Warning: Permanently added '[localhost]:43090' (ECDSA) to the list of known hosts. 2025/01/30 04:25:23 fuzzer started 2025/01/30 04:25:23 dialing manager at localhost:36977 syzkaller login: [ 69.914962] cgroup: Unknown subsys name 'net' [ 70.027884] cgroup: Unknown subsys name 'cpuset' [ 70.075152] cgroup: Unknown subsys name 'rlimit' 2025/01/30 04:25:41 syscalls: 206 2025/01/30 04:25:41 code coverage: enabled 2025/01/30 04:25:41 comparison tracing: enabled 2025/01/30 04:25:41 extra coverage: enabled 2025/01/30 04:25:41 setuid sandbox: enabled 2025/01/30 04:25:41 namespace sandbox: enabled 2025/01/30 04:25:41 Android sandbox: enabled 2025/01/30 04:25:41 fault injection: enabled 2025/01/30 04:25:41 leak checking: enabled 2025/01/30 04:25:41 net packet injection: enabled 2025/01/30 04:25:41 net device setup: enabled 2025/01/30 04:25:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 04:25:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 04:25:41 USB emulation: enabled 2025/01/30 04:25:41 hci packet injection: enabled 2025/01/30 04:25:41 wifi device emulation: enabled 2025/01/30 04:25:41 802.15.4 emulation: enabled 2025/01/30 04:25:41 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 04:25:42 starting 8 fuzzer processes 04:25:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xf, 0x301000) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x57, 0x1000, 0x2, {0x5, 0x8}, {0x63d5, 0x400}, @period={0x5a, 0x200, 0x1, 0x4ab2, 0x40, {0x7ff, 0x1f, 0xfffc, 0x1f}, 0x9, &(0x7f0000000040)=[0x1f, 0x7fff, 0x759f, 0x81, 0x1, 0x1881, 0x0, 0x100, 0x20]}}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000000c0)=""/123) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140)=0xff26) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000001c0)={0xffffffff, 0x5, 0xf40, 0x3}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000200)=""/81) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/dma', 0x40080, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000002c0)=0x4, 0x4) pidfd_send_signal(r3, 0x23, &(0x7f0000000300)={0x36, 0x1}, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x57, 0x8, 0x5, {0x100, 0x7}, {0x8, 0x700}, @period={0x5c, 0xff7f, 0x1, 0x8, 0xa1, {0x5, 0xeca, 0x200, 0x5}, 0x6, &(0x7f0000000380)=[0x5, 0x7f, 0xc2c, 0x7fff, 0x1, 0x4]}}) connect$netlink(r2, &(0x7f0000000400)=@unspec, 0xc) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x505c01, 0x0) r5 = pidfd_getfd(r2, r4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000480)=""/4096) ioctl$PTP_PIN_GETFUNC(r5, 0xc0603d06, &(0x7f0000001480)={'\x00', 0x7f, 0x1, 0x7}) select(0x40, &(0x7f0000001500)={0x7, 0xfff, 0x5, 0x6, 0xbb2, 0x7, 0x1, 0x100}, &(0x7f0000001540)={0xffffffffffffffd6, 0x3, 0x886, 0x2, 0x0, 0x7ff, 0x4, 0x6}, &(0x7f0000001580)={0x2, 0x2, 0x10000, 0x9, 0x0, 0x7, 0x6, 0x6}, &(0x7f00000015c0)={0x77359400}) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000001600)={'\x00', 0x3, 0x0, 0xffff2ed4}) 04:25:42 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@private1, @in=@dev}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x80000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0xc2e5ad889b8e1195, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r5 = socket(0x29, 0x2, 0x3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x8, 0x6da5}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x801) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x82000040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f00000006c0)=@unspec, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20001000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8b8125adf84ebcf}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x401, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200c4010}, 0x404805d) connect$packet(r3, &(0x7f0000000940)={0x11, 0x1c, r4, 0x1, 0x34}, 0x14) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x48083, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x220, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) 04:25:42 executing program 2: r0 = clone3(&(0x7f00000011c0)={0x80012200, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x3c}, &(0x7f00000000c0)=""/160, 0xa0, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58) sched_setparam(r0, &(0x7f0000001240)=0xfffffffb) sched_setparam(r2, &(0x7f0000001280)=0x6) ptrace(0x11, r1) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f00000012c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/devices/kprobe', 0x400400, 0x2) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000001340)={'rose0', 0x32, 0x32}, 0x8) r5 = openat$cgroup_ro(r4, &(0x7f0000001380)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) pidfd_open(r2, 0x0) r6 = gettid() syz_open_procfs$userns(r6, &(0x7f00000013c0)) openat$cgroup_devices(r5, &(0x7f0000001400)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001440)='memory.pressure\x00', 0x2, 0x0) getsockname$packet(r5, &(0x7f0000001480)={0x11, 0x0, 0x0}, &(0x7f00000014c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001500)) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x40011) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040880}, 0x11) ioctl$PTP_PIN_GETFUNC(r5, 0xc0603d06, &(0x7f0000001780)={'\x00', 0x1ddce02, 0x2, 0x5}) 04:25:42 executing program 3: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x401) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x450c01, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x200, 0x2}, {0x1f, 0x49e4}, 0xb9, 0xa6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x60}, 0x1, 0x0, 0x0, 0x180}, 0x80) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}}, 0x404008a) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000640)={{0x8, 0x1}, {0x8, 0x1f}, 0xefc, 0x1}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000680)={0x2, 0x100, 0x3, 0x7, 0xc9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000700), r5) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000740), 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000780)={{0x1, 0xfffffefe, 0x7ae9e4b2, 0xa4, 0x3ff, 0x6}, 0x3d8, [0x2, 0x2, 0x4, 0x4b, 0x8000, 0x1, 0x91a9, 0x1, 0x6, 0x80000000, 0x0, 0x7ff000, 0x5, 0x2cda, 0xbd, 0x100, 0x2, 0x327f, 0x7f, 0x1, 0xc2ee, 0x1, 0x80000000, 0xe6f, 0x0, 0x5826, 0x2, 0x1, 0x80, 0x9, 0x77, 0x6, 0x96c5, 0x200, 0x6203, 0x0, 0x4, 0xfa, 0x7fffffff, 0x9, 0xfffffa84, 0x817, 0x5, 0x1, 0x2, 0x400, 0x1, 0x9, 0x81, 0x3, 0x1, 0x1, 0x7, 0x3, 0xfff, 0x0, 0x1f, 0x9, 0xffff6e02, 0x1, 0x7, 0x10000, 0xffff7fff, 0xff, 0x80000001, 0x7ff, 0x8, 0x94, 0x4, 0x1f9d40df, 0x200, 0x80000000, 0x600, 0x3, 0x4, 0x4, 0xfce, 0x4, 0x81, 0x3, 0xecd8, 0x3, 0x40, 0x28b, 0x1, 0x19, 0x9, 0xf0a, 0xb83, 0x7fff, 0x3f, 0x8, 0x8, 0x8001, 0xba, 0x8, 0x0, 0x20, 0x8, 0x2000, 0x8, 0x5, 0x4, 0xfffeffff, 0xe52c, 0x81, 0x5, 0x1, 0xf9ed, 0x3, 0x4, 0x9, 0xf84, 0x1, 0x1, 0x4, 0x0, 0x7, 0x200, 0x0, 0x172, 0x0, 0x4, 0x7, 0x1, 0x8000, 0x4, 0x8001, 0x0, 0xff, 0xfffffff7, 0x1, 0x2, 0x1, 0x5, 0xf9, 0x1000, 0x1, 0x8001, 0x2, 0x1, 0xa99c, 0x4, 0xd1f, 0x8000, 0x5, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x4, 0x2, 0x5a, 