Warning: Permanently added '[localhost]:48191' (ECDSA) to the list of known hosts. 2025/01/31 04:09:18 fuzzer started 2025/01/31 04:09:19 dialing manager at localhost:46401 syzkaller login: [ 71.420377] cgroup: Unknown subsys name 'net' [ 71.517303] cgroup: Unknown subsys name 'cpuset' [ 71.549577] cgroup: Unknown subsys name 'rlimit' 2025/01/31 04:09:38 syscalls: 2217 2025/01/31 04:09:38 code coverage: enabled 2025/01/31 04:09:38 comparison tracing: enabled 2025/01/31 04:09:38 extra coverage: enabled 2025/01/31 04:09:38 setuid sandbox: enabled 2025/01/31 04:09:38 namespace sandbox: enabled 2025/01/31 04:09:38 Android sandbox: enabled 2025/01/31 04:09:38 fault injection: enabled 2025/01/31 04:09:38 leak checking: enabled 2025/01/31 04:09:38 net packet injection: enabled 2025/01/31 04:09:38 net device setup: enabled 2025/01/31 04:09:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/31 04:09:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/31 04:09:38 USB emulation: enabled 2025/01/31 04:09:38 hci packet injection: enabled 2025/01/31 04:09:38 wifi device emulation: enabled 2025/01/31 04:09:38 802.15.4 emulation: enabled 2025/01/31 04:09:38 fetching corpus: 1, signal 2361/3642 (executing program) 2025/01/31 04:09:38 fetching corpus: 1, signal 2361/4880 (executing program) 2025/01/31 04:09:38 fetching corpus: 1, signal 2361/6148 (executing program) 2025/01/31 04:09:38 fetching corpus: 1, signal 2361/6428 (executing program) 2025/01/31 04:09:38 fetching corpus: 1, signal 2361/6428 (executing program) 2025/01/31 04:09:42 starting 8 fuzzer processes 04:09:42 executing program 0: prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) 04:09:42 executing program 1: ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0x8, 0xa}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8cc}]}, 0x20}, 0x1, 0x0, 0x0, 0x44044015}, 0x1) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x6, 0x1, 0x15, 0x8, 0x0, 0x67, 0x122402, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe87c, 0x4, @perf_config_ext={0x0, 0xec7}, 0x140, 0x9, 0x1f, 0x9, 0xc5a, 0x5, 0x9, 0x0, 0x93e, 0x0, 0x7}, r1, 0xe, 0xffffffffffffffff, 0xd) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) read$ptp(r3, &(0x7f0000000300)=""/103, 0x67) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000015c0)=""/200, 0xc8}, {&(0x7f00000016c0)=""/190, 0xbe}], 0x6, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/22, 0x16}, {&(0x7f0000001900)=""/30, 0x1e}, {&(0x7f0000001940)=""/97, 0x61}, {&(0x7f00000019c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/125, 0x7d}], 0x5, &(0x7f0000001b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x2, 0x2142, &(0x7f0000001d00)={r4, r5+10000000}) r8 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000001d40)=r8) fchdir(r6) r9 = openat(0xffffffffffffffff, &(0x7f0000001d80)='./file0\x00', 0x151042, 0x48) sendmsg$nl_netfilter(r9, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)={0x144, 0x12, 0x3, 0x801, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x4}, [@generic="0f9e618c7534ebe208862b3e83bcf66916e7ae1d3293792e3c306a0c7367971a0574d142d968fa81e78fafeea7ffbfce51acdf029f9eeedc764bc4688fb36564719809b45783121679142968ddc595c3e6e1df7c264ca570fd0b7dfc26de503dec5a7a61c03b2e810d68b4fa541e5810", @generic="2794f7f4606dc8ca12a630c529ceba0e0701c138d4", @generic="0ec73061416670aa37ae2a4977bc0332cac82103f6f1a0a13a9cb947f7203fbfca93615d6a619beb0c2d1e4359b12f31352ff3939098a0bea0c4acea1fadf083e5a7e9acc8a698c757fd274ff6616049ff0cc85c41201d12e972db41e1af697189df0d532c900c1ed43670647eb8cd88112f0b9a25bf26bede3c6f732a7cc12ed62a27d37af8bbbf462187dba02d9166ced6871591", @nested={0x14, 0x43, 0x0, 0x1, [@typed={0xe, 0x47, 0x0, 0x0, @binary="e04352709a1454ed496b"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) r10 = syz_open_dev$evdev(&(0x7f0000002000), 0x3, 0x111280) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 04:09:42 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x1}, 0xb4e) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x80, 0x80000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) faccessat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44, 0x200) getpeername$netlink(r0, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x27c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf4c4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "aff8af52ff72bb38ada2cf22c6c7bd62f6dc70f34aaafbc4946aedc75202"}}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "6d9b2b3b7a933a36931dc7d227c50602495fdbfa77d1ab1caedb4a6902b394066461f3fe78394ebc73a04de6b213bc75ea180f61d43edfefef9673b2005fc506fa74e38bd8ed9e138c7fd191d59d59781287c005754def482f6c894c3e5ef740968b47fd5e928552a63c3aaad5fae4de4d5318c582edb8ef3f6a076fb1994b50edaae45d853c6dacd3dea29a84074bb4586382185305e4f54b7fae28849b35d2611ab6aa6ffd34233523a188621000b778822620a6d2e160ad05"}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24b1e7c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7407}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x970}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3417}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x800}, 0x81) sendmmsg(r0, &(0x7f0000000780), 0x0, 0x40000) r2 = openat(0xffffffffffffffff, &(0x7f0000000980)='./file0/file0\x00', 0x40000, 0x8) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1b}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40480c0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0/file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) chdir(&(0x7f0000000b40)='./file0/file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0x5, 0x8}}, './file0/file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0xb, 0x1}, {0x60, 0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x1, 0x1}, {0xb}, {0x6, 0x1}, {0x3c}, {0x5, 0x1}, {0xc, 0x1}, {0x3b}, {0x5}, {0x5, 0x1}, {0x48}, {0x24}, {0x6c}, {0x5, 0x1}, {0x4, 0x1}, {0x6c, 0x1}, {0x36, 0x1}, {0x1b, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x84) ioctl$TCXONC(r5, 0x540a, 0x3) statx(r5, &(0x7f0000000d40)='./file0\x00', 0x4000, 0x0, &(0x7f0000000d80)) [ 94.646839] audit: type=1400 audit(1738296582.555:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:09:42 executing program 3: ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000040)={0x8, 0x8, 0x1, 0x3f, 0xff, 0x7f}) write$binfmt_script(r0, &(0x7f0000000ac0)={'#! ', './file0', [{0x20, '*#)('}, {0x20, ')'}, {0x20, ']!