Warning: Permanently added '[localhost]:33432' (ECDSA) to the list of known hosts. 2025/01/31 07:57:53 fuzzer started 2025/01/31 07:57:54 dialing manager at localhost:46401 syzkaller login: [ 69.985740] cgroup: Unknown subsys name 'net' [ 70.054809] cgroup: Unknown subsys name 'cpuset' [ 70.070381] cgroup: Unknown subsys name 'rlimit' 2025/01/31 07:58:10 syscalls: 202 2025/01/31 07:58:10 code coverage: enabled 2025/01/31 07:58:10 comparison tracing: enabled 2025/01/31 07:58:10 extra coverage: enabled 2025/01/31 07:58:10 setuid sandbox: enabled 2025/01/31 07:58:10 namespace sandbox: enabled 2025/01/31 07:58:10 Android sandbox: enabled 2025/01/31 07:58:10 fault injection: enabled 2025/01/31 07:58:10 leak checking: enabled 2025/01/31 07:58:10 net packet injection: enabled 2025/01/31 07:58:10 net device setup: enabled 2025/01/31 07:58:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/31 07:58:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/31 07:58:10 USB emulation: enabled 2025/01/31 07:58:10 hci packet injection: enabled 2025/01/31 07:58:10 wifi device emulation: enabled 2025/01/31 07:58:10 802.15.4 emulation: enabled 2025/01/31 07:58:10 fetching corpus: 0, signal 0/0 (executing program) 2025/01/31 07:58:12 starting 8 fuzzer processes 07:58:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/210, 0xd2}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/63, 0x3f}], 0x8, &(0x7f00000005c0)=""/55, 0x37}, 0x7f}, {{&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x2, &(0x7f0000000800)=""/103, 0x67}, 0x7}], 0x2, 0x42, &(0x7f0000000900)={0x0, 0x989680}) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{&(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a40)=""/207, 0xcf}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/168, 0xa8}, {&(0x7f0000000d00)=""/192, 0xc0}, {&(0x7f0000000dc0)=""/123, 0x7b}, {&(0x7f0000000e40)=""/225, 0xe1}, {&(0x7f0000000f40)=""/198, 0xc6}, {&(0x7f0000001040)=""/176, 0xb0}, {&(0x7f0000001100)=""/174, 0xae}], 0x9}, 0x8}, {{&(0x7f0000001280)=@tipc=@name, 0x80, &(0x7f0000002500)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/204, 0xcc}, {&(0x7f0000002400)=""/236, 0xec}], 0x3, &(0x7f0000002540)=""/139, 0x8b}, 0x100}, {{&(0x7f0000002600)=@nfc, 0x80, &(0x7f0000002780)=[{&(0x7f0000002680)=""/12, 0xc}, {&(0x7f00000026c0)=""/51, 0x33}, {&(0x7f0000002700)=""/66, 0x42}], 0x3, &(0x7f00000027c0)=""/182, 0xb6}, 0x455d}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002880)=""/3, 0x3}, {&(0x7f00000028c0)=""/168, 0xa8}, {&(0x7f0000002980)=""/123, 0x7b}], 0x3, &(0x7f0000002a40)=""/20, 0x14}}, {{&(0x7f0000002a80)=@alg, 0x80, &(0x7f0000004d40)=[{&(0x7f0000002b00)=""/187, 0xbb}, {&(0x7f0000002bc0)=""/148, 0x94}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/169, 0xa9}], 0x5}, 0x16b}], 0x5, 0x2060, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000004f80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x34, r0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008054}, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000005000), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000004) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)={0x1c, 0x0, 0x718, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40014) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000005300)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x2, 0x8, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000005340)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000005440)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005400)={&(0x7f00000053c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x401}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x830}, 0x8811) syz_genetlink_get_family_id$devlink(&(0x7f0000005480), r3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000054c0), r6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000005600)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000055c0)={&(0x7f0000005540)={0x68, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xc2e7, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x40044) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000005680)={0x0, @llc={0x1a, 