000000f00)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6efb203fd1b024b1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x61a}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7966}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setns(r1, 0x0) clock_nanosleep(0x3, 0x0, &(0x7f00000010c0), &(0x7f0000001100)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001140), 0x18080, 0x0) sendmsg$unix(r7, &(0x7f0000001400)={&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001200)="0e36dc6fa33e7ec144c2e45253ec7e52734c6aea9271682de0b058024afbc341a1c82c74db6c5c0952d5cebd539e070108a4f34024953c5333b14e5cd8330e116dc651b3f22e43cae2476b623db6087a561e5bf9b8f0a55f5803b356286656ecbb3b1c4120178ab7158b6a7be6ce7184fca7b9de89f268fef5623050c513c1a3c79809f85ee1f895738d11d11e6051acf4bbd05a82ab14067b4921", 0x9b}, {&(0x7f00000012c0)="041190762182c7352d67c6411b1dfa1da52ce58768b08497c2ae673765baa55a61484c0d9237eb37391eff42452f56fd436e966aa644cd786b4aa5e241da7ae8a73cf2823623ebadcffd2aadc5af857c7f4d537f1182bf1a68a1de3ddcd1b79af459d29c552c34a66261f419fab144adf6c7bfe9f5846cbcdd45", 0x7a}, {&(0x7f0000001340)="b5e35d6c47cd4044d9013318037e4e5c98c7bb12c5973994dfc25c", 0x1b}], 0x3, &(0x7f00000013c0), 0x0, 0x48840}, 0x0) 12:58:12 executing program 2: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400500, 0x0) socketpair(0x22, 0x1, 0x8001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x6f, &(0x7f0000000140)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0xa, 0x80, 0x0, 'queue0\x00', 0x7}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) r5 = getpgid(0x0) r6 = getegid() sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)="81501ba385f1e9f646268146021b4f8ec75782474b219c7a48308ec19ec426ac59e6d78cf67e6132355a93a4ca9229135820b45cfd758dae1e832f0bac359a87962ac1141a0ee60e7d930f1ef5836ba734841d4b89f246028906088affe90a5050591f5b7c53928af36ea8d49ab402286c197300aea7b2d3695d4a5871114447fbbb88adea93971417b15dc925bb71712548bc72fcff304fbf8c3e890c", 0x9d}, {&(0x7f00000003c0)="632c5e82f7a014d32daff5c158f705f95e771a09f574580afd8fded49587590c64f4319fcd433414dc0d6ade6769c13986f689a2f60018331ffe7a91b9b6303e0d11e2397265331e3eb93a7b36a9439e14330fd261532e65c0a2f99f84030ba2b572e3b5aa41b7f8931d0c36f52ee93bf4054cac3011af7351afb3a11e117878025b7a9c379d0383437ed9506c21a688b32fe7a0c8e83c12f565481aa618e87568f9cd5d3b3de2cda7db6532e0e9ee709cad231e2d5f616c8d98f16f9662b18b32e945caa82e2e", 0xc7}, {&(0x7f00000004c0)="4b436382ed8f540edaf4851ac6520720934a3cf31c0749aa4221d66c16646685816b55bf6c832bbfc164a1bd971698ca417724573dcc114c775d5e14d3f3bbbb154d325bbb2f63f32571d5ea59b143cb4be1a789f354168a37aa41b011f6a9b17ed1561cbf1e348fbb9255cf36733e5da24f47093cc4c53820b6161ad242a2c6a9fb6d7b74d9cc86d5e2c800b21f7b4a01d285c37469ab19e09675ef6723c77c3e35803600edd4ab72b5574996499ca4f7a9bbf3fb8602f0a83e30419fd06b39333d3fbfb1", 0xc5}], 0x3, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}], 0x20, 0x10}, 0x20000080) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000680), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000006c0)={0x0, 0x8, 0x6}) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000840)={&(0x7f0000000740)=""/254, 0xfe}) connect$bt_sco(r1, &(0x7f0000000880)={0x1f, @none}, 0x8) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000008c0)=0x7f, 0x4) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000900)) recvmsg$unix(r1, &(0x7f0000000f80)={&(0x7f0000000940), 0x6e, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/131, 0x83}, {&(0x7f0000000b40)=""/243, 0xf3}, {&(0x7f0000000c40)=""/226, 0xe2}, {&(0x7f0000000d40)=""/187, 0xbb}, {&(0x7f0000000e00)=""/60, 0x3c}], 0x7, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x40000000) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000001000)=0x63, 0x2) 12:58:12 executing program 4: ptrace$getsig(0x4202, 0xffffffffffffffff, 0x40, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0xeaff, 0x9, 0x401, 0x8, 0x4, 0x2}) ptrace$setsig(0x4203, 0x0, 0xe02, &(0x7f0000000100)={0x15, 0xffffffff, 0x6}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) ptrace$getsig(0x4202, 0x0, 0x3d, &(0x7f00000001c0)) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000240)={0xfffffffffffff801, 0x0, 0xa}, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000780)={{0x5, 0x1}, 0x0, 0x7fffffff, 0x6, {0x3, 0x9}, 0x4, 0x1f}) r0 = socket(0x27, 0x5, 0xec44) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004}, 0x24008041) r1 = syz_open_dev$vcsu(&(0x7f00000009c0), 0x9, 0x80040) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x48000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000b00)={0x5, 0x4, 0x1, 'queue0\x00', 0x10001}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x20048080) r3 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r3, &(0x7f0000000e00)={0xff, 0x0, 0x1}, &(0x7f0000000e40)=[{}]) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000ec0), 0x20200, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000f00)={'erspan0\x00'}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040001) [ 98.861896] audit: type=1400 audit(1737982692.416:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:58:12 executing program 7: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x10000, 