-\':!'}], 0xa, "9b4939e101add1ea7a82e7658b76106aa34232470321a8bc1b2d0a9100e470c48fcd03157d780fdaf3d2319bbc0c8c12d468239a6ec2730878564010b730abb36f796249e8c73cfcd6073e8c5b514771ecd2809e190b1f73da0098d98156acc6e319e9866c1094190fb91c1127e40643064aed40a4f2300f78924a3499c58f6de0bbd2c71c2d6ca4def450c9fb0fdf71ac4c6029e8edc9e1"}, 0xb1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$CDROMSTART(r1, 0x5308) ioctl$CDROM_GET_MCN(r1, 0x5311, &(0x7f0000000bc0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c00), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000c80)=0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0/file0\x00', 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000d00), 0x80000000, 0x80200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000d40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001140)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0/file0\x00'}) r5 = add_key$fscrypt_provisioning(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x3}, &(0x7f0000001200)={0x3, 0x0, @auto=[0x30, 0x3f, 0x38, 0x16]}, 0xc, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000001240)={@id={0x2, 0x0, @a}, 0x21, r5, '\x00', @c}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r6, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}}, 0x2000c090) 04:09:42 executing program 4: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000000)=""/154, &(0x7f00000000c0)=0x9a) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x2, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40045}, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x58}}, './file0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2b3a2cff5c1e2079}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000380)=0xc) r2 = fsmount(0xffffffffffffffff, 0x2524abb2e772f01c, 0xf4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c1}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000640)={{0xfffffffd}, 0x100, './file0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000d}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xec, 0x0, 0x17, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc59c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40090}, 0x0) inotify_add_watch(r0, &(0x7f0000000940)='./file0\x00', 0x1000120) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x50}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r1, {0x0, 0x3c6d}}, './file0/file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x90, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff549, 0x4e}}}}, [@NL80211_ATTR_IE={0x52, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x88, 0x40}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0xb8, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x18, {0x8d9, "a3c7937f1b29", @long="8302d7d978d43c6ea9ba088eeb4ec455"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x18, {0xdd4, "a2875df16cc0", @long="4f3ef69b4412f169958e95bdf6aeadb0"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_MAC={0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x8) 04:09:42 executing program 5: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x410180, 0x8, 0x6}, 0x18) syz_io_uring_setup(0x743f, &(0x7f0000000080)={0x0, 0x961b, 0x2, 0x2, 0x379, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/127, 0x7f}], 0x4, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000000) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2100002, &(0x7f0000000680)={'trans=xen,', {[{@version_u}, {@version_9p2000}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) recvmmsg$unix(r6, &(0x7f0000004080)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/212, 0xd4}], 0x3, &(0x7f00000019c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/33, 0x21}, {&(0x7f0000001bc0)=""/59, 0x3b}, {&(0x7f0000001c00)=""/63, 0x3f}, {&(0x7f0000001c40)=""/38, 0x26}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/149, 0x95}], 0x7}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000002e40)=""/34, 0x22}, {&(0x7f0000002e80)=""/145, 0x91}, {&(0x7f0000002f40)=""/242, 0xf2}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x4}}], 0x3, 0x2000, &(0x7f0000004140)) readlinkat(r8, &(0x7f0000004180)='./file0\x00', &(0x7f00000041c0)=""/4096, 0x1000) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f00000051c0)={0x3, 0x0, @status={[0xfffffffffffffffe, 0xf0, 0x6, 0x3, 0x1, 0x100000001]}, [0x9, 0xffff, 0x6, 0x9, 0x2, 0xc7, 0x4, 0x7, 0x7, 0x80000000, 0x6, 0x84a, 0x7b6, 0x5, 0xbd, 0x5, 0x6, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x400, 0x6, 0x6, 0x1, 0x6, 0x7, 0xffffffff, 0x57a3, 0x2, 0x180000000000, 0x4, 0x1, 0x240000000, 0xea, 0x0, 0x80, 0x2, 0x2, 0x4, 0xffff, 0x2ff9, 0x3, 0xfffffffffffffffb, 0x5, 0x27d, 0x6, 0x9, 0x1f, 0x7, 0x5, 0x3, 0x6, 0x1ff, 0x8, 0x8001, 0x7ff, 0x8, 0xffffffffffffff00, 0x3ff, 0xffffffffffff3b8e, 0xfffffffffffffffd, 0x6, 0x1000]}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000005c00)={{{@in6=@local, @in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@multicast1}}, &(0x7f0000005d00)=0xe8) recvmmsg$unix(r4, &(0x7f000000ac80)=[{{&(0x7f0000005d40), 0x6e, &(0x7f0000007080)=[{&(0x7f0000005dc0)=""/214, 0xd6}, {&(0x7f0000005ec0)=""/43, 0x2b}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/181, 0xb5}, {&(0x7f0000006fc0)=""/188, 0xbc}], 0x5}}, {{&(0x7f0000007100), 0x6e, &(0x7f0000007740)=[{&(0x7f0000007180)=""/165, 0xa5}, {&(0x7f0000007240)=""/89, 0x59}, {&(0x7f00000072c0)=""/244, 0xf4}, {&(0x7f00000073c0)=""/88, 0x58}, {&(0x7f0000007440)=""/133, 0x85}, {&(0x7f0000007500)=""/90, 0x5a}, {&(0x7f0000007580)=""/160, 0xa0}, {&(0x7f0000007640)=""/61, 0x3d}, {&(0x7f0000007680)=""/159, 0x9f}], 0x9, &(0x7f0000007800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f000000ab00)=[{&(0x7f00000078c0)=""/158, 0x9e}, {&(0x7f0000007980)=""/56, 0x38}, {&(0x7f00000079c0)=""/4096, 0x1000}, {&(0x7f00000089c0)=""/247, 0xf7}, {&(0x7f0000008ac0)=""/41, 0x29}, {&(0x7f0000008b00)=""/4096, 0x1000}, {&(0x7f0000009b00)=""/4096, 0x1000}], 0x7, &(0x7f000000ab80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xd8}}], 0x3, 0x0, &(0x7f000000ad40)={0x77359400}) fcntl$setownex(r1, 