Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:33934' (ECDSA) to the list of known hosts. 2025/01/28 06:26:22 fuzzer started 2025/01/28 06:26:22 dialing manager at localhost:40883 syzkaller login: [ 62.534022] cgroup: Unknown subsys name 'net' [ 62.624575] cgroup: Unknown subsys name 'cpuset' [ 62.652533] cgroup: Unknown subsys name 'rlimit' [ 67.310939] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 06:26:39 syscalls: 203 2025/01/28 06:26:39 code coverage: enabled 2025/01/28 06:26:39 comparison tracing: enabled 2025/01/28 06:26:39 extra coverage: enabled 2025/01/28 06:26:39 setuid sandbox: enabled 2025/01/28 06:26:39 namespace sandbox: enabled 2025/01/28 06:26:39 Android sandbox: enabled 2025/01/28 06:26:39 fault injection: enabled 2025/01/28 06:26:39 leak checking: enabled 2025/01/28 06:26:39 net packet injection: enabled 2025/01/28 06:26:39 net device setup: enabled 2025/01/28 06:26:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 06:26:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 06:26:39 USB emulation: enabled 2025/01/28 06:26:39 hci packet injection: enabled 2025/01/28 06:26:39 wifi device emulation: enabled 2025/01/28 06:26:39 802.15.4 emulation: enabled 2025/01/28 06:26:39 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 06:26:41 starting 8 fuzzer processes 06:26:41 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002300)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/173, 0xad}, {&(0x7f00000010c0)=""/7, 0x7}, {&(0x7f0000001100)=""/49, 0x31}, {&(0x7f0000001140)=""/3, 0x3}, {&(0x7f0000001180)=""/86, 0x56}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f00000012c0)=""/55, 0x37}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000023c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000003640)=[{&(0x7f0000002400)=""/32, 0x20}, {&(0x7f0000002440)=""/193, 0xc1}, {&(0x7f0000002540)=""/223, 0xdf}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000003680)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000003700)={{0x1, 0x1, 0x18, r3, {r5, r7}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000003740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000003780)={0x2, 0x80, 0x0, 0x9, 0x24, 0x0, 0x0, 0x4, 0x84020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xff, 0x6}, 0x6, 0x0, 0x6, 0x2, 0x29, 0x7, 0x6, 0x0, 0x386de91b, 0x0, 0x6}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003800), 0x68000, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000003840)='.)%\x00', 0x0, r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000003880)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r10, 0x5) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000003900)={0x0, @can, @generic={0x2b, "77e7d44bf22bf2ca767cfe7184dc"}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0x1f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000038c0)='xfrm0\x00', 0x1, 0x7, 0x7}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003980), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f00000039c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) r13 = openat$cgroup_devices(r11, &(0x7f0000003a00)='devices.deny\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r13) eventfd(0x1) 06:26:41 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x12}, 0x1) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048040}, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x158, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x144, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9314f4d9e2d9149605300463ec02b22bd0c1e0f73b545fb1a678a3c01d933024"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1ffe6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x71fa1e7db8e14c51}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x19cb40ac}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8080}, 0x20008805) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x408006}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r7, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000b00)=@buf={0xa2, &(0x7f0000000a40)="54a895e475cbc7d7eaf09af15ab33a3009e66dbd55b1b3999720bb898fa115ef7b43e35cda501eca0abf7021e5baefde18758b41d4e013ebbb86181f1e01f0f083c073642cc898fed6d24a735a0408458019e63b5d23663428287b813dcb808a89395e0f1de9f447732141d092d30ec014db98c918152f41cccd94473ea98b1bd80b7a55dd75a0821069243330a6bb2697f993b69024c8e8d0729a1a1a8a385605d3"}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000b40)) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4040001) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 06:26:41 executing program 3: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x29, 0x1, 0x9, 0x0, 0x0, 0x81260, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x2, 0xfffffffffffffffa}, 0x2, 0x8, 0x8, 0x7, 0x9, 