0x1b, 0x0, 0x55, 0x81, 0xd5, @multicast}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x6}, @ethernet={0x1, @broadcast}, 0x7ff, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000005640)='veth0_to_bond\x00', 0x5, 0x100000000, 0x9}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000005700), 0x20040, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000057c0)={'syztnl2\x00', &(0x7f0000005740)={'syztnl2\x00', r1, 0x2f, 0x6, 0x9, 0xe4, 0xc, @rand_addr=' \x01\x00', @mcast1, 0x888a8a99cafde91a, 0x708, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000005880)={'sit0\x00', &(0x7f0000005800)={'syztnl1\x00', r9, 0x2f, 0x81, 0xff, 0xbd, 0x1e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x40, 0x80, 0x5, 0x644}}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000059c0)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005980)={&(0x7f0000005900)={0x68, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x8041) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000005a80)={'ip_vti0\x00', &(0x7f0000005a00)={'gre0\x00', r1, 0x80, 0x40, 0x6, 0x5, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, {[@noop, @lsrr={0x83, 0x1b, 0xd4, [@dev={0xac, 0x14, 0x14, 0x10}, @local, @dev, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 07:58:12 executing program 1: ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x450080, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x1800) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0) r3 = openat$cgroup_devices(r1, &(0x7f00000009c0)='devices.allow\x00', 0x2, 0x0) pidfd_getfd(r1, r3, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'veth0_macvtap\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a40)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000ac0)={0x0, @isdn={0x22, 0xbc, 0x7, 0x20, 0xe9}, @can, @llc={0x1a, 0x308, 0x5, 0x0, 0x2, 0x3, @random="934113175613"}, 0x5, 0x0, 0x0, 0x0, 0xeca, &(0x7f0000000a80)='bond_slave_1\x00', 0xffffffffffffffff, 0x81, 0x3}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000b40)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @nfc={0x27, 0x1, 0x0, 0x3}, 0x1ff, 0x0, 0x0, 0x0, 0x101, 0x0, 0x2, 0x2, 0x2}) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/7, 0x7}, {&(0x7f0000000c00)=""/47, 0x2f}, {&(0x7f0000000c40)=""/12, 0xc}], 0x3}, 0x1f}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d40)=""/104, 0x68}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/85, 0x55}, {&(0x7f0000000f00)=""/99, 0x63}, {&(0x7f0000000f80)=""/41, 0x29}, {&(0x7f0000000fc0)=""/91, 0x5b}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/72, 0x48}], 0x8, &(0x7f0000001180)=""/220, 0xdc}, 0xe06}, {{&(0x7f0000001280)=@x25={0x9, @remote}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/154, 0x9a}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/207, 0xcf}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/133, 0x85}], 0x6, &(0x7f0000002740)=""/255, 0xff}, 0x3}, {{&(0x7f0000002840)=@sco={0x1f, @none}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000028c0)=""/50, 0x32}, {&(0x7f0000002900)=""/232, 0xe8}, {&(0x7f0000002a00)=""/87, 0x57}, {&(0x7f0000002a80)=""/120, 0x78}, {&(0x7f0000002b00)=""/6, 0x6}, {&(0x7f0000002b40)=""/246, 0xf6}, {&(0x7f0000002c40)=""/185, 0xb9}, {&(0x7f0000002d00)=""/72, 0x48}], 0x8}, 0x2}, {{&(0x7f0000002e00)=@pppol2tpv3, 0x80, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/143, 0x8f}, {&(0x7f0000002f40)=""/113, 0x71}, {&(0x7f0000002fc0)=""/135, 0x87}, {&(0x7f0000003080)=""/236, 0xec}], 0x4, &(0x7f00000031c0)=""/195, 0xc3}, 0x5}, {{&(0x7f00000032c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003340)=""/227, 0xe3}, {&(0x7f0000003440)=""/32, 0x20}], 0x2, &(0x7f00000034c0)=""/183, 0xb7}, 0x404c}, {{&(0x7f0000003580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003600)=""/193, 0xc1}, {&(0x7f0000003700)=""/169, 0xa9}, {&(0x7f00000037c0)=""/164, 0xa4}, {&(0x7f0000003880)=""/186, 0xba}], 0x4, &(0x7f0000003980)=""/158, 0x9e}, 0x5}, {{0x0, 0x0, &(0x7f0000003a40), 0x0, &(0x7f0000003a80)=""/34, 