0xf, &(0x7f000000ad80)={0x0, r11}) connect$inet(0xffffffffffffffff, &(0x7f000000adc0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f000000ae00)={0x1, {0x9, 0x3, 0x3c88}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000ae80)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000aec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f000000b000)={&(0x7f000000ae40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000afc0)={&(0x7f000000af00)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r13}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x464}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3db}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8000]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x40, 0xbe, "1719ff65becf43ffdb12b3d3361b8718918231f24166a6758845b02ddee82643624bc1dc9e37dba0fa4a898258b5044b530e9df6cc86b9eef0292cdb"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x400, 0xffffffff}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8d1}, 0x88801) getsockname(r9, &(0x7f000000b040)=@nfc, &(0x7f000000b0c0)=0x80) r14 = eventfd(0x9) preadv2(r14, &(0x7f000000b3c0)=[{&(0x7f000000b100)=""/150, 0x96}, {&(0x7f000000b1c0)=""/109, 0x6d}, {&(0x7f000000b240)=""/156, 0x9c}, {&(0x7f000000b300)=""/176, 0xb0}], 0x4, 0x0, 0x40, 0x20) accept4(r6, &(0x7f000000b400)=@generic, &(0x7f000000b480)=0x80, 0x400) write$binfmt_misc(0xffffffffffffffff, &(0x7f000000b4c0)={'syz0', "035175030da5d532c9bf2a8a534d8853b004adf32e6e980f0723d383c95deb24f024ce158fb65b7c6a68a2f03cbf27d8f342f9d33b6301315719d597fc095edf1bb8207e60b23834ff192f35b31038ac0afdb66a7692879a58e88dabd8bc2ed5d15f213313f7cf4f3cb3b4deeb05b7dae5fc26d295212e422b37c8da82c9fa5a7545f48d17914af4864dbe90c125712889e802e5ab62041f2d8de32c2a428e36d0e7ff7a5b8ccf6c92d3cb5247d7ba2a973bfaa18333886da04947d244d01c8c97ec1470465c99598872f499432b33da4029e95adf8bfac33b70c0a69930"}, 0xe2) 04:09:42 executing program 6: r0 = semget(0x1, 0x3, 0x1c1) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/4096) r1 = semget(0x1, 0x4, 0x41) r2 = semget(0x3, 0x0, 0x50) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000001000)=""/118) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000001080)) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f00000010c0)=""/253) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000011c0)=""/86) r3 = semget(0x0, 0x1, 0x110) semctl$GETPID(r3, 0x7, 0xb, &(0x7f0000001240)=""/218) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000001340)=""/122) semctl$IPC_INFO(r1, 0x66ccbd4f9ad781b2, 0x3, &(0x7f00000013c0)=""/215) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000014c0)=""/65) semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000001540)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001580)=""/118, 0x76}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)=""/45, 0x2d}, {&(0x7f00000016c0)=""/38, 0x26}, {&(0x7f0000001700)=""/89, 0x59}], 0x5, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000019c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, '.\x00'}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001a00)={{0x2, r4, 0xee01, r5, r6, 0x86, 0xfe00}, 0x9}) r7 = semget(0x1, 0x1, 0x289) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000001a80)=""/4096) 04:09:42 executing program 7: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0xf, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1f0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbd000000}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x16044000}, 0x8880) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x2a, 0x7, 0x81}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4044085) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000540)={0x9b5, 0x4, 0x0, 'queue1\x00', 0x8}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x8, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x64}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25ce9b29563cea24b2d69dabab04900931f03dd1f9daea4a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40084}, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000840)={'syz1', "884150b25aee6fc7e2f063a20ade4ff60fac448f35a0ac1090812bbfa4d7bef088a35148a167295e2255f054503b8fe8d160ffc92d0f963def2161ba68d12cad94860468eba8f0aa02f0200141d78638661ef69668a7ff0ae80645cfec12fa0b00b47db45213b7a93ea2ac59ead36d0abfeca6dedc640b097005bd5c6a239a1542d656911946269c4e6bba7a28b70e733d0ae7de80491caa97520684f8113da72a496fa8d3dc6d212826916602d6652bf4ec04b48694a11a788914b15e8fae3eb4a4832787f294800cdd2cd08e07a91fed360293cb0f1748b280b356021e99c33c97fd8895ad0b68c10bd3ba2739"}, 0xf2) ioctl$KDDISABIO(r0, 0x4b37) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000940)={0x1, 0x4, 0x596, 0x8}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000980)={0x0, 0x5, 0xec7}) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x3400) ioctl$TIOCSIG(r0, 0x40045436, 0x2b) preadv2(r2, &(0x7f0000002cc0)=[{&(0x7f00000009c0)=""/199, 0xc7}, {&(0x7f0000000ac0)=""/10, 0xa}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/146, 0x92}, {&(0x7f0000002bc0)=""/214, 0xd6}], 0x6, 0x5, 0x8908, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002e00)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000002f00)=0xe8) mount$9p_virtio(&(0x7f0000002d40), &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0), 0x0, &(0x7f0000002f40)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x2}}, {@access_user}, {@access_any}, {@privport}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, 'syz0\x00'}}, {@fowner_lt={'fowner<', r3}}, {@uid_gt={'uid>', 0xee00}}, {@hash}, {@fowner_lt}, {@uid_gt}, {@audit}, {@pcr={'pcr', 0x3d, 0x33}}]}}) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000033c0)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003080)={0x300, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x207}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x78}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffbff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffb265}]}, @TIPC_NLA_NODE={0x27c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb0, 