0x78f5, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r0, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000001c0)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x18c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x41a}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7a}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb55372a5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x66}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x3f}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000004) r6 = fsmount(r3, 0x1, 0x4) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) 06:26:41 executing program 2: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000003880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xed}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000038c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000003900), 0x111280, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003940)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000003980)=0x1) r4 = io_uring_setup(0x7afe, &(0x7f00000039c0)={0x0, 0xb2d7, 0x0, 0x3, 0x3bf, 0x0, r0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000003a40), 0x181000, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003a80), 0x4000, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x20) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000003ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000003b00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b40), 0xc0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000003b80)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003bc0), r6) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000003c00)=0x74c) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000003c80)=""/185) 06:26:41 executing program 4: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1a) r2 = syz_io_uring_setup(0x3dcb, &(0x7f0000000240)={0x0, 0x3885, 0x2, 0x2, 0x1f8, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000de2000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0x7, 0x0, 0x8, 0x0, 0xea9167466f282883}, 0x20) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000380)=0xfffffe00) shmget(0x3, 0x4000, 0x1, &(0x7f0000d6c000/0x4000)=nil) r4 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x384, 0x0, 0x1, 0x7, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x94}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88a8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x108, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85f5}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7e00}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x340}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x713}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "443cba95258e92ebe0ee773d31415d90a163db57466de1c5d559ab1cdcc0cee18358"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "4364540cdbacf88a291ae90f7fe89bf634e11602e7ed1455cc3f3b"}}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x384}}, 0x20040004) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000840)) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x22c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x79857474}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @mcast1, 0xec8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x91}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb28e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @private2, 0x54b6}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x400, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40090c4}, 0x4040084) r5 = msgget(0x2, 0xd82) msgsnd(r5, &(0x7f0000000c00)={0x2, "1f6ca1b1ddfeb093854c50414f4ce40435f99d76d94bd0921f03c64e7d344000f70ad10c654a81fdad0519512121a77c8700b397376cf4263c21affd115bc98d14b3dd6deb019a07c68745a8163bf1ded4bbe3fa0505f2feef2041fd704c0d"}, 0x67, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) r6 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x7f, 0x9, 0x3f, 0x8, 0x0, 0xcdef, 0x4600, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000cc0), 0x5}, 0x1008, 0x5, 0x401, 0x1, 0x12e000, 0x8, 0x5, 0x0, 0x1, 0x0, 0xd3}, 0xffffffffffffffff, 0xc, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000e40)={0x80000000, 0x0, &(0x7f0000000e00)=[r7, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x8) 06:26:41 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000, 0x9}}, './file0\x00'}) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c3, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000100)=0x5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, @in_args={0x4}}, './file0/file0\x00'}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x10116, r6, 0x200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000240)) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {r5}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000300)) ioctl$HIDIOCGRDESC(r8, 0x90044802, &(0x7f0000000340)={0x747, "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"}) r9 = io_uring_setup(0x71ad, &(0x7f0000000ac0)={0x0, 0xc08e, 0x4, 0x1, 0x6b, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/86, 0x56}, {&(0x7f0000001c00)=""/169, 0xa9}, {&(0x7f0000001cc0)=""/182, 0xb6}, {&(0x7f0000001d80)=""/69, 