0x0, 0xd0bfdce, 0x6b, 0x19a, 0x8, 0x80, 0x72, 0x9, 0xd540000, 0x8a, 0x493, 0x7, 0x8, 0x77c3, 0xffffdf3b, 0x1, 0xfffffffb, 0x7, 0x8, 0xcd1f, 0x3, 0xe1, 0x8000, 0x8, 0x7, 0x7, 0x6, 0xcf, 0xffffffff, 0x401, 0xf968, 0xb03, 0x7fff, 0x0, 0x6, 0x1ff, 0x9, 0x9, 0x8, 0x401, 0x4, 0x0, 0x9, 0x4, 0x13a, 0x0, 0x1, 0x0, 0x101, 0x1, 0x4, 0x10001, 0x6a7c, 0x8, 0x8, 0x8, 0x401, 0x7, 0x2, 0x0, 0x7b08, 0x0, 0xffffff80, 0x8, 0x7ff, 0x8, 0x1000, 0x5, 0x6, 0x7, 0x80, 0x6, 0xfffffbff, 0x0, 0x7, 0x101, 0x7, 0xffffffff, 0x8, 0xd0, 0x1f, 0x7, 0x0, 0x8, 0x3, 0x8, 0x0, 0x0, 0x8c, 0x4, 0xdb9, 0x7, 0xf4d2, 0x80, 0x3f, 0x20, 0x3ff, 0xfb7, 0x27, 0x1f, 0x85e, 0x2, 0xb1b6, 0x101, 0x80, 0x2, 0x3, 0x7, 0x119, 0x4, 0x7, 0x0, 0x5, 0x8, 0x2, 0xd90, 0x2, 0xff, 0x4, 0x3, 0x20, 0xfffffffb, 0x8000, 0x1f00, 0x1, 0x1000, 0x1, 0x3, 0xb4, 0x9, 0x10001, 0x1, 0x3f, 0x400, 0xfffffff8, 0x2, 0x81, 0x80, 0x76b, 0x1f, 0x70da36fc, 0x101, 0xfff, 0x4, 0x1, 0xa32e, 0x401, 0xffff, 0x2, 0x4, 0x7ff, 0x3, 0x5, 0x7, 0x1f, 0xffff0001, 0x7, 0x6, 0xfb6d, 0x400, 0x5d28, 0x1f, 0x1ff, 0x6, 0x1f, 0x7, 0x20, 0x8, 0x0, 0x8, 0x7, 0x10001, 0xffff, 0x9, 0xfff, 0x1f, 0x7, 0x4, 0xe00, 0x9, 0xfc2, 0x80, 0x7, 0x4, 0x8, 0xd9fa, 0x7, 0x156, 0x5a, 0x1, 0x5, 0x8, 0x3, 0x1, 0x3, 0x6, 0x0, 0xfffffffa, 0xe2b2, 0x1, 0x8, 0x4, 0x7, 0x0, 0x7, 0x3, 0xaf, 0x8, 0x9, 0x8, 0x1f, 0x1, 0x3, 0xc9, 0xe94a, 0x8000, 0x96a, 0x8, 0xb46d, 0x19, 0x1, 0x7ff, 0x0, 0x80000000, 0x7fffffff, 0x1ff, 0x80000000, 0x7, 0xef, 0x1000, 0x1, 0x8000, 0x7, 0xfffffff7, 0x5, 0x4, 0x400, 0x8001, 0xad9, 0xbe900000, 0x2, 0x0, 0x3f, 0x9, 0x3ff, 0x2, 0x20, 0x0, 0xfff, 0x7, 0xa08a, 0x3, 0x5, 0xffff, 0x8, 0x10000, 0x5, 0x100, 0xa1c, 0x6, 0x2, 0x1, 0x2, 0x3, 0x3cc8, 0x3, 0x1200, 0x1f, 0xc46, 0x9, 0x600, 0x46, 0x2, 0x7fff, 0x1f, 0x2, 0x33d, 0x7, 0x7ff, 0x0, 0x40, 0xc0, 0x1, 0x3f, 0x2, 0x7, 0x1, 0x0, 0xfffffe00, 0x101, 0x8, 0x435, 0x1, 0x0, 0x4, 0x8, 0x0, 0x7ff, 0x9, 0x3, 0xa5, 0x400, 0x7, 0x6, 0x40, 0x4, 0x101, 0x2, 0x3cfb8eec, 0x7, 0x3, 0x0, 0x1, 0xfffffffa, 0x10000, 0x50000, 0xdc1, 0x2, 0x2, 0xfba, 0xa, 0xffffff4e, 0x2, 0xfff, 0x5, 0x800, 0x10000, 0x7, 0x5, 0x800, 0x10001, 0xffff, 0x6, 0x0, 0xffffffff, 0x3, 0x4, 0x4, 0x3, 0xfff, 0x7f, 0x3ff, 0x6, 0x24e, 0xff, 0x1, 0x51be, 0x3, 0x8, 0x7, 0x2, 0x7b1b, 0x6, 0x4, 0xfffffff9, 0xf065, 0x4, 0x976, 0x9, 0x0, 0xcf, 0x8, 0x4, 0x80, 0xfcd, 0x4, 0x7, 0x9, 0x4, 0xecc, 0x1000, 0xffffffff, 0x3, 0x6, 0x8001, 0x9, 0x1, 0xe8, 0x7, 0x0, 0x0, 0x4, 0x8000, 0x8000, 0x2, 0x8, 0x8, 0x3, 0x813a, 0x1, 0x6, 0xb0, 0x6, 0x5, 0x9, 0x9, 0x1ff, 0xa1e4, 0x1, 0x200, 0x20d2c2f0, 0x927, 0xffffffff, 0xfffffffd, 0x7f, 0x4, 0x200, 0xfffffff7, 0x2da6, 0x7fff, 0xcf, 0x0, 0x80000001, 0x5de, 0x6, 0x0, 0x1, 0x5, 0x3, 0xa53, 0x1f, 0x6, 0x1000, 0x0, 0x8, 0x0, 0x8, 0x1, 0x7fffffff, 0x800, 0xfd, 0x7, 0x1f, 0x5b, 0x9, 0x462beada, 0x783a, 0x101, 0x3ff, 0x9, 0x20, 0x5, 0xbc8f, 0x9, 0xfffeffff, 0x10001, 0x6, 0x9, 0x8, 0x240000, 0x81, 0x5, 0x6, 0x80, 0xb96, 0x100, 0x4, 0xc4e, 0x0, 0xa3, 0x100, 0x895, 0x5, 0x80, 0x2, 0xfff, 0x4, 0x5, 0x848472, 0x8000, 0x2, 0x0, 0xaa, 0x9, 0x9, 0xa7, 0x8, 0xb1, 0x5, 0x9, 0x65, 0x4, 0x5, 0x8, 0x800, 0xec, 0x1ff, 0x7, 0xffffff81, 0x7ff, 0xfffffff9, 0x0, 0x8, 0x100, 0x800, 0x81, 0x800, 0x4, 0x5, 0x1, 0x458c, 0x4, 0x80000000, 0x6, 0x139e, 0x0, 0x8, 0xffffffff, 0x2, 0x1ff, 0x8, 0x2c0, 0x80000000, 0x7, 0xfff, 0x5, 0xae1, 0x5, 0x6, 0x9, 0x5, 0xd05, 0x80, 0x9, 0xea3, 0x81, 0x4, 0x4, 0xffffffff, 0x0, 0x40, 0x26fd, 0x6, 0x80000001, 0xc1, 0x5, 0x2, 0x7f, 0x1ff, 0xffff, 0x2, 0x3, 0x0, 0x380, 0x2, 0x1, 0x80000001, 0x9, 0x0, 0x8, 0x4a500e33, 0x1000, 0xe7000000, 0x8, 0x74e59de4, 0x3, 0x81, 0x7ff, 0x40, 0x1, 0x4, 0x4, 0x6, 0xd9a1, 0x0, 0x200, 0xffffffc1, 0x1, 0x8, 0x40000000, 0x4, 0x1, 0x1, 0x10001, 0x8, 0xfff, 0x4, 0x4, 0x6, 0x10000, 0x3e, 0x2, 0x1ec6, 0x1f, 0x6, 0x7fff, 0xd4, 0x8001, 0x20, 0x1, 0x401, 0x101, 0x800, 0x1f, 0x800, 0x0, 0x101, 0x0, 0x3, 0x3ff, 0xcf8f, 0x85, 0x2, 0xffffffff, 0xfb65, 0x4, 0x1, 0x80000000, 0x1, 0x3ff, 0xe7, 0x3, 0x5, 0x20, 0x1, 0x10001, 0xfff, 0x478, 0x1000, 0xb82, 0x9, 0x1, 0x81, 0xdc, 0x5, 0x3, 0x2b9, 0x30000000, 0x200, 0x7, 0x6, 0x2, 0x0, 0x2, 0x1ff, 0x100, 0x8001, 0x8, 0x1c00000, 0x8000, 0x7, 0x5, 0x1000, 0xfffff800, 0x1000, 0xfffffffc, 0xfff, 0x6, 0x3, 0x80000001, 0x7, 0x5, 0x12, 0x3168, 0x2, 0x8000, 0x8000, 0xfffffffe, 0x1, 0x9, 0x2, 0x9, 0x6, 0x401, 0xffffffff, 0x1, 0x1, 0x8, 0x6, 0x6, 0x8, 0x7, 0x4, 0x0, 0x7, 0xffffffff, 0x2, 0x6, 0x4, 0x663b, 0x3, 0x5, 0x5, 0x115, 0x80, 0x7, 0x200, 0x5, 0x1f, 0x7, 0x5, 0x1, 0x7, 0x3, 0x3, 0xfff, 0x7f, 0x4, 0x10000, 0x0, 0x80000000, 0x3c, 0x7f8, 0x4, 0x8b9, 0xffffffff, 0x7, 0xdf85, 0x9, 0xfffffffb, 0x5, 0x1800000, 0x7, 0x8c, 0x80000001, 0x1, 0x7d456b89, 0xa44d, 0x4, 0x7ff, 0x0, 0x229, 0x0, 0x40, 0x0, 0x5, 0xc8, 0x2, 0x7f, 0xfffffff7, 0x7a, 0x9, 0x10000, 0x7fffffff, 0x101, 0x0, 0x9, 0x0, 0x9, 0xfff80000, 0x5, 0x80000000, 0x9, 0x2, 0x8, 0xfffffff7, 0x0, 0x3, 0x8, 0x3, 0xfffffffa, 0x1, 0x1ff, 0x4, 0x2, 0x7fffffff, 0x1, 0x6, 0x6, 0x1ff, 0x1f, 0x80000000, 0x9, 0x9, 0x2, 0x5a, 0xbd51, 0x1ff, 0x9, 0x9, 0x1, 0x80000001, 0x3ff, 0x2, 0x800, 0xdd06, 0x7f, 0x200, 0x8001, 0x4, 0xfffffffc, 0x1, 0x401, 0xffffffff, 0x1f, 0xe4b, 0x1b, 0x552a, 0x6, 0x400, 0x2, 0x401, 0x8, 0x8, 0x7, 0x5, 0x1, 0x0, 0x56a7, 0x6, 0x6, 0x1000, 0x5, 0x7fffffff, 0x81, 0xc69, 0x400, 0x0, 0x2f, 0x10000, 0x3, 0x4, 0x0, 0x1, 0xbebe, 0x9, 0x9, 0x7, 0x0, 0x5b, 0x28000, 0x8, 0x1, 0x5, 0xfffffff7, 0x9, 0x9, 0x200, 0x2, 0x3, 0x3, 0x7fff, 0x1, 0x9901, 0x9, 0x0, 0x1ff, 0x1, 0x800, 0x0, 0x8, 0x8080000, 0x8, 0x4, 0x8, 0x10000, 0x10001, 0x2, 0x5, 0x9c, 0xffff, 0x308, 0x5, 0x3ff, 0xb1a, 0x5, 0x3, 0xaf47, 0x8, 0x7, 0x30, 0x9, 0x601c, 0x81, 0xfff, 0x9, 0x8, 0x5, 0xf61, 0x4]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001b40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001880)={0x244, r7, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0x0, 0x8, 0x80000001}, {0x6a34, 0x8f, 0xb5, 0xfffffff9}, {0x9, 0x2, 0x9, 0x7}, {0x40, 0x81, 0x7a, 0x9}, {0x0, 0x7, 0x1, 0x5}, {0x6, 0x6, 0x0, 0x2}, {0xd6, 0xb7, 0x1, 0x1f}, {0x7, 0x1, 0x9, 0x8}, {0x7, 0xf8, 0x5, 0xfff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x70}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) [ 88.900774] audit: type=1400 audit(1738211142.689:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:25:42 executing program 4: ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0x4}) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000003c0)={0x8, 0x8}) eventfd(0x8) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c630e, 0x2}], 0x83, 0x0, &(0x7f0000000480)="859bd7d0b51ffca1fb4259b474bbd0d53bcef2e686ea773ec0206f652dca63cbde3f6c75e5f01f3913e249f146f2b7c972aa5f83bd5250d861a287b53206c432549e64358c8074405b4509bcc60f3c25d712078706a553e355077fc6fd31f30fdccd0b43c94543c922cc313fd0faaaca9eb4da5f89999701be01818b0fc516364b7d71"}) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000580)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) read$ptp(r1, &(0x7f0000000640)=""/144, 0x90) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x121800, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000740)={0x5, 