0x2, 0x0, 'queue0\x00', 0x8000}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0xc6, 0x6, 0x3, {0x9}, 0x2, 0x4}) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/195, &(0x7f0000000280)=0xc3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x4, 0x7f}, 0x0, 0x400, 0x0, {0x6, 0x4}, 0x1, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x5, 0xe6, 0xf5, 0x41, 0x0, 0x101}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10041) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000400)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000440)={0x7, 0x0, 'client0\x00', 0x4, "d890c7dfd0791069", "e28fa26c0a3bf501fdec020e4f2e80d2c0dfa1ee8508ade4bbb84ea25a1d4dc6", 0x81, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000500)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000b, 0x8010, 0xffffffffffffffff, 0x10000000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000580)=0x3ff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x86002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000600)) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000680), &(0x7f00000006c0)=0x2) pipe(&(0x7f0000000700)) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) 12:58:12 executing program 5: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm', 0xc2303, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffe}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x59}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb00e}]}, 0x100}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x7, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x804) r3 = syz_open_dev$vcsa(&(0x7f0000000480), 0xff, 0x2) write$tun(r3, &(0x7f00000004c0)={@void, @val={0x2, 0x4, 0x2, 0x3e, 0x45, 0x2}, @mpls={[{0x9c0dc, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1000}, {0x1, 0x0, 0x1}], @generic="062a8c55d55c1da98d9aa01fabdfcc436ef02398e0b3a4e817a36f97aeebc2b1c62688d0a80a87a2fa015d0b2154ac19c80ee5"}}, 0x4d) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000540)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x3e) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040819}, 0x4002) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000700)=0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/xhci_hcd', 0x103802, 0x185) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000780)=0x7f) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8801}, 0x9d4) sendmsg$unix(r6, &(0x7f0000000c80)={&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000980)="edd07ffa25feb66bc546e42bcc8754ac2ed22e8e29fa52137eb7148ea1f78b25c51a4f424b6510a0ad2c12023d6ea2f3b1e34239112ae779226f4f3862aff32f9b78b10b55e5c827b66cb98f41b50f5ab584de7b86749208445da144bb37d951f750857ca166c266c83d97ee500a315e88ab7ee44f846f22e5588fa1c3a1018dded4eff4e722b90f6ca6fd1e6a654b3b18bbc8cd019322b14b945ca5fc20926eaf2c54d4a77d9db93d8bc81be8e74022807ddb6b2101bc9517ddea75474114d88ec0a6079fca1285e4221cf0d174ad97", 0xd0}, {&(0x7f0000000a80)="3c0be3a7db33d8a1469f283c6be6a9a2d9792285a11817f46f75f41ea80ef64d4ad9c28ebbcdf57a6569313c6345c0928573fe9b1d258683000cb070186ca41a2370c0802834ecb9a9344bfe387693822b", 0x51}, {&(0x7f0000000b00)="d1ffb33569e0504e3be152512ed9aa3695cc232939c32ada22b71573e186bbabebfcd22d59b2bda3fbdcd0d04ed644e46ae8a5fafc07e28a2c5576bbee3192a7df4b205eda29d22bda0a92ab88a861173eac70f498c1a6bd23fab114f3973890703efdea82948d6fb1bd8e2c8f5d7038e80902360c11b6856ac95d76b430a66f574100d0d7f6ba5bcf", 0x89}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x60, 0x801}, 0x44000) 12:58:12 executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000006040)=@req={0x28, &(0x7f0000006000)={'veth1_to_bridge\x00', @ifru_addrs=@can={0x1d, 0x0}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000006140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006100)={&(0x7f0000006080)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000006280)={&(0x7f00000061c0)={0xb4, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd479}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x20d0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000006380)=@req={0x28, &(0x7f0000006340)={'caif0\x00', @ifru_data=&(0x7f0000006300)="618238df16c511dbc5e553d60d36c709b9d496a68de2690b5c2d85e51392367c"}}) pipe(&(0x7f00000063c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000006540)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006500)={&(0x7f0000006440)={0xb0, 0x0, 0x107, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa51}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x29508556}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = socket(0x10, 0x4, 0x3f) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000006600)=@buf={0x77, &(0x7f0000006580)="08e27a111f92214127751fb2eccb97ef2f015e0f3b3a4c13e9166ab7bf97a238b1ea27846d9ad6640e7ff4e2ff4cc7c23ace50e989031c1b00f5a1ab73c8a182d6eb7aac39aa44127cc97da203e8226949b81560fbbc25c59516b105b6e5e30e4d248ce042e94d1eb33d30a9358e3449077c00c866dd2a"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000006640)=0x6e, 0x4) connect$unix(r2, &(0x7f0000006680)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006700), r4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000006740)={0x1ff, 0x0, 0x6, 0x8, 