0x3, "9563d3af3d2015a8cdbec3a77a36b31f31bd9e0720d483ef0524e2357d86010ab73d6707b5fed5a5f6170f50c22e4896648ae45a3741014e493023f6182569aa582c4c67625cccc9adae42aff4fc4c6f7dc06f7b84c64bb7fbd21d0c1576f38696076a58afeb9ee90a1d278e3afc42a78afb34b6229b5b3464aac611d053823495e2ed97c1f6074c8f5ad98b206126a163efc426b799cf86f173f87a3702414a22878389a85d1fc463f8fb07"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x31b06419}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "03d37bed09a52b432952a5b49f1ea2c116368e3f2895952aee8ecda4fe7eedde5e180cf39868273ebaf4f8c15fc28b827de2beab571403c6584545b55b3e3e611c4b5f041bd23234d7c7ef1a489c9d46219fba782271314c7016470340d73571d7e80e45ef1cf39e0b1d6ef6fff155bd7696e02674bf88f321f38f320bbd5196e88a4d74f765e32352a31fe4137b28baeefba483c7799ae71f73d095c0e1440bfa43ec9dc99fa6338540449bcb482c13092fc0f3c25f4068b9ce81fc2b2fe983d3904c5a0d6dc62898f7d6bea19c0aa1d0478480622ff9b27adc066f6fcd"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dda45121182ccbb4ae68b02e78b427106c4e0e9dad3b01ac24ada5ee17ca56c98eafd2b4"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "8012216617461278fc53e1243cca24dbf154d1a6b0595ae291"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c394b1feed8047b404356373cb308ec3587b546786eaa33c"}}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) [ 96.035782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.040165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.041264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.046673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.048243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.049212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.104869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.120943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.122421] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.123490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.129240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.133261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.141906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.148874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.150392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.152789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.157176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.166815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.167778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.171303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.171920] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.179152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.188304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.190642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.196265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.196261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.199172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.199203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.212167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.215474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.221108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.221419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.227104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.244892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.245631] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.247968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.248787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.255011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.262702] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.267180] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.267932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.274370] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.278025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.280135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.291955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.324494] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.326986] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.328725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.127292] Bluetooth: hci0: command tx timeout [ 98.317821] Bluetooth: hci5: command tx timeout [ 98.318006] Bluetooth: hci4: command tx timeout [ 98.318694] Bluetooth: hci3: command tx timeout [ 98.320115] Bluetooth: hci1: command tx timeout [ 98.320819] Bluetooth: hci2: command tx timeout [ 98.381672] Bluetooth: hci6: command tx timeout [ 98.382941] Bluetooth: hci7: command tx timeout [ 100.174726] Bluetooth: hci0: command tx timeout [ 100.365761] Bluetooth: hci1: command tx timeout [ 100.366745] Bluetooth: hci4: command tx timeout [ 100.367808] Bluetooth: hci3: command tx timeout [ 100.367894] Bluetooth: hci2: command tx timeout [ 100.368711] Bluetooth: hci5: command tx timeout [ 100.429892] Bluetooth: hci7: command tx timeout [ 100.430848] Bluetooth: hci6: command tx timeout [ 102.221690] Bluetooth: hci0: command tx timeout [ 102.413885] Bluetooth: hci1: command tx timeout [ 102.415153] Bluetooth: hci5: command tx timeout [ 102.415182] Bluetooth: hci2: command tx timeout [ 102.416113] Bluetooth: hci3: command tx timeout [ 102.416370] Bluetooth: hci4: command tx timeout [ 102.477674] Bluetooth: hci7: command tx timeout [ 102.478145] Bluetooth: hci6: command tx timeout [ 104.270854] Bluetooth: hci0: command tx timeout [ 104.462636] Bluetooth: hci2: command tx timeout [ 104.463876] Bluetooth: hci4: command tx timeout [ 104.464861] Bluetooth: hci3: command tx timeout [ 104.465871] Bluetooth: hci1: command tx timeout [ 104.465897] Bluetooth: hci5: command tx timeout [ 104.525710] Bluetooth: hci7: command tx timeout [ 104.526880] Bluetooth: hci6: command tx timeout [ 