0xa}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000780)={0xfffff000, 0x4}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000007c0)={0x2, 0x3, 0x6, 0xbf5, 0x5, 0x200}) r3 = syz_open_dev$evdev(&(0x7f0000000800), 0x400, 0x40000) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000840)={0x34685109}) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000880)) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000008c0)={0x130, 0x3, 0x5, 0xed}, 0x10) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000900)=""/245) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000a40)={0x57, 0x2df, 0x1, {0xff81, 0x9}, {0x4f, 0xfffd}, @period={0x6, 0x6, 0x4, 0x8000, 0x4, {0x66a, 0xfff, 0x400, 0x5}, 0x3, &(0x7f0000000a00)=[0x2, 0x2, 0x7]}}) 04:25:42 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}}}, &(0x7f0000000100)=0xe8) r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="b118be009eb1d822377f2fa695552a57a4b01a842bac59406d3188e1bb39deef855ac5eec49e1ec924218f36d39aa13f6f92840335486fb99548bbf9a0eee39899", 0x41, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r1, r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e8, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x6, 0x0, 0x7f}, {0xdad, 0x4, 0x0, 0x2}, {0x2, 0x1, 0x4}]}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fbf}}}]}}]}, 0x1e8}}, 0x40000) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket(0x22, 0xa, 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000680)=0x7fffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r5) getsockname$packet(r6, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r7 = openat$cgroup_ro(r6, &(0x7f0000000780)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000007c0)={0x3, 0x201, 0x2, 0x76400, 0x7ff, 0x12e}) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) connect$netlink(r6, &(0x7f0000000940)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000980)=0xfffff8d3) socket$netlink(0x10, 0x3, 0x14) keyctl$search(0xa, r2, &(0x7f00000009c0)='rxrpc\x00', &(0x7f0000000a00)={'syz', 0x1}, r2) socket(0xa, 0x3, 0x5) 04:25:42 executing program 6: connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x20000040) r3 = socket(0x23, 0x2, 0x3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000004) read$ptp(0xffffffffffffffff, &(0x7f0000000300)=""/123, 0x7b) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x807}, 0x4048000) r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r6, 0xc4c03d09, &(0x7f00000004c0)={0x3}) r7 = openat$cgroup_ro(r5, &(0x7f0000000980)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000009c0)={0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x8c4) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, &(0x7f0000000b80)={{0x2, 0x3, 0x5, 0x7, 0x9, 0x1000}, 0x216, [0xd8800000, 0x0, 0x7fff, 0x6, 0x101, 0x3, 0x2, 0x1, 0x81, 0x8, 0x5, 0x3ff, 0x10000, 0xfff, 0x6, 0x7, 0x1000000, 0x1f, 0x3, 0xfffffff9, 0x0, 0x4, 0x81, 0x8, 0xc0000, 0x6, 0x21, 0x42, 0x1, 0xfffffff7, 0x3, 0x4, 0x3, 0x3, 0x0, 0x0, 0x3, 0x0, 0x96, 0x8, 0x9, 0xffffffc0, 0x2, 0xec2, 0x0, 0x8, 0x0, 0x8, 0x7, 0x6, 0x9, 0xcbde, 0x7ff, 0x4e, 0x1, 0x5, 0x0, 0x0, 0x400, 0xfffeffff, 0xffff, 0x8, 0x0, 0x9, 0x2b5, 0x7, 0x3, 0x5, 0x81, 0x400, 0xe6, 0x5, 0x0, 0x800, 0xfffffffd, 0x0, 0x80, 0x101, 0x2, 0xaef, 0x5, 0x4, 0x551, 0x321f379, 0x8, 0x7ff, 0x4, 0x8, 0x7, 0x20, 0x3f, 0xae20, 0xffffffff, 0xe31, 0x3, 0x2, 0x8, 0x1000, 0x1, 0x4, 0x0, 0x6, 0x8001, 0xfffffffe, 0x80000000, 0x200, 0x8001, 0x0, 0x9, 0xff, 0x3f, 0xac, 0x5, 0x1, 0xfffffff9, 0x101, 0x3d98, 0xfffffff7, 0x9, 0x0, 0x5, 0x8, 0x7fffffff, 0x6, 0x8001, 0x1ff, 0xe11, 0x3ff, 0x80000000, 0x8, 0x6, 0x3, 0x0, 0x7, 0x8, 0x7f, 0x0, 0x8, 0xffff, 0x4, 0x7, 0x1, 0x1000, 0x3, 0x800, 0x7fffffff, 0xeac, 0x6, 0x81, 0x10001, 0x1, 0x56d9, 0x5, 0x0, 0x1, 0x9, 0x0, 0x0, 0x8000, 0xff, 0xa05, 0x94, 0xffff7fff, 0x394, 0x3, 0x9e, 0xffff8001, 0x10000, 0x401, 0x9, 0x2, 0x8e, 0x7fffffff, 0x7, 0x80000001, 0x5b9b, 0x5, 0x400, 0x3, 0x303, 0x401, 0x9, 0x10000, 0xfffffffc, 0x5, 0x2, 0x297e, 0x80000000, 0x3f, 0x7, 0x20, 0x0, 0xc1, 0x1ff, 0x3fffc00, 0x1, 0x1, 0x7fff, 0x80000000, 0x0, 0x0, 0x3f, 0x1, 0x5, 0x60b, 0x200040, 0x3f, 0x7fffffff, 0x4, 0x1, 0x7, 0x0, 0xa0, 0x7, 0x1, 0x7, 0x6, 0x8001, 0x4, 0x200, 0x800, 0xd949, 0x20000000, 0x9, 0x1, 0x1f, 0x6, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x9, 0xfffffffd, 0x4, 0x2, 0x3, 0x8001, 0x617, 0x2, 0x95d, 0x8, 0x401, 0xffff8001, 0x84d8, 0xffffffff, 0x0, 0x101, 0xffff, 0x9, 0x34fe, 0x4, 0x200, 0x6, 0xef, 0x80000000, 0x7, 0x4, 0x0, 0x8, 0x1, 0x8, 0x3, 0x5, 0x9, 0x9, 0x5, 0x2, 0x4, 0x1, 0x8, 0x7fffffff, 0xfff, 0x0, 0x5, 0xffffff87, 0x9, 0x2, 0x7, 0x3, 0x1f, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x606, 0x1, 0x8, 0x0, 0x7fff, 0x1800, 0x7, 0x0, 0x9, 0x2, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x7, 0x9, 0x4, 0x0, 0x5a, 0x40, 0x1f, 0x1, 0x20000, 0x9, 0x3cc00, 0x2, 0x7ff, 0x2, 0x7, 0x8, 0xfffffff7, 0x3, 0x3ff, 0xb74, 0x4, 0x40, 0x6, 0x1, 0xffffff81, 0x0, 0x6, 0x7d, 0x2, 0x9, 0x7, 0x1000, 0x800, 0x200, 0x7, 0x10001, 0x862, 0x1f, 0x800, 0x2, 0x6, 0x7, 0x4, 0x6, 0x7ff, 0x4f, 0x3, 0x3, 0xfb, 0x6, 0x1f, 0x1, 0x6, 0x2, 0xa58f, 0x1401, 0x176, 0xfff, 0xe8c, 0x200000, 0x4, 0xa3f, 0xfff, 0x7, 0x401, 0xffffffff, 0x0, 0x0, 0x7, 0x5c860b9c, 0x0, 0x2, 0x0, 0x1, 0x60f1, 0x80000001, 0x3, 0x9, 0x3f01, 0x80000000, 0x6, 0x0, 0x97a, 0x80000000, 0x81, 0x80, 0x10000, 0x4, 0x80000000, 0x40, 0x200, 0x3, 0x7, 0x3, 0x101, 0x8001, 0x800, 0x7f, 0x80000001, 0x6, 0x572, 0xa25, 0x1000, 0x10000, 0x7, 0x1000, 0x6, 0x9, 0x3df58417, 0x8, 0x80000000, 0x1, 0x1, 0x3, 0x5, 0xff, 0x5, 0x5, 0x2, 0x7a, 0x3, 0x9a84, 0x1000, 0xff, 0xeb, 0x3, 0x2, 0x471, 0x3, 0x0, 0x8001, 0xffff3d4a, 0x7, 0x5, 0x800, 0x8, 0x400, 0xfffffff8, 0x200, 0x80000000, 0x4, 0x80000001, 0x3, 0x6, 0x3, 0x7, 0x4, 0x9, 0x40, 0x4, 0x10001, 0x2, 0x1, 0x7fff, 0x8, 0x4, 0x100, 0xffff8c5e, 0x6, 0x7, 0x0, 0xb67, 0x7, 0x1, 0x8, 0x9, 0x5, 0x9, 0x8, 0x400000, 0x3, 0x6, 0xffff8001, 0x200, 0x5, 0x2, 0x3, 0x6, 0x9639, 0x7, 0x400, 0x7, 0x1, 0xa7e6, 0x82, 0x2, 0x2, 0x4, 0xffffffe0, 0x20, 0xfffffff8, 0x3f0000, 0x7f, 0x7, 0x7fff, 0x8, 0x4, 0x1, 0x0, 0x7, 0x0, 0x8c1, 0x6, 0x0, 0x2, 0x5, 0x5, 0x7f, 0x7bf8941b, 0x9, 0x0, 0x2, 0x8, 0x40, 0x6, 0x1, 0x8, 0x5, 0x10000, 0x5, 0xd5b, 0x1000, 0x9, 0xfd, 0x9, 0x1, 0x7fff, 0xe8e, 0x7, 0xa9, 0x0, 0xffffffff, 0x0, 0x9, 0xfffffff8, 0xfffffff9, 0x0, 0x4, 0x0, 0x101, 0x2, 0x3, 0x3, 0x7ff, 0x0, 0x200, 0x7f, 0xfffffeff, 0x1, 0x1f, 0xfffffff8, 0x8, 0x3ff, 0x101, 0x9, 0x0, 0x81, 0xf89, 0x7, 0x10000, 0x7, 0x7ff, 0xb9d6, 0xfffffff7, 0x9, 0x8, 0x1000, 0x2c1f0cff, 0xffff3953, 0x5, 0x1ff, 0xffffffff, 0x4, 0x1000, 0x2, 0x3, 0x8, 0x1f, 0x2, 0x7b, 0x100, 0x8, 0x401, 0xa80, 0x459d1fb0, 0x5, 0x9, 0x8, 0xfffffff9, 0x7fffffff, 0x20, 0x0, 0x3, 0x36c5, 0x3, 0x0, 0x8, 0x7, 0x0, 0xfffffffc, 0x1, 0x8001, 0x80000001, 0x4, 0x6, 0x800, 0x2, 0xfffffe17, 0x62c, 0xfffffffd, 0x8, 0x4, 0x3, 0x1, 0x800, 0xcc, 0x8, 0x10001, 0x3, 0x101, 0x4, 0x2, 0x4, 0x4, 0x0, 0x9, 0x1, 0x1, 0xb481, 0x2, 0x7, 0x24da, 0x3f, 0x9, 0xfc4, 0x4, 0x5, 0x1000, 0xd0b, 0x74426cc5, 0x9, 0x2, 0x2, 0xfffffffd, 0x7f, 0x20c, 0x4, 0x7, 0x4, 0x1ff, 0x800, 0xd727, 