0x7, 0x7}) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000006940)={&(0x7f00000067c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006900)={&(0x7f0000006800)={0xd0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8090}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006980)) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000006a80)={&(0x7f00000069c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3431}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000006ac0), 0x130400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000006b00)={0x1f, 0x1, 'client0\x00', 0x6, "c5f6b457367003cc", "e2fb9c4349d18c3b67fa0b7baeccdbdfe40a6b0dc947da1889dff2f73ce22451", 0xff, 0x3f}) recvfrom$unix(r4, &(0x7f0000006bc0)=""/15, 0xf, 0x2001, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000006c00)=""/45, 0x2d, 0x40, &(0x7f0000006c40)=@file={0x1, './file0\x00'}, 0x6e) [ 100.139964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.144225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.147258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.153146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.156263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.157705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.185166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.187870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.189940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.192229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.194967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.195990] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.197090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.200972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.202350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.203672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.205180] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.208665] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.339992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.341825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.346146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.347258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.350220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.351566] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.352270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.353469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.361038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.377719] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 100.379905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.404025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.406020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 100.416120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 100.417921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.438299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.443461] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.449615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.459430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 100.467107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 100.467805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.474632] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.476721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.490401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 100.494191] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 100.549360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.552331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 100.565270] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 100.572029] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 100.573208] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 102.220441] Bluetooth: hci1: command tx timeout [ 102.220868] Bluetooth: hci0: command tx timeout [ 102.284285] Bluetooth: hci2: command tx timeout [ 102.475890] Bluetooth: hci3: command tx timeout [ 102.539844] Bluetooth: hci4: command tx timeout [ 102.603891] Bluetooth: hci6: command tx timeout [ 102.603922] Bluetooth: hci5: command tx timeout [ 102.668082] Bluetooth: hci7: command tx timeout [ 104.268012] Bluetooth: hci1: command tx timeout [ 104.268528] Bluetooth: hci0: command tx timeout [ 104.332865] Bluetooth: hci2: command tx timeout [ 104.524902] Bluetooth: hci3: command tx timeout [ 104.590920] Bluetooth: hci4: command tx timeout [ 104.652213] Bluetooth: hci6: command tx timeout [ 104.652256] Bluetooth: hci5: command tx timeout [ 104.716818] Bluetooth: hci7: command tx timeout [ 106.316005] Bluetooth: hci1: command tx timeout [ 106.316040] Bluetooth: hci0: command tx timeout [ 106.379844] Bluetooth: hci2: command tx timeout [ 106.571842] Bluetooth: hci3: command tx timeout [ 106.635918] Bluetooth: hci4: command tx timeout [ 106.699855] Bluetooth: hci6: command tx timeout [ 106.700868] Bluetooth: hci5: command tx timeout [ 106.763933] Bluetooth: hci7: command tx timeout [ 108.363936] Bluetooth: hci1: command tx timeout [ 108.364110] Bluetooth: hci0: command tx timeout [ 108.429191] Bluetooth: hci2: command tx timeout [ 