158.552662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.557169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.561249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.566467] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.569434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.571439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.704695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.707119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.710889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.712458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.717315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.717436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.727007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.729475] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.732070] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.737633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.737759] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.743631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.752871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.759028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.762440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.775066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.781700] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.783464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.849777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.881705] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.896906] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.897976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.930993] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.962665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.964655] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.966983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.969633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.971289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.973210] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.974305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.989373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.993589] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.999937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.023397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.062311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.065112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.214742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 159.251640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 159.265942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 159.275779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 159.285328] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 159.286621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.589824] Bluetooth: hci0: command tx timeout [ 160.845651] Bluetooth: hci3: command tx timeout [ 160.846646] Bluetooth: hci2: command tx timeout [ 160.846683] Bluetooth: hci1: command tx timeout [ 161.038721] Bluetooth: hci5: command tx timeout [ 161.102660] Bluetooth: hci4: command tx timeout [ 161.230581] Bluetooth: hci6: command tx timeout [ 161.613699] Bluetooth: hci7: command tx timeout [ 162.638146] Bluetooth: hci0: command tx timeout [ 162.893998] Bluetooth: hci1: command tx timeout [ 162.895111] Bluetooth: hci3: command tx timeout [ 162.896299] Bluetooth: hci2: command tx timeout [ 163.085893] Bluetooth: hci5: command tx timeout [ 163.149708] Bluetooth: hci4: command tx timeout [ 163.277879] Bluetooth: hci6: command tx timeout [ 163.661848] Bluetooth: hci7: command tx timeout [ 164.685651] Bluetooth: hci0: command tx timeout [ 164.942094] Bluetooth: hci3: command tx timeout [ 164.943025] Bluetooth: hci2: command tx timeout [ 164.943795] Bluetooth: hci1: command tx timeout [ 165.134599] Bluetooth: hci5: command tx timeout [ 165.197602] Bluetooth: hci4: command tx timeout [ 165.325660] Bluetooth: hci6: command tx timeout [ 165.709574] Bluetooth: hci7: command tx timeout [ 166.734908] Bluetooth: hci0: command tx timeout [ 166.989634] Bluetooth: hci2: command tx timeout [ 166.990147] Bluetooth: hci1: command tx timeout [ 166.990649] Bluetooth: hci3: command tx timeout [ 167.181585] Bluetooth: hci5: command tx timeout [ 167.245605] Bluetooth: hci4: command tx timeout [ 167.373599] Bluetooth: hci6: command tx timeout [ 167.758695] Bluetooth: hci7: command tx timeout [ 220.892741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.896680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.907035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.913937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.919321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.922911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.022949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.027038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.031968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.042818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.049273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.051835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.224163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.229237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.232815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.254832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.259768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.264679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.301370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.307888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.312946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.315161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.317218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.319774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.326849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.333957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.336719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.345930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.367971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.372859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.438174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.442781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.444675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.449000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.451402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.455897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.457468] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.459583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.534904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.536779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.557898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.580315] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 