0x45}, {&(0x7f0000001e00)=""/84, 0x54}, {&(0x7f0000001e80)=""/79, 0x4f}, {&(0x7f0000001f00)=""/142, 0x8e}, {&(0x7f0000001fc0)=""/250, 0xfa}], 0xa) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f00000021c0)={0xa, &(0x7f0000002180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000002200)={{0x1, 0x1, 0x18, r6, {r0}}, './file0/file0/file0\x00'}) [ 80.973203] audit: type=1400 audit(1738045601.461:7): avc: denied { execmem } for pid=272 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:26:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe27}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x91, 0x0, 0x4, 0xe, 0x14, "d0f36e5c32cdab339c0b75cd55bb9b53e6ff1870e2e9503df09e0404e88dbc127e7f7f5a554cf72402973f173804de657947af3ef0e424d6f4cd127873b83216", "f9c599c2ed9bddf649d4ea9786836ed5bdd201dc4a395498cd7c42bada77636a6b320d37b91a0081cd056ee80a7b3f535b0849eba4a35b1aebca301c6e81d1f4", "014c773443c627e68e589bdc42f2b002f7f2d829a38528254eef1254e760def7", [0x4, 0x2]}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x9b, 0x7f, 0x6, 0x1f, 0x0, 0xf5, 0x4009, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x1}, 0x4064, 0x9, 0x0, 0x3, 0x3f, 0x10001, 0x7fff, 0x0, 0x6, 0x0, 0x100000001}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x2a2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r2, r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x5ec}}, './file0\x00'}) pkey_alloc(0x0, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x87f, 0x7ff, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x67, 0x0, 0x7f, 0x0, 0x0, @remote, @remote, {[@noop, @timestamp={0x44, 0x14, 0xfe, 0x0, 0x8, [0x400, 0x101, 0x1, 0x101]}, @timestamp_addr={0x44, 0x14, 0x4f, 0x1, 0xb, [{@private=0xa010100, 0x81}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x9}]}, @noop]}}}}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002940)=[{&(0x7f0000000480)=""/66, 0x42}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/144, 0x90}, {&(0x7f00000016c0)=""/142, 0x8e}, {&(0x7f0000001780)=""/178, 0xb2}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/51, 0x33}, {&(0x7f0000002880)=""/84, 0x54}, {&(0x7f0000002900)=""/30, 0x1e}], 0xa) r9 = fsmount(r4, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000002a00)='tunl0\x00', &(0x7f0000002a40)='./file0\x00', r9) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r8, {0x8}}, './file0\x00'}) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000002ac0)='ns/cgroup\x00') 06:26:41 executing program 7: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='+\\\x00', &(0x7f00000000c0)='\x00', 0x0) r1 = syz_io_uring_complete(0x0) r2 = fsmount(r1, 0x1, 0xe) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3, 0xff}}, './file1\x00'}) r6 = eventfd(0x6) r7 = socket(0x27, 0x3, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000001c0), 0xffffffff7fffffff, 0x2000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000200)=[r6, r7, r2, r1, r1, r8]}, 0x6) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000002c0)='\x00', &(0x7f0000000300)='./cgroup/syz0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r8, {0x2}}, './file1\x00'}) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000003c0)='+\\\x00', &(0x7f0000000400)='.}{\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) ioctl$LOOP_SET_FD(r10, 0x4c00, 0xffffffffffffffff) [ 82.452008] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.455049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.458464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.464380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.469943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.472129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.588417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.592282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.595239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.606330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.632219] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.639251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.643866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.647885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.659067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.663533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.668150] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.671460] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.728667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.732226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.743438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.752524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.761543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.766258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.768365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.778938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.781558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.782619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