108.619857] Bluetooth: hci3: command tx timeout [ 108.683906] Bluetooth: hci4: command tx timeout [ 108.747868] Bluetooth: hci5: command tx timeout [ 108.747910] Bluetooth: hci6: command tx timeout [ 108.811910] Bluetooth: hci7: command tx timeout [ 162.199094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.200953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.203575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.206166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.212159] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.214008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.458973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.463952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.464947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.467177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.470935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.475014] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.590538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.592037] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.592837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.594417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.596384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.597355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.597637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.601276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.602567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.606230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.606295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.615923] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.617334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.621194] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.622412] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.623288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.633942] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.653352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.653387] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.686449] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.696855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.703113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.704445] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.709962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.711684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.712685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.714672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.716013] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 162.717032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.722977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.724112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.734950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.737053] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.737986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.751049] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.752023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 164.235856] Bluetooth: hci0: command tx timeout [ 164.492879] Bluetooth: hci1: command tx timeout [ 164.619870] Bluetooth: hci4: command tx timeout [ 164.684820] Bluetooth: hci3: command tx timeout [ 164.748066] Bluetooth: hci6: command tx timeout [ 164.748974] Bluetooth: hci2: command tx timeout [ 164.811995] Bluetooth: hci5: command tx timeout [ 164.875993] Bluetooth: hci7: command tx timeout [ 166.285794] Bluetooth: hci0: command tx timeout [ 166.539890] Bluetooth: hci1: command tx timeout [ 166.667867] Bluetooth: hci4: command tx timeout [ 166.731847] Bluetooth: hci3: command tx timeout [ 166.797671] Bluetooth: hci2: command tx timeout [ 166.798786] Bluetooth: hci6: command tx timeout [ 166.860378] Bluetooth: hci5: command tx timeout [ 166.923827] Bluetooth: hci7: command tx timeout [ 168.331997] Bluetooth: hci0: command tx timeout [ 168.587941] Bluetooth: hci1: command tx timeout [ 168.715962] Bluetooth: hci4: command tx timeout [ 168.779921] Bluetooth: hci3: command tx timeout [ 168.844610] Bluetooth: hci6: command tx timeout [ 168.845485] Bluetooth: hci2: command tx timeout [ 168.908254] Bluetooth: hci5: command tx timeout [ 168.971980] Bluetooth: hci7: command tx timeout [ 170.379868] Bluetooth: hci0: command tx timeout [ 170.635846] Bluetooth: hci1: command tx timeout [ 170.763912] Bluetooth: hci4: command tx timeout [ 170.828010] Bluetooth: hci3: command tx timeout [ 170.891837] Bluetooth: hci2: command tx timeout [ 170.892266] Bluetooth: hci6: command tx timeout [ 170.955882] Bluetooth: hci5: command tx timeout [ 171.019946] Bluetooth: hci7: command tx timeout [ 