0x22}}, {{&(0x7f0000003ac0)=@sco, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003b40)=""/255, 0xff}, {&(0x7f0000003c40)=""/212, 0xd4}, {&(0x7f0000003d40)=""/22, 0x16}, {&(0x7f0000003d80)=""/24, 0x18}, {&(0x7f0000003dc0)=""/113, 0x71}, {&(0x7f0000003e40)=""/120, 0x78}, {&(0x7f0000003ec0)=""/2, 0x2}, {&(0x7f0000003f00)=""/190, 0xbe}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/246, 0xf6}], 0xa, &(0x7f0000005180)=""/89, 0x59}, 0x5}, {{&(0x7f0000005200)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005280)=""/85, 0x55}, {&(0x7f0000005300)=""/163, 0xa3}, {&(0x7f00000053c0)=""/50, 0x32}, {&(0x7f0000005400)=""/18, 0x12}], 0x4, &(0x7f0000005480)=""/192, 0xc0}, 0x3ff}], 0xa, 0x3, &(0x7f00000057c0)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000005880)={'syztnl1\x00', &(0x7f0000005800)={'ip6tnl0\x00', r5, 0x2f, 0x35, 0x8, 0xb3, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0xf840, 0x80, 0x9, 0x40}}) socketpair(0x21, 0x3, 0x4, &(0x7f00000058c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005900)={'wlan1\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000005940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 07:58:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x54f480, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x0, 0x1, 0x78, @private1, @remote, 0x10, 0x7800, 0x2, 0x90}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x9, 0xfffffff8, 0x7521e15fd8d54a1b, @mcast2, @mcast1, 0x7800, 0x700, 0x2, 0x30c}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffff0000}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd0, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d00), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'ip6_vti0\x00', r1, 0x2f, 0x6, 0x40, 0x1, 0x6, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40, 0x20, 0x80, 0x4d72cf19}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ec0), 0x34480, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'syztnl2\x00', r4, 0x29, 0x1, 0x1, 0x6, 0x28, @empty, @remote, 0x7, 0x7800, 0x400}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = signalfd4(r5, &(0x7f0000001000)={[0x4000000000]}, 0x8, 0xc0800) clock_gettime(0x0, &(0x7f0000004200)={0x0, 0x0}) recvmmsg(r5, &(0x7f00000040c0)=[{{&(0x7f0000001040)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001440)=[{&(0x7f00000010c0)=""/235, 0xeb}, {&(0x7f00000011c0)=""/193, 0xc1}, {&(0x7f00000012c0)=""/76, 0x4c}, {&(0x7f0000001340)=""/247, 0xf7}], 0x4}, 0x9}, {{&(0x7f0000001480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/162, 0xa2}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/7, 0x7}], 0x4, &(0x7f00000017c0)=""/34, 0x22}, 0x9}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001800)=""/240, 0xf0}, {&(0x7f0000001900)=""/147, 0x93}, {&(0x7f00000019c0)=""/244, 0xf4}, {&(0x7f0000001ac0)=""/100, 0x64}, {&(0x7f0000001b40)=""/13, 0xd}], 0x5, &(0x7f0000001c00)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c00)=""/150, 0x96}], 0x1, &(0x7f0000002d00)=""/153, 0x99}, 0x80000001}, {{&(0x7f0000002dc0)=@generic, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e40)=""/86, 0x56}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/87, 0x57}, {&(0x7f0000002f80)=""/239, 0xef}], 0x4, &(0x7f00000030c0)=""/4096, 0x1000}, 0x9}], 0x5, 0x40000000, &(0x7f0000004240)={r8, r9+60000000}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000004340)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000004300)={&(0x7f0000004280)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r10}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008044) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000004380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000043c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000004480)={'syztnl2\x00', &(0x7f0000004400)={'syztnl2\x00', r12, 0x4, 0x9, 0xff, 0x2, 0x49, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7840, 0x700, 0x800, 0x2}}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) [ 87.835485] audit: type=1400 audit(1738310292.324:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:58:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0x6, "3f88d8"}, 