221.610921] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.626997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.628863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 221.672664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.678586] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.684883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.989579] Bluetooth: hci0: command tx timeout [ 223.117762] Bluetooth: hci1: command tx timeout [ 223.310596] Bluetooth: hci2: command tx timeout [ 223.373625] Bluetooth: hci3: command tx timeout [ 223.439545] Bluetooth: hci4: command tx timeout [ 223.502342] Bluetooth: hci5: command tx timeout [ 223.757749] Bluetooth: hci6: command tx timeout [ 223.830873] Bluetooth: hci7: command tx timeout [ 225.037654] Bluetooth: hci0: command tx timeout [ 225.166358] Bluetooth: hci1: command tx timeout [ 225.357655] Bluetooth: hci2: command tx timeout [ 225.423533] Bluetooth: hci3: command tx timeout [ 225.485603] Bluetooth: hci4: command tx timeout [ 225.551532] Bluetooth: hci5: command tx timeout [ 225.806176] Bluetooth: hci6: command tx timeout [ 225.869656] Bluetooth: hci7: command tx timeout [ 227.085693] Bluetooth: hci0: command tx timeout [ 227.214555] Bluetooth: hci1: command tx timeout [ 227.405585] Bluetooth: hci2: command tx timeout [ 227.471674] Bluetooth: hci3: command tx timeout [ 227.533559] Bluetooth: hci4: command tx timeout [ 227.597595] Bluetooth: hci5: command tx timeout [ 227.853549] Bluetooth: hci6: command tx timeout [ 227.917644] Bluetooth: hci7: command tx timeout [ 229.133666] Bluetooth: hci0: command tx timeout [ 229.261623] Bluetooth: hci1: command tx timeout [ 229.454557] Bluetooth: hci2: command tx timeout [ 229.517603] Bluetooth: hci3: command tx timeout [ 229.581591] Bluetooth: hci4: command tx timeout [ 229.645598] Bluetooth: hci5: command tx timeout [ 229.901635] Bluetooth: hci6: command tx timeout [ 229.965588] Bluetooth: hci7: command tx timeout [ 283.099797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.102661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.105184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.120289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.123641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.127888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.234404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.239888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.242271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.250053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.258797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.260911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.361879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.372876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.377010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.380263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.383128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.386064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.392994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.400387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.403863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.408027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.411355] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.416097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.442304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.448842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.457337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.476657] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.492848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.497000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.549853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.578444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.580076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.581982] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.591850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.596117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.598253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.606327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.610780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.613530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.614615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.630860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.640041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.649264] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.651043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.658346] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.660807] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.662702] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.198653] Bluetooth: hci0: command tx timeout [ 285.325637] Bluetooth: hci1: command tx timeout [ 285.453741] Bluetooth: hci2: command tx timeout [ 285.454754] Bluetooth: hci3: command tx timeout [ 285.581565] Bluetooth: hci4: command tx timeout [ 285.709904] Bluetooth: hci6: command tx timeout [ 285.710871] Bluetooth: hci5: command tx timeout [ 285.773848] Bluetooth: hci7: command tx timeout [ 287.245594] Bluetooth: hci0: command tx timeout [ 287.373542] Bluetooth: hci1: command tx timeout [ 287.501596] Bluetooth: hci2: command tx timeout [ 287.502093] Bluetooth: hci3: command tx timeout [ 287.629685] Bluetooth: hci4: command tx timeout [ 287.757911] Bluetooth: hci5: command tx timeout [ 287.758421] Bluetooth: hci6: command tx timeout [ 287.821716] Bluetooth: hci7: command tx timeout [ 289.293958] Bluetooth: hci0: command tx timeout [ 289.421664] Bluetooth: hci1: command tx timeout [ 289.549654] Bluetooth: hci2: command tx timeout [ 289.550575] Bluetooth: hci3: command tx timeout [ 289.677860] Bluetooth: hci4: command tx timeout [ 289.806019] Bluetooth: hci6: command tx timeout [ 289.807155] Bluetooth: hci5: command tx timeout [ 289.869676] Bluetooth: hci7: command tx timeout [ 291.341859] Bluetooth: hci0: command tx timeout [ 291.469572] Bluetooth: hci1: command tx timeout [ 291.597598] Bluetooth: hci3: command tx timeout [ 291.598103] Bluetooth: hci2: command tx timeout [ 291.725600] Bluetooth: hci4: command tx timeout [ 