225.116189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.119869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.122208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.127053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.129586] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.131875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.191484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.199355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.205139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.210636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.214568] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.219657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.320633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.331191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.338437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.353212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.356477] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.358673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.442418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.446150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.451205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.457054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.464172] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.468030] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.610355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.628400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.630892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.632771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.633595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.637178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.656275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.657417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.661090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.662579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.706290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.717085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.719267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.727100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.729488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.734967] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.739216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.755012] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.758276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.766926] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.767982] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.773385] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.773747] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.795706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.148073] Bluetooth: hci0: command tx timeout [ 227.275834] Bluetooth: hci1: command tx timeout [ 227.403821] Bluetooth: hci2: command tx timeout [ 227.531819] Bluetooth: hci3: command tx timeout [ 227.723841] Bluetooth: hci4: command tx timeout [ 227.852246] Bluetooth: hci7: command tx timeout [ 227.852818] Bluetooth: hci5: command tx timeout [ 227.979846] Bluetooth: hci6: command tx timeout [ 229.197804] Bluetooth: hci0: command tx timeout [ 229.324282] Bluetooth: hci1: command tx timeout [ 229.452072] Bluetooth: hci2: command tx timeout [ 229.580139] Bluetooth: hci3: command tx timeout [ 229.772456] Bluetooth: hci4: command tx timeout [ 229.901816] Bluetooth: hci7: command tx timeout [ 229.901870] Bluetooth: hci5: command tx timeout [ 230.030823] Bluetooth: hci6: command tx timeout [ 231.243873] Bluetooth: hci0: command tx timeout [ 231.372881] Bluetooth: hci1: command tx timeout [ 231.499849] Bluetooth: hci2: command tx timeout [ 231.627883] Bluetooth: hci3: command tx timeout [ 231.820925] Bluetooth: hci4: command tx timeout [ 231.948115] Bluetooth: hci5: command tx timeout [ 231.949068] Bluetooth: hci7: command tx timeout [ 232.076244] Bluetooth: hci6: command tx timeout [ 233.291949] Bluetooth: hci0: command tx timeout [ 233.419808] Bluetooth: hci1: command tx timeout [ 233.547790] Bluetooth: hci2: command tx timeout [ 233.677781] Bluetooth: hci3: command tx timeout [ 233.868055] Bluetooth: hci4: command tx timeout [ 233.995828] Bluetooth: hci5: command tx timeout [ 233.996323] Bluetooth: hci7: command tx timeout [ 234.123886] Bluetooth: hci6: command tx timeout [ 287.261626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.267889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.271519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.279901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.283243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.287334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.450132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.453154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.454956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.459922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.462760] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.464598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.514059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.517214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.521603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.528175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.560254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.564281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.643293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