0x0, 0x4, 0x4c47300a, 0xfffff800, 0x0, 0x0, 0x9, 0xfd, 0x6, 0x400000, 0x7, 0xffffff4c, 0x1, 0x1, 0x5, 0x3, 0x2, 0x40000000, 0x2, 0x9, 0x2843, 0xffffba95, 0x2, 0x2, 0x3ff, 0x6, 0xde, 0x9d94, 0x5, 0x80000000, 0x7, 0x6, 0x4000000, 0xcc0, 0x5, 0x8, 0x200, 0x8000, 0x3, 0x2, 0x8, 0x7, 0x9, 0x1, 0xfffffffe, 0x7, 0x6, 0x3, 0x9, 0x0, 0x4b42, 0x3, 0x10001, 0x8, 0x7, 0x3, 0x1, 0x6, 0x8001, 0x5181, 0x6, 0x8, 0x1, 0x80, 0x1, 0x2, 0x1c0, 0x40, 0x101, 0x81, 0x7, 0x627b, 0x8000000, 0x8001, 0xffff, 0x4, 0x2, 0x1, 0x6, 0x7, 0x4, 0xff, 0x9, 0x7509, 0x401, 0x101, 0x401, 0x7, 0x3, 0x8000, 0x7, 0xfffffff9, 0x7, 0x8001, 0xaeb, 0x40, 0x3cd14b0a, 0xff, 0x3, 0x9, 0x5, 0x2, 0x5, 0x5, 0x1ff, 0x0, 0x62, 0x5, 0x1000, 0x99a, 0xfc, 0x28fc, 0x0, 0x5, 0x3, 0x801d, 0x8001, 0x1, 0x8, 0x4, 0x4, 0x2, 0x4, 0x5, 0x2, 0xfffffffe, 0x1ff, 0x1, 0x0, 0x4, 0x1000, 0x3, 0x7f2, 0x5, 0x80000001, 0x400, 0xe6a, 0x80000000, 0x3, 0x1, 0x7f, 0x7fff, 0x4ba, 0x5, 0x80, 0x4, 0x468a, 0x9, 0x5, 0x4528cd31, 0x9, 0x4d, 0x9, 0x7, 0xfffffd02, 0x8, 0x6, 0x603, 0x0, 0x9, 0x9, 0xffffffff, 0x40, 0x7, 0x1f, 0xffffffff, 0x1, 0x6, 0x3f, 0xc64, 0x9, 0x9, 0x200, 0xfffeffff, 0x9, 0x6, 0x5, 0x58, 0x4000000, 0x7, 0x5, 0x2, 0x101, 0x7, 0x800, 0x8001, 0x7fff, 0x0, 0x6, 0x4, 0x7, 0x3, 0xbc80, 0x0, 0x1, 0x4eb2, 0x1, 0xe75, 0x2, 0x400, 0x7, 0x3, 0x3390, 0x2, 0x1, 0x1, 0x1, 0x10001, 0x8000, 0x5, 0xf67, 0x1000, 0x7, 0x20, 0x9, 0xb7f, 0x1, 0xfffff801, 0x30, 0x101, 0x7fff, 0x9, 0x0, 0x800, 0x1, 0xffff, 0x1000, 0x7, 0x13, 0xed, 0x7ff, 0x7, 0x96, 0xfffffff8, 0x4, 0xffff, 0x3, 0x95, 0x20, 0x2, 0x80000000, 0x2, 0x8, 0x240000, 0x2, 0x6, 0x7, 0x8, 0x6, 0x7, 0x4, 0x9, 0x80000001, 0x9, 0x187b9678, 0xffffffff, 0x6c9, 0x20, 0x7, 0x15dc4dde, 0xffffffff, 0x96a, 0x1, 0x3, 0x4, 0x9, 0x39, 0x6, 0x8, 0x6a6, 0x3, 0x1000, 0x5, 0x9, 0x8, 0x1, 0x2, 0x1ff, 0x3, 0x0, 0x1000, 0x9, 0x480, 0x858, 0x4, 0x9, 0x89, 0x80000000, 0x9, 0x7, 0x5, 0x81, 0x1ff, 0x0, 0xffffff80, 0x1, 0x8, 0xd77, 0x87ad, 0x8, 0x7, 0x57c80, 0x7, 0x20, 0x7fffffff, 0x0, 0x5000, 0x80, 0x5, 0x9, 0x2, 0x89e3, 0x8, 0x0, 0x2, 0x3, 0x3, 0x8000, 0x9, 0x9, 0x3ff, 0x3, 0xd8d2, 0x7fff, 0x7fff, 0x8, 0xfffffff9, 0xff, 0x3, 0x3f, 0x8000, 0x5, 0x7f, 0x3ff, 0x0, 0x50b05de9, 0x1ff, 0x78, 0xed2, 0x9, 0x3, 0x70000000, 0x6, 0xffff8000, 0x4, 0x7f, 0x7551756b, 0x10001, 0x2, 0x2, 0x5, 0x0, 0x5, 0x81, 0x1, 0x62e, 0x81, 0x10001, 0xff, 0x6, 0x101, 0xffff, 0x1ff, 0x101, 0x1, 0x7, 0x1, 0x5]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001bc0)={r8, 0x0, r0, 0x4}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000001c00)=0x7f, 0x4) 04:25:42 executing program 7: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/13) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/kernel', 0x434440, 0x26) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/134) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x4, 0x90d5, 0x3f}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x14044095}, 0x4000081) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000440)={0x2, 0xffffffff, 0x4, 0x3ff, 0x7, 0x6}) process_madvise(r1, &(0x7f00000006c0)=[{&(0x7f0000000480)="bdec1a3ef2c50c5f7e8a67818f5dcc9538ec63289200aca46a724372c0caa3ac19114ef7598a94b958c284e86f1d3cc36cf4992c7f8de4d490f631f720330b", 0x3f}, {&(0x7f00000004c0)="6472d5c2e47fc743e771de2c66f088330945a5f1ce718166a400a457413e29dd9ccabdb3c657dd79cd52a81bdebd474a880b5d2312bf760fad7b812e3f7f2372a70d4cd9ff182fc8edad58f85a5d2e56add2de2e66c50762a428ba81e60e207cd62bf5382fb1bc7f853e46067619f23fcba1be0d0d995dfbb1d9c11948e2a308982b3da7659715", 0x87}, {&(0x7f0000000580)="36f084ec8b32e35151d7383a76ac8d15068dcab91672dd15234bb631c2488baaae4e2a2bf90a9c821f82c2461de6d8a5c1754f1e82f28464ae14935a58675748d057ecb2685a92793c0e64c6e7b2cf0225", 0x51}, {&(0x7f0000000600)="4d456f91e838d8f67fe89196571ae05b42b0378309ad41446a748acd4946e90f4a4cdb3135b7ca479a8b695a71fa5ef83d4f1d9af8d8c1e2263e7f1de0e368819a64b9d572b123b9a48e672d2e5a0730f965b199b657fd106a616940eccd1c79f4e2a47a4a73e22dbace6d1bb02d83a8149de612b643ee98e6d6e152198ca81fffc9b04ff4f6a35768d1cc821fb87335be39ad2a", 0x94}], 0x4, 0x5, 0x0) r2 = socket(0x6, 0xc4baedcd5eb1bf2f, 0xe8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14008810}, 0x4040000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/module/uhci_hcd', 0x40000, 0x10) openat$cgroup_freezer_state(r4, &(0x7f0000000980), 0x2, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000009c0)={0x6, 0x800, 0xfffffffc, 0x1, 0x3, 0xd6}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a40)='io.pressure\x00', 0x2, 0x0) [ 90.130166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.131457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.132490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.134619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.138323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.139531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.241223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.252498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.255484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.261625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.265587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.266663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.399161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.401308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.410319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.412346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.413630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.414130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.426413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.428464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.431506] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.433270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.434633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.437490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.460914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.479340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.480230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.482816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.497280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.508350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.511604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.517532] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.527890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.530909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.534834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.539506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.544305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.544597] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.547616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.559161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.561193] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.563060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.657827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.682216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.694825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.709467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.722664] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.726447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.205418] Bluetooth: hci0: command tx timeout [ 92.333138] Bluetooth: hci1: command tx timeout [ 92.461194] Bluetooth: hci2: command tx timeout [ 92.526191] Bluetooth: hci3: command tx timeout [ 92.591179] Bluetooth: hci6: command tx timeout [ 92.591208] Bluetooth: hci5: command tx timeout [ 92.591760] Bluetooth: hci4: command tx timeout [ 92.781125] Bluetooth: hci7: command tx timeout [ 94.253098] Bluetooth: hci0: command tx timeout [ 94.381193] Bluetooth: hci1: command tx timeout [ 94.509234] Bluetooth: hci2: command tx timeout [ 94.574174] Bluetooth: hci3: command tx timeout [ 94.639391] Bluetooth: hci5: command tx timeout [ 94.639435] Bluetooth: hci6: command tx timeout [ 94.639829] Bluetooth: hci4: command tx timeout [ 94.830089] Bluetooth: hci7: command tx timeout [ 96.302091] Bluetooth: hci0: command tx timeout [ 96.429094] Bluetooth: hci1: command tx timeout [ 96.558290] Bluetooth: hci2: command tx timeout [ 96.622231] Bluetooth: hci3: command tx timeout [ 96.686336] Bluetooth: hci6: command tx timeout [ 96.686806] Bluetooth: hci5: command tx timeout [ 96.687085] Bluetooth: hci4: command tx timeout [ 96.879064] Bluetooth: hci7: command tx timeout [ 98.349194] Bluetooth: hci0: command tx timeout [ 98.477201] Bluetooth: hci1: command tx timeout [ 98.605300] Bluetooth: hci2: command tx timeout [ 98.669160] Bluetooth: hci3: command tx timeout [ 98.733608] Bluetooth: hci5: command tx timeout [ 98.733652] Bluetooth: hci4: command tx timeout [ 98.734875] Bluetooth: hci6: command tx timeout [ 98.925162] Bluetooth: hci7: command tx timeout [ 152.726611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.732463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.734537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.737960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.742690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.744400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.746830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.758868] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.762463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.766736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.770814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.772913] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.773159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.775217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.777197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.803347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.820385] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.822311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.828459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.841285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.843592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.867359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.881404] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.884456] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.924944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.929753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.931665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.938839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.943648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.945497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.030755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.037763] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.051318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.053146] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.055187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.061974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.062222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.065778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.067387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.069745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.099557] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.101036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.110968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.115276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.118334] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.119570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.125209] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.126643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.797198] Bluetooth: hci1: command tx timeout [ 154.863232] Bluetooth: hci2: command tx timeout [ 154.864140] Bluetooth: hci0: command tx timeout [ 154.989273] Bluetooth: hci3: command tx timeout [ 155.054102] Bluetooth: hci4: command tx timeout [ 155.181208] Bluetooth: hci5: command tx timeout [ 155.181255] Bluetooth: hci7: command tx timeout [ 155.182237] Bluetooth: hci6: command tx timeout [ 156.845646] Bluetooth: hci1: command tx timeout [ 156.909211] Bluetooth: hci0: command tx timeout [ 156.909477] Bluetooth: hci2: command tx timeout [ 157.038275] Bluetooth: hci3: command tx timeout [ 157.103255] Bluetooth: hci4: command tx timeout [ 157.229310] Bluetooth: hci7: command tx timeout [ 157.229372] Bluetooth: hci5: command tx timeout [ 157.230269] Bluetooth: hci6: command tx timeout [ 158.895116] Bluetooth: hci1: command tx timeout [ 158.957410] Bluetooth: hci2: command tx timeout [ 158.958770] Bluetooth: hci0: command tx timeout [ 159.085201] Bluetooth: hci3: command tx timeout [ 159.149198] Bluetooth: hci4: command tx timeout [ 159.277199] Bluetooth: hci5: command tx timeout [ 159.277966] Bluetooth: hci7: command tx timeout [ 159.278828] Bluetooth: hci6: command tx timeout [ 160.941301] Bluetooth: hci1: command tx timeout [ 161.005107] Bluetooth: hci0: command tx timeout [ 161.005553] Bluetooth: hci2: command tx timeout [ 161.134041] Bluetooth: hci3: command tx timeout [ 161.197252] Bluetooth: hci4: command tx timeout [ 161.325276] Bluetooth: hci5: command tx timeout [ 161.325765] Bluetooth: hci7: command tx timeout [ 161.326280] Bluetooth: hci6: command tx timeout [ 