291.854513] Bluetooth: hci6: command tx timeout [ 291.854962] Bluetooth: hci5: command tx timeout [ 291.917545] Bluetooth: hci7: command tx timeout [ 343.415339] [ 343.415788] ====================================================== [ 343.416996] WARNING: possible circular locking dependency detected [ 343.418162] 6.13.0-next-20250130 #1 Not tainted [ 343.420477] ------------------------------------------------------ [ 343.425319] kworker/u8:1/65 is trying to acquire lock: [ 343.426302] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.428232] [ 343.428232] but task is already holding lock: [ 343.429364] ffff88802ab58768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 343.431277] [ 343.431277] which lock already depends on the new lock. [ 343.431277] [ 343.432723] [ 343.432723] the existing dependency chain (in reverse order) is: [ 343.434108] [ 343.434108] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 343.435395] __mutex_lock+0x13d/0xb50 [ 343.436276] wiphy_register+0x1b2e/0x25d0 [ 343.437221] ieee80211_register_hw+0x23a4/0x3d60 [ 343.438250] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 343.439317] init_mac80211_hwsim+0x389/0x870 [ 343.440327] do_one_initcall+0xf9/0x640 [ 343.441259] kernel_init_freeable+0x53d/0x7a0 [ 343.442287] kernel_init+0x1e/0x2d0 [ 343.443105] ret_from_fork+0x48/0x80 [ 343.443922] ret_from_fork_asm+0x1a/0x30 [ 343.444862] [ 343.444862] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 343.446023] __lock_acquire+0x29fd/0x4580 [ 343.446940] lock_acquire+0x19b/0x520 [ 343.447798] __mutex_lock+0x13d/0xb50 [ 343.448679] unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.449851] unregister_netdevice_queue+0x224/0x2e0 [ 343.450898] _cfg80211_unregister_wdev+0x57b/0x700 [ 343.451976] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 343.453025] ieee80211_unregister_hw+0x55/0x3a0 [ 343.454029] hwsim_exit_net+0x3a0/0x730 [ 343.454905] ops_exit_list+0xb3/0x180 [ 343.455748] cleanup_net+0x546/0xad0 [ 343.456581] process_one_work+0x8ee/0x1a10 [ 343.457560] worker_thread+0x674/0xe70 [ 343.458500] kthread+0x3ab/0x720 [ 343.459315] ret_from_fork+0x48/0x80 [ 343.460135] ret_from_fork_asm+0x1a/0x30 [ 343.461070] [ 343.461070] other info that might help us debug this: [ 343.461070] [ 343.462513] Possible unsafe locking scenario: [ 343.462513] [ 343.463609] CPU0 CPU1 [ 343.464446] ---- ---- [ 343.465284] lock(&rdev->wiphy.mtx); [ 343.466049] lock(rtnl_mutex); [ 343.467130] lock(&rdev->wiphy.mtx); [ 343.468315] lock(rtnl_mutex); [ 343.468996] [ 343.468996] *** DEADLOCK *** [ 343.468996] [ 343.470178] 4 locks held by kworker/u8:1/65: [ 343.470921] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 343.472638] #1: ffff88800ed2fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 343.474523] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 343.476378] #3: ffff88802ab58768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 343.478265] [ 343.478265] stack backtrace: [ 343.479065] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250130 #1 [ 343.479141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 343.479185] Workqueue: netns cleanup_net [ 343.479268] Call Trace: [ 343.479290] [ 343.479314] dump_stack_lvl+0xca/0x120 [ 343.479431] print_circular_bug+0x47b/0x750 [ 343.479527] check_noncircular+0x2e9/0x3c0 [ 343.479611] ? lock_repin_lock+0x207/0x320 [ 343.479734] ? __pfx_check_noncircular+0x10/0x10 [ 343.479818] ? hlock_class+0x4e/0x130 [ 343.479880] ? mark_lock+0xac/0xed0 [ 343.479962] ? __pfx_lock_repin_lock+0x10/0x10 [ 343.480083] ? srso_return_thunk+0x5/0x5f [ 343.480206] ? lockdep_lock+0xba/0x1b0 [ 343.480324] ? __pfx_lockdep_lock+0x10/0x10 [ 343.480453] __lock_acquire+0x29fd/0x4580 [ 343.480564] ? __pfx___lock_acquire+0x10/0x10 [ 343.480653] ? lock_release+0x20f/0x6f0 [ 343.480744] ? __pfx_lock_release+0x10/0x10 [ 343.480843] lock_acquire+0x19b/0x520 [ 343.480932] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.481032] ? __pfx_lock_acquire+0x10/0x10 [ 343.481127] ? srso_return_thunk+0x5/0x5f [ 343.481240] ? lock_release+0x20f/0x6f0 [ 343.481330] ? srso_return_thunk+0x5/0x5f [ 343.481443] ? lock_is_held_type+0x9e/0x120 [ 343.481571] ? srso_return_thunk+0x5/0x5f [ 343.481692] __mutex_lock+0x13d/0xb50 [ 343.481800] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.481891] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.481984] ? srso_return_thunk+0x5/0x5f [ 343.482097] ? synchronize_rcu_expedited+0x38a/0x420 [ 343.482186] ? __pfx___mutex_lock+0x10/0x10 [ 343.482296] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.482407] ? srso_return_thunk+0x5/0x5f [ 343.482521] ? kasan_quarantine_put+0x84/0x1e0 [ 343.482646] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 343.482718] ? srso_return_thunk+0x5/0x5f [ 343.482839] unregister_netdevice_many_notify+0x1612/0x1c80 [ 343.482932] ? __virt_addr_valid+0x2e8/0x5d0 [ 343.483041] ? __pfx_lock_release+0x10/0x10 [ 343.483133] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 343.483226] ? find_held_lock+0x2c/0x110 [ 343.483347] ? srso_return_thunk+0x5/0x5f [ 343.483464] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 343.483586] ? srso_return_thunk+0x5/0x5f [ 343.483699] ? lock_release+0x20f/0x6f0 [ 343.483790] ? __pfx_lock_release+0x10/0x10 [ 343.483879] ? srso_return_thunk+0x5/0x5f [ 343.483992] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 343.484093] ? srso_return_thunk+0x5/0x5f [ 343.484217] unregister_netdevice_queue+0x224/0x2e0 [ 343.484305] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 343.484393] ? up_write+0x195/0x520 [ 343.484507] _cfg80211_unregister_wdev+0x57b/0x700 [ 343.484615] ? srso_return_thunk+0x5/0x5f [ 343.484736] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 343.484813] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 343.484890] ? srso_return_thunk+0x5/0x5f [ 343.485004] ? srso_return_thunk+0x5/0x5f [ 343.485117] ? synchronize_rcu+0x1ff/0x260 [ 343.485204] ieee80211_unregister_hw+0x55/0x3a0 [ 343.485297] hwsim_exit_net+0x3a0/0x730 [ 343.485383] ? __pfx_hwsim_exit_net+0x10/0x10 [ 343.485465] ? srso_return_thunk+0x5/0x5f [ 343.485590] ? netdev_run_todo+0x788/0x1040 [ 343.485685] ? srso_return_thunk+0x5/0x5f [ 343.485801] ? __pfx_hwsim_exit_net+0x10/0x10 [ 343.485887] ops_exit_list+0xb3/0x180 [ 