.657465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.659986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.705174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.716647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.719393] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.724255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.742659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.748612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.752445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.763013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.765114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.771069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.778866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.784135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.792182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.797184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.806451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.822063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.838880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.844920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.845136] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.849396] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 287.851359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.854293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.856241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.861009] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.862445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.880969] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 287.893203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.355976] Bluetooth: hci0: command tx timeout [ 289.484782] Bluetooth: hci1: command tx timeout [ 289.611853] Bluetooth: hci2: command tx timeout [ 289.867822] Bluetooth: hci3: command tx timeout [ 289.933219] Bluetooth: hci5: command tx timeout [ 290.060810] Bluetooth: hci7: command tx timeout [ 290.061925] Bluetooth: hci4: command tx timeout [ 290.061991] Bluetooth: hci6: command tx timeout [ 291.405204] Bluetooth: hci0: command tx timeout [ 291.531852] Bluetooth: hci1: command tx timeout [ 291.659808] Bluetooth: hci2: command tx timeout [ 291.915878] Bluetooth: hci3: command tx timeout [ 291.981767] Bluetooth: hci5: command tx timeout [ 292.109798] Bluetooth: hci4: command tx timeout [ 292.110300] Bluetooth: hci7: command tx timeout [ 292.111065] Bluetooth: hci6: command tx timeout [ 293.451816] Bluetooth: hci0: command tx timeout [ 293.579866] Bluetooth: hci1: command tx timeout [ 293.707896] Bluetooth: hci2: command tx timeout [ 293.964889] Bluetooth: hci3: command tx timeout [ 294.028910] Bluetooth: hci5: command tx timeout [ 294.155920] Bluetooth: hci6: command tx timeout [ 294.156428] Bluetooth: hci7: command tx timeout [ 294.156926] Bluetooth: hci4: command tx timeout [ 295.500963] Bluetooth: hci0: command tx timeout [ 295.628880] Bluetooth: hci1: command tx timeout [ 295.756792] Bluetooth: hci2: command tx timeout [ 296.011883] Bluetooth: hci3: command tx timeout [ 296.075813] Bluetooth: hci5: command tx timeout [ 296.204805] Bluetooth: hci4: command tx timeout [ 296.205243] Bluetooth: hci7: command tx timeout [ 296.205638] Bluetooth: hci6: command tx timeout [ 346.089032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.089795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.075236] [ 347.075468] ====================================================== [ 347.075992] WARNING: possible circular locking dependency detected [ 347.076508] 6.13.0-next-20250124 #1 Not tainted [ 347.076909] ------------------------------------------------------ [ 347.079016] kworker/u8:0/11 is trying to acquire lock: [ 347.081345] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 347.082231] [ 347.082231] but task is already holding lock: [ 347.082716] ffff888026db8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 347.083569] [ 347.083569] which lock already depends on the new lock. [ 347.083569] [ 347.084238] [ 347.084238] the existing dependency chain (in reverse order) is: [ 347.084850] [ 347.084850] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 347.085413] __mutex_lock+0x13d/0xb50 [ 347.085815] wiphy_register+0x1b2e/0x25d0 [ 347.086249] ieee80211_register_hw+0x23a4/0x3d60 [ 347.086725] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 347.087225] init_mac80211_hwsim+0x389/0x870 [ 347.087698] do_one_initcall+0xf9/0x640 [ 347.088118] kernel_init_freeable+0x53d/0x7a0 [ 347.088575] kernel_init+0x1e/0x2d0 [ 347.088940] ret_from_fork+0x48/0x80 [ 347.089313] ret_from_fork_asm+0x1a/0x30 [ 347.089737] [ 347.089737] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 347.090267] __lock_acquire+0x29fd/0x4580 [ 347.090700] lock_acquire+0x19b/0x520 [ 347.091102] __mutex_lock+0x13d/0xb50 [ 347.091505] unregister_netdevice_many_notify+0x1612/0x1c80 [ 347.092051] unregister_netdevice_queue+0x224/0x2e0 [ 347.092532] _cfg80211_unregister_wdev+0x57b/0x700 [ 347.093015] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 347.093492] ieee80211_unregister_hw+0x55/0x3a0 [ 