.785301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.789644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.791314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.794435] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.796479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.801570] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.808683] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.809234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.819397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.824274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.827214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.831162] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.835443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.837471] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.843203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.856681] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.861159] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.865516] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.867611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.870932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.538376] Bluetooth: hci0: command tx timeout [ 84.731847] Bluetooth: hci2: command tx timeout [ 84.731863] Bluetooth: hci1: command tx timeout [ 84.858355] Bluetooth: hci5: command tx timeout [ 84.921917] Bluetooth: hci6: command tx timeout [ 84.921936] Bluetooth: hci4: command tx timeout [ 84.923231] Bluetooth: hci7: command tx timeout [ 84.923354] Bluetooth: hci3: command tx timeout [ 86.585917] Bluetooth: hci0: command tx timeout [ 86.777859] Bluetooth: hci2: command tx timeout [ 86.777923] Bluetooth: hci1: command tx timeout [ 86.905972] Bluetooth: hci5: command tx timeout [ 86.971005] Bluetooth: hci3: command tx timeout [ 86.971036] Bluetooth: hci4: command tx timeout [ 86.971082] Bluetooth: hci6: command tx timeout [ 86.972137] Bluetooth: hci7: command tx timeout [ 88.634803] Bluetooth: hci0: command tx timeout [ 88.825874] Bluetooth: hci2: command tx timeout [ 88.826900] Bluetooth: hci1: command tx timeout [ 88.954914] Bluetooth: hci5: command tx timeout [ 89.017891] Bluetooth: hci6: command tx timeout [ 89.018065] Bluetooth: hci7: command tx timeout [ 89.018390] Bluetooth: hci3: command tx timeout [ 89.019126] Bluetooth: hci4: command tx timeout [ 90.682208] Bluetooth: hci0: command tx timeout [ 90.873873] Bluetooth: hci1: command tx timeout [ 90.874726] Bluetooth: hci2: command tx timeout [ 91.001949] Bluetooth: hci5: command tx timeout [ 91.065933] Bluetooth: hci3: command tx timeout [ 91.066987] Bluetooth: hci7: command tx timeout [ 91.067214] Bluetooth: hci6: command tx timeout [ 91.067730] Bluetooth: hci4: command tx timeout [ 142.766559] [ 142.766773] ====================================================== [ 142.767287] WARNING: possible circular locking dependency detected [ 142.767799] 6.13.0-next-20250124 #1 Not tainted [ 142.768197] ------------------------------------------------------ [ 142.768704] kworker/u8:0/11 is trying to acquire lock: [ 142.770178] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.772252] [ 142.772252] but task is already holding lock: [ 142.773882] ffff8880342d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.775945] [ 142.775945] which lock already depends on the new lock. [ 142.775945] [ 142.777093] [ 142.777093] the existing dependency chain (in reverse order) is: [ 142.777694] [ 142.777694] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 142.778260] __mutex_lock+0x13d/0xb50 [ 142.778663] wiphy_register+0x1b2e/0x25d0 [ 142.779090] ieee80211_register_hw+0x23a4/0x3d60 [ 142.779554] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 142.780045] init_mac80211_hwsim+0x389/0x870 [ 142.780498] do_one_initcall+0xf9/0x640 [ 142.780921] kernel_init_freeable+0x53d/0x7a0 [ 142.781385] kernel_init+0x1e/0x2d0 [ 142.781752] ret_from_fork+0x48/0x80 [ 142.782132] ret_from_fork_asm+0x1a/0x30 [ 142.782556] [ 142.782556] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 142.783093] __lock_acquire+0x29fd/0x4580 [ 142.783514] lock_acquire+0x19b/0x520 [ 142.783902] __mutex_lock+0x13d/0xb50 [ 142.784298] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.784837] unregister_netdevice_queue+0x224/0x2e0 [ 142.785316] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.785799] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.786274] ieee80211_unregister_hw+0x55/0x3a0 [ 142.786726] hwsim_exit_net+0x3a0/0x730 [ 142.787129] ops_exit_list+0xb3/0x180 [ 142.787517] cleanup_net+0x546/0xad0 [ 142.787903] process_one_work+0x8ee/0x1a10 [ 142.788342] worker_thread+0x674/0xe70 [ 142.788751] kthread+0x3ab/0x720 [ 142.789129] ret_from_fork+0x48/0x80 [ 142.789500] ret_from_fork_asm+0x1a/0x30 [ 142.789924] [ 142.789924] other info that might help us debug this: [ 142.789924] [ 142.790573] Possible unsafe locking scenario: [ 142.790573] [ 142.791061] CPU0 CPU1 [ 142.791446] ---- ---- [ 142.791829] lock(&rdev->wiphy.mtx); [ 142.792174] lock(rtnl_mutex); [ 142.792662] lock(&rdev->wiphy.mtx); [ 142.793205] lock(rtnl_mutex); [ 142.793509] [ 142.793509] *** DEADLOCK *** [ 142.793509] [ 142.794008] 4 locks held by kworker/u8:0/11: [ 142.794385] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 142.795254] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 142.796090] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 142.796872] #3: ffff8880342d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.797748] [ 142.797748] stack backtrace: [ 142.798131] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 142.798167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.798189] Workqueue: netns cleanup_net [ 142.798229] Call Trace: [ 142.798238] [ 142.798250] dump_stack_lvl+0xca/0x120 [ 142.798308] print_circular_bug+0x47b/0x750 [ 142.798353] check_noncircular+0x2e9/0x3c0 [ 142.798393] ? lock_repin_lock+0x207/0x320 [ 142.798451] ? __pfx_check_noncircular+0x10/0x10 [ 142.798491] ? hlock_class+0x4e/0x130 [ 142.798521] ? mark_lock+0xac/0xed0 [ 142.798560] ? __pfx_lock_repin_lock+0x10/0x10 [ 142.798621] ? lockdep_lock+0xba/0x1b0 [ 142.798677] ? __pfx_lockdep_lock+0x10/0x10 [ 142.798737] __lock_acquire+0x29fd/0x4580 [ 142.798790] ? __pfx___lock_acquire+0x10/0x10 [ 142.798832] ? lock_release+0x20f/0x6f0 [ 142.798875] ? __pfx_lock_release+0x10/0x10 [ 142.798922] lock_acquire+0x19b/0x520 [ 142.798964] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.799012] ? __pfx_lock_acquire+0x10/0x10 [ 142.799055] ? srso_return_thunk+0x5/0x5f [ 142.799110] ? lock_release+0x20f/0x6f0 [ 142.799152] ? srso_return_thunk+0x5/0x5f [ 142.799206] ? lock_is_held_type+0x9e/0x120 [ 142.799260] ? srso_return_thunk+0x5/0x5f [ 142.799318] __mutex_lock+0x13d/0xb50 [ 142.799368] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.799413] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.799458] ? srso_return_thunk+0x5/0x5f [ 142.799511] ? synchronize_rcu_expedited+0x38a/0x420 [ 142.799555] ? __pfx___mutex_lock+0x10/0x10 [ 142.799607] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.799661] ? srso_return_thunk+0x5/0x5f [ 142.799715] ? kasan_quarantine_put+0x84/0x1e0 [ 142.799775] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.799809] ? srso_return_thunk+0x5/0x5f [ 142.799867] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.799912] ? __virt_addr_valid+0x2e8/0x5d0 [ 142.799964] ? __pfx_lock_release+0x10/0x10 [ 142.800008] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 142.800053] ? find_held_lock+0x2c/0x110 [ 142.800109] ? srso_return_thunk+0x5/0x5f [ 142.800165] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 142.800225] ? srso_return_thunk+0x5/0x5f [ 142.800278] ? lock_release+0x20f/0x6f0 [ 142.800322] ? __pfx_lock_release+0x10/0x10 [ 142.800364] ? srso_return_thunk+0x5/0x5f [ 142.800417] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.800464] ? srso_return_thunk+0x5/0x5f [ 142.800523] unregister_netdevice_queue+0x224/0x2e0 [ 142.800565] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 142.800608] ? up_write+0x195/0x520 [ 142.800661] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.800712] ? srso_return_thunk+0x5/0x5f [ 142.800777] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.800815] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 142.800853] ? srso_return_thunk+0x5/0x5f [ 142.800907] ? srso_return_thunk+0x5/0x5f [ 142.800960] ? synchronize_rcu+0x1ff/0x260 [ 142.801002] ieee80211_unregister_hw+0x55/0x3a0 [ 142.801046] hwsim_exit_net+0x3a0/0x730 [ 142.801087] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.801126] ? srso_return_thunk+0x5/0x5f [ 142.801180] ? netdev_run_todo+0x788/0x1040 [ 142.801229] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.801270] ops_exit_list+0xb3/0x180 [ 142.801312] cleanup_net+0x546/0xad0 [ 142.801355] ? __pfx_cleanup_net+0x10/0x10 [ 142.801407] process_one_work+0x8ee/0x1a10 [ 142.801471] ? __pfx_lock_acquire+0x10/0x10 [ 142.801515] ? __pfx_process_one_work+0x10/0x10 [ 142.801572] ? srso_return_thunk+0x5/0x5f [ 142.801626] ? move_linked_works+0x172/0x270 [ 142.801670] ? srso_return_thunk+0x5/0x5f [ 142.801723] ? assign_work+0x196/0x240 [ 142.801779] worker_thread+0x674/0xe70 [ 142.801836] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.801887] ? __pfx_worker_thread+0x10/0x10 [ 142.801946] kthread+0x3ab/0x720 [ 142.801996] ? __pfx_kthread+0x10/0x10 [ 142.802047] ? srso_return_thunk+0x5/0x5f [ 142.802100] ? finish_task_switch.isra.0+0x206/0x840 [ 142.802151] ? __pfx_kthread+0x10/0x10 [ 142.802203] ret_from_fork+0x48/0x80 [ 142.802234] ? __pfx_kthread+0x10/0x10 [ 142.802285] ret_from_fork_asm+0x1a/0x30 [ 142.802350] [ 