343.485973] cleanup_net+0x546/0xad0 [ 343.486064] ? __pfx_cleanup_net+0x10/0x10 [ 343.486173] process_one_work+0x8ee/0x1a10 [ 343.486311] ? __pfx_lock_acquire+0x10/0x10 [ 343.486403] ? __pfx_process_one_work+0x10/0x10 [ 343.486524] ? srso_return_thunk+0x5/0x5f [ 343.486637] ? move_linked_works+0x172/0x270 [ 343.486728] ? srso_return_thunk+0x5/0x5f [ 343.486841] ? assign_work+0x196/0x240 [ 343.486960] worker_thread+0x674/0xe70 [ 343.487081] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 343.487188] ? srso_return_thunk+0x5/0x5f [ 343.487301] ? __pfx_worker_thread+0x10/0x10 [ 343.487425] kthread+0x3ab/0x720 [ 343.487534] ? __pfx_kthread+0x10/0x10 [ 343.487641] ? srso_return_thunk+0x5/0x5f [ 343.487754] ? finish_task_switch.isra.0+0x206/0x840 [ 343.487859] ? __pfx_kthread+0x10/0x10 [ 343.487970] ret_from_fork+0x48/0x80 [ 343.488035] ? __pfx_kthread+0x10/0x10 [ 343.488145] ret_from_fork_asm+0x1a/0x30 [ 343.488284] [ 345.114112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.116872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.124234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.131628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.138839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.142183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.242079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.246175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.248087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.253883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.259842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.263518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.311790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.315851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.317516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.322707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.328839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.339876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.441589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.450108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.457762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.475293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.479621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.481963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.515094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.540977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.549973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.554102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.556941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.564725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.566652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.578611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.588948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.595957] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.598306] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.604855] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.607186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.632580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.642639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.659124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.660940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.690488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.693568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.696343] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.698835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.708865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.719551] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.722859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.213565] Bluetooth: hci0: command tx timeout [ 347.277660] Bluetooth: hci1: command tx timeout [ 347.407507] Bluetooth: hci2: command tx timeout [ 347.534737] Bluetooth: hci3: command tx timeout [ 347.661581] Bluetooth: hci4: command tx timeout [ 347.662302] Bluetooth: hci5: command tx timeout [ 347.789566] Bluetooth: hci7: command tx timeout [ 347.854536] Bluetooth: hci6: command tx timeout [ 349.262575] Bluetooth: hci0: command tx timeout [ 349.326960] Bluetooth: hci1: command tx timeout [ 349.454505] Bluetooth: hci2: command tx timeout [ 349.583171] Bluetooth: hci3: command tx timeout [ 349.709600] Bluetooth: hci4: command tx timeout [ 349.710574] Bluetooth: hci5: command tx timeout [ 349.837661] Bluetooth: hci7: command tx timeout [ 349.901573] Bluetooth: hci6: command tx timeout [ 351.310651] Bluetooth: hci0: command tx timeout [ 351.374578] Bluetooth: hci1: command tx timeout [ 351.501609] Bluetooth: hci2: command tx timeout [ 351.630510] Bluetooth: hci3: command tx timeout [ 351.757903] Bluetooth: hci4: command tx timeout [ 351.757942] Bluetooth: hci5: command tx timeout [ 351.885555] Bluetooth: hci7: command tx timeout [ 351.949540] Bluetooth: hci6: command tx timeout [ 353.358482] Bluetooth: hci0: command tx timeout [ 353.421573] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 04:13:51 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283d240 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff88800ed2ed28 R8 =0000000000000001 R9 =ffffed1001da5d96 R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000046 R13=ffffffff88693070 R14=ffffffff88693020 R15=ffffffff886932e0 RIP=ffffffff8283d295 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fba89e59a40 CR3=000000000dd5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c00031c320000000c000303b30 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=0000000000040755 RBX=0000000000000001 RCX=ffffffff84a8da17 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1dba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000001 R9 =ffffed100d9e6c52 R10=ffff88806cf36293 R11=0000000000000001 R12=ffffffff864006d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8e9be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeb3a7a000 CR3=000000000cbfc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=000000030000000100005596e2fc8af0 XMM05=00005596e2fc19a000005596e2fc1980 XMM06=00000000000000000000000400000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000