347.093946] hwsim_exit_net+0x3a0/0x730 [ 347.094346] ops_exit_list+0xb3/0x180 [ 347.094732] cleanup_net+0x546/0xad0 [ 347.095119] process_one_work+0x8ee/0x1a10 [ 347.095557] worker_thread+0x674/0xe70 [ 347.095970] kthread+0x3ab/0x720 [ 347.096334] ret_from_fork+0x48/0x80 [ 347.096708] ret_from_fork_asm+0x1a/0x30 [ 347.097139] [ 347.097139] other info that might help us debug this: [ 347.097139] [ 347.097786] Possible unsafe locking scenario: [ 347.097786] [ 347.098280] CPU0 CPU1 [ 347.098668] ---- ---- [ 347.099064] lock(&rdev->wiphy.mtx); [ 347.099406] lock(rtnl_mutex); [ 347.099900] lock(&rdev->wiphy.mtx); [ 347.100431] lock(rtnl_mutex); [ 347.100741] [ 347.100741] *** DEADLOCK *** [ 347.100741] [ 347.101237] 4 locks held by kworker/u8:0/11: [ 347.101611] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 347.102484] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 347.103328] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 347.104107] #3: ffff888026db8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 347.104984] [ 347.104984] stack backtrace: [ 347.105360] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 347.105398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 347.105420] Workqueue: netns cleanup_net [ 347.105461] Call Trace: [ 347.105471] [ 347.105482] dump_stack_lvl+0xca/0x120 [ 347.105542] print_circular_bug+0x47b/0x750 [ 347.105588] check_noncircular+0x2e9/0x3c0 [ 347.105631] ? __pfx_check_noncircular+0x10/0x10 [ 347.105672] ? hlock_class+0x4e/0x130 [ 347.105703] ? mark_lock+0xac/0xed0 [ 347.105744] ? srso_return_thunk+0x5/0x5f [ 347.105803] ? lockdep_lock+0xba/0x1b0 [ 347.105861] ? __pfx_lockdep_lock+0x10/0x10 [ 347.105923] __lock_acquire+0x29fd/0x4580 [ 347.105977] ? __pfx___lock_acquire+0x10/0x10 [ 347.106020] ? lock_release+0x20f/0x6f0 [ 347.106065] ? __pfx_lock_release+0x10/0x10 [ 347.106113] lock_acquire+0x19b/0x520 [ 347.106156] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 347.106205] ? __pfx_lock_acquire+0x10/0x10 [ 347.106250] ? srso_return_thunk+0x5/0x5f [ 347.106305] ? lock_release+0x20f/0x6f0 [ 347.106349] ? srso_return_thunk+0x5/0x5f [ 347.106404] ? lock_is_held_type+0x9e/0x120 [ 347.106459] ? srso_return_thunk+0x5/0x5f [ 347.106518] __mutex_lock+0x13d/0xb50 [ 347.106570] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 347.106615] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 347.106662] ? srso_return_thunk+0x5/0x5f [ 347.106717] ? synchronize_rcu_expedited+0x38a/0x420 [ 347.106762] ? __pfx___mutex_lock+0x10/0x10 [ 347.106815] ? __pfx_autoremove_wake_function+0x10/0x10 [ 347.106870] ? srso_return_thunk+0x5/0x5f [ 347.106925] ? kasan_quarantine_put+0x84/0x1e0 [ 347.106987] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 347.107030] ? srso_return_thunk+0x5/0x5f [ 347.107090] unregister_netdevice_many_notify+0x1612/0x1c80 [ 347.107135] ? __virt_addr_valid+0x2e8/0x5d0 [ 347.107188] ? __pfx_lock_release+0x10/0x10 [ 347.107233] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 347.107279] ? find_held_lock+0x2c/0x110 [ 347.107337] ? srso_return_thunk+0x5/0x5f [ 347.107395] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 347.107456] ? srso_return_thunk+0x5/0x5f [ 347.107511] ? lock_release+0x20f/0x6f0 [ 347.107555] ? __pfx_lock_release+0x10/0x10 [ 347.107598] ? srso_return_thunk+0x5/0x5f [ 347.107654] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 347.107701] ? srso_return_thunk+0x5/0x5f [ 347.107762] unregister_netdevice_queue+0x224/0x2e0 [ 347.107805] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 347.107849] ? up_write+0x195/0x520 [ 347.107904] _cfg80211_unregister_wdev+0x57b/0x700 [ 347.107956] ? srso_return_thunk+0x5/0x5f [ 347.108015] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 347.108054] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 347.108092] ? srso_return_thunk+0x5/0x5f [ 347.108148] ? srso_return_thunk+0x5/0x5f [ 347.108203] ? synchronize_rcu+0x1ff/0x260 [ 347.108245] ieee80211_unregister_hw+0x55/0x3a0 [ 347.108290] hwsim_exit_net+0x3a0/0x730 [ 347.108332] ? __pfx_hwsim_exit_net+0x10/0x10 [ 347.108373] ? srso_return_thunk+0x5/0x5f [ 347.108428] ? netdev_run_todo+0x788/0x1040 [ 347.108478] ? __pfx_hwsim_exit_net+0x10/0x10 [ 347.108521] ops_exit_list+0xb3/0x180 [ 347.108563] cleanup_net+0x546/0xad0 [ 347.108608] ? __pfx_cleanup_net+0x10/0x10 [ 347.108661] process_one_work+0x8ee/0x1a10 [ 347.108728] ? __pfx_process_one_work+0x10/0x10 [ 347.108786] ? srso_return_thunk+0x5/0x5f [ 347.108841] ? srso_return_thunk+0x5/0x5f [ 347.108897] ? move_linked_works+0x172/0x270 [ 347.108942] ? srso_return_thunk+0x5/0x5f [ 347.108997] ? assign_work+0x196/0x240 [ 347.109054] worker_thread+0x674/0xe70 [ 347.109112] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 347.109165] ? __pfx_worker_thread+0x10/0x10 [ 347.109225] kthread+0x3ab/0x720 [ 347.109277] ? __pfx_kthread+0x10/0x10 [ 347.109329] ? srso_return_thunk+0x5/0x5f [ 347.109384] ? finish_task_switch.isra.0+0x206/0x840 [ 347.109436] ? __pfx_kthread+0x10/0x10 [ 347.109490] ret_from_fork+0x48/0x80 [ 347.109521] ? __pfx_kthread+0x10/0x10 [ 347.109574] ret_from_fork_asm+0x1a/0x30 [ 347.109640] [ 