144.706509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.711178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.714606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.716941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.720445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.721299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.723268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.725408] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.730300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.730920] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.733884] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.737060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.781105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.785062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.785149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.791969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.798100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.799874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.804421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.804433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.807240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.808272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.811239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.811307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.871560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.875511] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.883187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.928611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.935039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.936324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.939262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.950982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.952971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.964412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.968524] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.980525] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.982519] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.989243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.991013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.997867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.001399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.009053] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.010442] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.023008] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.035336] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.039068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.045976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.053722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.809932] Bluetooth: hci1: command tx timeout [ 146.810509] Bluetooth: hci0: command tx timeout [ 146.873916] Bluetooth: hci3: command tx timeout [ 146.939805] Bluetooth: hci2: command tx timeout [ 147.001821] Bluetooth: hci4: command tx timeout [ 147.065875] Bluetooth: hci7: command tx timeout [ 147.066395] Bluetooth: hci5: command tx timeout [ 147.258825] Bluetooth: hci6: command tx timeout [ 148.858829] Bluetooth: hci1: command tx timeout [ 148.859289] Bluetooth: hci0: command tx timeout [ 148.921844] Bluetooth: hci3: command tx timeout [ 148.987871] Bluetooth: hci2: command tx timeout [ 149.049957] Bluetooth: hci4: command tx timeout [ 149.113882] Bluetooth: hci7: command tx timeout [ 149.114333] Bluetooth: hci5: command tx timeout [ 149.305782] Bluetooth: hci6: command tx timeout [ 150.908182] Bluetooth: hci1: command tx timeout [ 150.908634] Bluetooth: hci0: command tx timeout [ 150.970347] Bluetooth: hci3: command tx timeout [ 151.033824] Bluetooth: hci2: command tx timeout [ 151.098012] Bluetooth: hci4: command tx timeout [ 151.161997] Bluetooth: hci7: command tx timeout [ 151.162453] Bluetooth: hci5: command tx timeout [ 151.353788] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:27:43 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff85d067a0 RCX=ffffffff81509004 RDX=ffffffff85d067a8 RSI=0000000000000004 RDI=ffff88800c14fd40 RBP=1ffff11001829fa4 RSP=ffff88800c14fd18 R8 =0000000000000001 R9 =ffffed1001829fa8 R10=0000000000000003 R11=0000000000000001 R12=ffffffff85d067a8 R13=ffffffff85d067b0 R14=0000000000000000 R15=ffff88807c400000 RIP=ffffffff81509030 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd67c46aaf8 CR3=0000000009f0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=bd0a6d6aba9c08b444439915351cc44d XMM02=00000000000ff1b0ee7587d5db12e8e3 XMM03=0000000000133950f9980df3bdc2dbad XMM04=7d9c3adc866e5e2600000000000ae988 XMM05=9f165a4fe6c971ad0000000000137d08 XMM06=7c8d2a4f1e787a980000000000137c68 XMM07=7c709ff5ed5a18460000000000133950 XMM08=a3797342f9eb3dd900000000000ff1b0 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001714046 R10=0000000000000034 R11=6f6c206863696877 R12=0000000000000034 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559f8a3cc240 CR3=000000000d13e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415ba27000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000