214.904911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.907097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.908241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.912119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.914924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.916585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.940522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.952410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.964254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.971579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.976478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.977785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.977892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.982548] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.983700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.986887] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.988440] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.989264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.165716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.176701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.186640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.206273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.208532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.212551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.223931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.228682] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.264393] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.265755] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.278759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.306660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.311396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.313858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.317846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.321427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.325795] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.327687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.329683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.331823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.348780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.389126] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.389238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.398641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.400784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.417464] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.417777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.419752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.421303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.424320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.942336] Bluetooth: hci0: command tx timeout [ 217.070218] Bluetooth: hci2: command tx timeout [ 217.070348] Bluetooth: hci1: command tx timeout [ 217.389129] Bluetooth: hci4: command tx timeout [ 217.389293] Bluetooth: hci3: command tx timeout [ 217.455060] Bluetooth: hci5: command tx timeout [ 217.517813] Bluetooth: hci6: command tx timeout [ 217.517825] Bluetooth: hci7: command tx timeout [ 218.990072] Bluetooth: hci0: command tx timeout [ 219.117048] Bluetooth: hci2: command tx timeout [ 219.117144] Bluetooth: hci1: command tx timeout [ 219.437372] Bluetooth: hci4: command tx timeout [ 219.438093] Bluetooth: hci3: command tx timeout [ 219.502215] Bluetooth: hci5: command tx timeout [ 219.566296] Bluetooth: hci6: command tx timeout [ 219.566741] Bluetooth: hci7: command tx timeout [ 221.038162] Bluetooth: hci0: command tx timeout [ 221.165422] Bluetooth: hci1: command tx timeout [ 221.165484] Bluetooth: hci2: command tx timeout [ 221.485183] Bluetooth: hci3: command tx timeout [ 221.485294] Bluetooth: hci4: command tx timeout [ 221.549314] Bluetooth: hci5: command tx timeout [ 221.614046] Bluetooth: hci6: command tx timeout [ 221.614212] Bluetooth: hci7: command tx timeout [ 223.085145] Bluetooth: hci0: command tx timeout [ 223.213102] Bluetooth: hci1: command tx timeout [ 223.214132] Bluetooth: hci2: command tx timeout [ 223.533076] Bluetooth: hci4: command tx timeout [ 223.534226] Bluetooth: hci3: command tx timeout [ 223.597157] Bluetooth: hci5: command tx timeout [ 223.661277] Bluetooth: hci6: command tx timeout [ 223.662070] Bluetooth: hci7: command tx timeout [ 277.379522] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.386269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.389190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.396730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.400363] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.402433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.443722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.445572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.450349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.455372] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.457250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.458776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.502216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.509477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.512546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.518392] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.522396] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.524506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.581763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.586262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.595173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.601770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.609153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.620441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.740777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.749304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.751716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.753121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.777822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.782140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.786213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.793545] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.796884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.799930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.802165] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.805547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.822204] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.824459] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.833624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.881488] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.882887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.884622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.907357] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.910082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.911769] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.917339] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.919869] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.921741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.469079] Bluetooth: hci0: command tx timeout [ 279.533125] Bluetooth: hci1: command tx timeout [ 279.600195] Bluetooth: hci2: command tx timeout [ 279.661090] Bluetooth: hci3: command tx timeout [ 279.854082] Bluetooth: hci5: command tx timeout [ 279.981120] Bluetooth: hci4: command tx timeout [ 280.045081] Bluetooth: hci7: command tx timeout [ 280.109330] Bluetooth: hci6: command tx timeout [ 281.517058] Bluetooth: hci0: command tx timeout [ 281.581040] Bluetooth: hci1: command tx timeout [ 281.645236] Bluetooth: hci2: command tx timeout [ 281.709099] Bluetooth: hci3: command tx timeout [ 281.902229] Bluetooth: hci5: command tx timeout [ 282.029534] Bluetooth: hci4: command tx timeout [ 282.094013] Bluetooth: hci7: command tx timeout [ 282.158066] Bluetooth: hci6: command tx timeout [ 283.566048] Bluetooth: hci0: command tx timeout [ 283.629027] Bluetooth: hci1: command tx timeout [ 283.693040] Bluetooth: hci2: command tx timeout [ 283.758123] Bluetooth: hci3: command tx timeout [ 283.949059] Bluetooth: hci5: command tx timeout [ 284.077228] Bluetooth: hci4: command tx timeout [ 284.141041] Bluetooth: hci7: command tx timeout [ 284.205709] Bluetooth: hci6: command tx timeout [ 285.613264] Bluetooth: hci0: command tx timeout [ 285.678199] Bluetooth: hci1: command tx timeout [ 285.741051] Bluetooth: hci2: command tx timeout [ 285.805262] Bluetooth: hci3: command tx timeout [ 285.997172] Bluetooth: hci5: command tx timeout [ 286.125126] Bluetooth: hci4: command tx timeout [ 286.189123] Bluetooth: hci7: command tx timeout [ 286.254128] Bluetooth: hci6: command tx timeout [ 335.694395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.695757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.175370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.176607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.542400] [ 337.542855] ====================================================== [ 337.544037] WARNING: possible circular locking dependency detected [ 337.545197] 6.13.0-next-20250129 #1 Not tainted [ 337.548915] ------------------------------------------------------ [ 337.552572] kworker/u8:0/11 is trying to acquire lock: [ 337.553604] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.555612] [ 337.555612] but task is already holding lock: [ 337.556722] ffff888027810768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.558619] [ 337.558619] which lock already depends on the new lock. [ 337.558619] [ 337.560138] [ 337.560138] the existing dependency chain (in reverse order) is: [ 337.561539] [ 337.561539] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.562855] __mutex_lock+0x13d/0xb50 [ 337.563795] wiphy_register+0x1b2e/0x25d0 [ 337.564792] ieee80211_register_hw+0x23a4/0x3d60 [ 337.565889] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.567044] init_mac80211_hwsim+0x389/0x870 [ 337.568111] do_one_initcall+0xf9/0x640 [ 337.569109] kernel_init_freeable+0x53d/0x7a0 [ 337.570185] kernel_init+0x1e/0x2d0 [ 337.571066] ret_from_fork+0x48/0x80 [ 337.571956] ret_from_fork_asm+0x1a/0x30 [ 337.572963] [ 337.572963] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.574216] __lock_acquire+0x29fd/0x4580 [ 337.575218] lock_acquire+0x19b/0x520 [ 337.576147] __mutex_lock+0x13d/0xb50 [ 337.577102] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.578373] unregister_netdevice_queue+0x224/0x2e0 [ 337.579532] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.580703] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.581851] ieee80211_unregister_hw+0x55/0x3a0 [ 337.582953] hwsim_exit_net+0x3a0/0x730 [ 337.583921] ops_exit_list+0xb3/0x180 [ 337.584864] cleanup_net+0x546/0xad0 [ 337.585796] process_one_work+0x8ee/0x1a10 [ 337.586888] worker_thread+0x674/0xe70 [ 337.587777] kthread+0x3ab/0x720 [ 337.588546] ret_from_fork+0x48/0x80 [ 337.589323] ret_from_fork_asm+0x1a/0x30 [ 337.590211] [ 337.590211] other info that might help us debug this: [ 337.590211] [ 337.591565] Possible unsafe locking scenario: [ 337.591565] [ 337.592589] CPU0 CPU1 [ 337.593408] ---- ---- [ 337.594222] lock(&rdev->wiphy.mtx); [ 337.594948] lock(rtnl_mutex); [ 337.595992] lock(&rdev->wiphy.mtx); [ 337.597139] lock(rtnl_mutex); [ 337.597799] [ 337.597799] *** DEADLOCK *** [ 337.597799] [ 337.598862] 4 locks held by kworker/u8:0/11: [ 337.599676] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.601544] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.603356] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.605048] #3: ffff888027810768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.606945] [ 337.606945] stack backtrace: [ 337.607761] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250129 #1 [ 337.607842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.607889] Workqueue: netns cleanup_net [ 337.607976] Call Trace: [ 337.607996] [ 337.608020] dump_stack_lvl+0xca/0x120 [ 337.608142] print_circular_bug+0x47b/0x750 [ 337.608242] check_noncircular+0x2e9/0x3c0 [ 337.608335] ? __pfx_check_noncircular+0x10/0x10 [ 337.608428] ? hlock_class+0x4e/0x130 [ 337.608494] ? srso_return_thunk+0x5/0x5f [ 337.608613] ? mark_lock+0xac/0xed0 [ 337.608709] ? lockdep_lock+0xba/0x1b0 [ 337.608835] ? __pfx_lockdep_lock+0x10/0x10 [ 337.608972] __lock_acquire+0x29fd/0x4580 [ 337.609090] ? __pfx___lock_acquire+0x10/0x10 [ 337.609188] ? lock_release+0x20f/0x6f0 [ 337.609286] ? __pfx_lock_release+0x10/0x10 [ 337.609382] ? srso_return_thunk+0x5/0x5f [ 337.609512] lock_acquire+0x19b/0x520 [ 337.609608] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.609715] ? __pfx_lock_acquire+0x10/0x10 [ 337.609821] ? srso_return_thunk+0x5/0x5f [ 337.609941] ? lock_is_held_type+0x9e/0x120 [ 337.610060] ? srso_return_thunk+0x5/0x5f [ 337.610189] __mutex_lock+0x13d/0xb50 [ 337.610302] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.610401] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.610502] ? srso_return_thunk+0x5/0x5f [ 337.610623] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.610719] ? __pfx___mutex_lock+0x10/0x10 [ 337.610849] ? srso_return_thunk+0x5/0x5f [ 337.610973] ? srso_return_thunk+0x5/0x5f [ 337.611094] ? kasan_quarantine_put+0x84/0x1e0 [ 337.611227] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.611305] ? srso_return_thunk+0x5/0x5f [ 337.611435] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.611535] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.611651] ? __pfx_lock_release+0x10/0x10 [ 337.611750] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.611851] ? find_held_lock+0x2c/0x110 [ 337.611981] ? srso_return_thunk+0x5/0x5f [ 337.612106] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.612236] ? srso_return_thunk+0x5/0x5f [ 337.612356] ? lock_release+0x20f/0x6f0 [ 337.612455] ? __pfx_lock_release+0x10/0x10 [ 337.612551] ? srso_return_thunk+0x5/0x5f [ 337.612671] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.612777] ? srso_return_thunk+0x5/0x5f [ 337.612909] unregister_netdevice_queue+0x224/0x2e0 [ 337.613004] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.613100] ? up_write+0x195/0x520 [ 337.613222] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.613335] ? srso_return_thunk+0x5/0x5f [ 337.613464] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.613547] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.613692] ? srso_return_thunk+0x5/0x5f [ 337.613813] ? srso_return_thunk+0x5/0x5f [ 