349.206233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.210821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.214322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.219025] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.221671] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.224033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.396813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.398443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.400353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.401609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.404937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.407292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.408155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.409984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.410943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.419795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.424160] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.425376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.466111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.467335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.472369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.475290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.487935] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.491944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.529055] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.533996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.540266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.546836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.548341] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.549597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.553972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.555869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.562886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.567109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 349.569391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 349.573404] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.575773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.576460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.580440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.581830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.582944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.586831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.592102] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 349.594244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.599014] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 349.601413] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.614598] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 349.622926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.244872] Bluetooth: hci0: command tx timeout [ 351.437820] Bluetooth: hci1: command tx timeout [ 351.499762] Bluetooth: hci2: command tx timeout [ 351.564329] Bluetooth: hci4: command tx timeout [ 351.627895] Bluetooth: hci7: command tx timeout [ 351.691795] Bluetooth: hci3: command tx timeout [ 351.692827] Bluetooth: hci5: command tx timeout [ 351.693261] Bluetooth: hci6: command tx timeout [ 353.292762] Bluetooth: hci0: command tx timeout [ 353.483898] Bluetooth: hci1: command tx timeout [ 353.547855] Bluetooth: hci2: command tx timeout [ 353.611807] Bluetooth: hci4: command tx timeout [ 353.675833] Bluetooth: hci7: command tx timeout [ 353.739768] Bluetooth: hci5: command tx timeout [ 353.740267] Bluetooth: hci6: command tx timeout [ 353.740922] Bluetooth: hci3: command tx timeout [ 355.340817] Bluetooth: hci0: command tx timeout [ 355.532822] Bluetooth: hci1: command tx timeout [ 355.596848] Bluetooth: hci2: command tx timeout [ 355.659745] Bluetooth: hci4: command tx timeout [ 355.724866] Bluetooth: hci7: command tx timeout [ 355.788928] Bluetooth: hci3: command tx timeout [ 355.789354] Bluetooth: hci6: command tx timeout [ 355.790107] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:02:20 Registers: info registers vcpu 0 RAX=000000e2f0218ac8 RBX=0000000000000000 RCX=00000000000006e0 RDX=00000000000000e2 RSI=ffff88806ce28300 RDI=00000000000220f1 RBP=ffff88806ce28300 RSP=ffff888015fafe18 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=00000000000617f1 R11=0000000000000400 R12=00000000000220f1 R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce2cac0 RIP=ffffffff8131e4e5 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030b10 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffffb0ff000 CR3=00000000167a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd0000000000000 XMM02=000000000000000041265db600000000 XMM03=00000000000000003ff0000000000000 XMM04=00000000000000003fd3333333333333 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001526046 R10=0000000000000077 R11=2f72656b726f776b R12=0000000000000077 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb7fca44670 CR3=000000000950e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=00000004ffffffff00005641e54b1b50 XMM06=000000000000006563697665642e3469 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000