337.613933] ? synchronize_rcu+0x1ff/0x260 [ 337.614027] ieee80211_unregister_hw+0x55/0x3a0 [ 337.614124] hwsim_exit_net+0x3a0/0x730 [ 337.614216] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.614304] ? srso_return_thunk+0x5/0x5f [ 337.614425] ? netdev_run_todo+0x788/0x1040 [ 337.614528] ? srso_return_thunk+0x5/0x5f [ 337.614652] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.614745] ops_exit_list+0xb3/0x180 [ 337.614847] cleanup_net+0x546/0xad0 [ 337.614944] ? __pfx_cleanup_net+0x10/0x10 [ 337.615062] process_one_work+0x8ee/0x1a10 [ 337.615200] ? __pfx_lock_acquire+0x10/0x10 [ 337.615284] ? __pfx_process_one_work+0x10/0x10 [ 337.615393] ? srso_return_thunk+0x5/0x5f [ 337.615494] ? move_linked_works+0x172/0x270 [ 337.615578] ? srso_return_thunk+0x5/0x5f [ 337.615679] ? assign_work+0x196/0x240 [ 337.615786] worker_thread+0x674/0xe70 [ 337.615896] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.615994] ? __pfx_worker_thread+0x10/0x10 [ 337.616106] kthread+0x3ab/0x720 [ 337.616203] ? __pfx_kthread+0x10/0x10 [ 337.616300] ? srso_return_thunk+0x5/0x5f [ 337.616402] ? finish_task_switch.isra.0+0x206/0x840 [ 337.616497] ? __pfx_kthread+0x10/0x10 [ 337.616598] ret_from_fork+0x48/0x80 [ 337.616656] ? __pfx_kthread+0x10/0x10 [ 337.616755] ret_from_fork_asm+0x1a/0x30 [ 337.616879] [ 339.651408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.654878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.659415] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.665176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.667872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.671875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.676210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.678551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.681879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.683891] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.687506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.691464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.713539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.719741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.722579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.736448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.738352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.740268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.744390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.744677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.747452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.749710] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.750269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.751095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.753350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.756140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.761615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.763309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.764762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.766797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.809328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.813378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.815701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.817706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.830940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.836330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.846614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.848842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.851118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.863053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.869222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.882182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.898426] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.908327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.914259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.930373] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.932735] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.934383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.741058] Bluetooth: hci1: command tx timeout [ 341.743967] Bluetooth: hci0: command tx timeout [ 341.808015] Bluetooth: hci3: command tx timeout [ 341.808472] Bluetooth: hci2: command tx timeout [ 341.808878] Bluetooth: hci4: command tx timeout [ 341.933014] Bluetooth: hci5: command tx timeout [ 341.933486] Bluetooth: hci7: command tx timeout [ 341.997008] Bluetooth: hci6: command tx timeout [ 343.789199] Bluetooth: hci0: command tx timeout [ 343.790169] Bluetooth: hci1: command tx timeout [ 343.853055] Bluetooth: hci4: command tx timeout [ 343.853567] Bluetooth: hci2: command tx timeout [ 343.854099] Bluetooth: hci3: command tx timeout [ 343.981059] Bluetooth: hci5: command tx timeout [ 343.981487] Bluetooth: hci7: command tx timeout [ 344.045277] Bluetooth: hci6: command tx timeout [ 345.837053] Bluetooth: hci0: command tx timeout [ 345.837506] Bluetooth: hci1: command tx timeout [ 345.901189] Bluetooth: hci4: command tx timeout [ 345.901667] Bluetooth: hci2: command tx timeout [ 345.903027] Bluetooth: hci3: command tx timeout [ 346.029027] Bluetooth: hci7: command tx timeout [ 346.029480] Bluetooth: hci5: command tx timeout [ 346.093000] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:29:51 Registers: info registers vcpu 0 RAX=000000000004d64f RBX=0000000000000000 RCX=ffffffff84a8c9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1dba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c52 R10=ffff88806ce36293 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8d97e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a3c1f92d88 CR3=000000000d07e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=29af44d9bee96f849e445eb8c559428e XMM02=f61f520134a0d9c200000000000fd290 XMM03=f9980df3bdc2dbad000000000012f988 XMM04=21b3938a90498b6f00000000000ae988 XMM05=ebfae20747c011c500000000001500b0 XMM06=9f165a4fe6c971ad0000000000137980 XMM07=711fbe8126c5d3440000000000137878 XMM08=ee7587d5db12e8e300000000000fd2e8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001d64046 R10=0000000000000037 R11=2d2d2d2d2d2d2d2d R12=0000000000000037 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580 RIP=ffffffff8283c5ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff588c1f18 CR3=0000000016b72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000104b00000000c0000cade0 XMM02=000000c0000caf90000000c0000caf60 XMM03=000000c0000caff0000000c0000cafc0 XMM04=000000c0000caf90000000c0000caf60 XMM05=000000c0000caff0000000c0000cafc0 XMM06=000000c0000cb050000000c0000cb020 XMM07=000000c0000cb080000000c00008e990 XMM08=000000c0001484b0000000c000148480 XMM09=000000c000148510000000c0001484e0 XMM10=000000c000148540000000c00008f530 XMM11=000000c0001485a0000000c000148570 XMM12=000000c000148600000000c0001485d0 XMM13=000000c000148660000000c000148630 XMM14=000000c0001486c0000000c000148690 XMM15=000000c0000e9080000000c0001486f0