0x6) r5 = pidfd_getfd(r2, r0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1ff, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000000}, 0x20040040) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'sit0\x00', r4, 0x2f, 0x1, 0x1, 0x6, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x80, 0x7821, 0x1000, 0xfffffff8}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x2f, 0x5, 0x0, 0x9, 0x28, @loopback, @mcast1, 0x10, 0x8000, 0x3c9, 0x1}}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r8, 0x2d, 0x83, 0x80, 0x5, 0x20, @mcast2, @remote, 0x40, 0x80, 0x23, 0xc7}}) sendmsg$nl_xfrm(r9, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)=@flushpolicy={0x2f4, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@replay_thresh={0x8, 0xb, 0x9}, @algo_aead={0x129, 0x12, {{'ccm(cast5-generic)\x00'}, 0x6e8, 0xa0, "69c62cb336fc26e31f749ef7d70e9c56eb2b9dea6a82957691af1c152c9e87de7ada551a0b76f68e8c4671f2a979ccc0a112bbe956661ed57a01da06c8b121352d8c38477f1a5f649ea35eb75247643a84e5a67adf6f5bb32ad612a0d077f035663997e3a8cdbc33a178e08af764a810baf9afe3de2409797fda9b5ed72a7410c4dd51a0a9c3e3fbea03504a2a1ae14dcc76053205a60690491fdeaa892441fd3083aa3e504aac43b60b62d7fb04c5a36cb4ed0962545b71af92c29fdefa27de1cf3b6175df8b0b96797c392e7782504104a2acec2196e74c759ab5115"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d5, 0x2b}, 0x2, @in=@local, 0x34ff, 0x2, 0x2, 0xa2, 0x8, 0x6, 0x94}, {{@in=@remote, 0x4d3, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x1, 0x8, 0x1, 0x7, 0x800}, {{@in=@local, 0x4d2, 0x6c}, 0xa, @in=@private=0xa010101, 0x3503, 0x2, 0x0, 0x2, 0x100, 0x4, 0x2}, {{@in=@multicast2, 0x4d6, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3506, 0x0, 0x3, 0x7f, 0xfe5, 0xccf1}]}, @migrate={0x9c, 0x11, [{@in=@loopback, @in=@rand_addr=0x64010101, @in6=@private0, @in=@private=0xa010101, 0x3c, 0x1, 0x0, 0x3501, 0xa, 0xa}, {@in6=@private1, @in6=@local, @in=@broadcast, @in6=@mcast2, 0x6c, 0x3, 0x0, 0x3500, 0x2, 0x2}]}, @XFRMA_IF_ID={0x8, 0x1f, r10}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008005) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', r8, 0x29, 0xd0, 0x2, 0x7f, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x10, 0x8, 0x2}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 07:58:12 executing program 4: semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000000)=""/13) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x420, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x2, 0x101, 0x4749, 0x7b}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x91a, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x240048d1}, 0x4040040) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008007}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x9, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x400, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r3, 0x2f, 0x1f, 0x31, 0x8, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8080, 0x700, 0x1, 0x5}}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4765}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4044854) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x8000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r2, 0x107, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 07:58:12 executing program 5: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r0 = memfd_secret(0x80000) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x1, 0xffff, {{0x10, 0x4, 0x3, 0x35, 0x40, 0x66, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @multicast1, {[@end, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x1, [{@loopback, 0x400}, {@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}]}, @noop, @timestamp={0x44, 0x8, 0x7f, 0x0, 0xc, [0x6]}, @generic={0x44, 0x5, "411062"}]}}}}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040c1}, 0x20040000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', r3, 0x7, 0x40, 0x10001, 0x101, {{0x11, 0x4, 0x3, 0x3, 0x44, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @private=0xa010101, {[@end, @noop, @end, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x0, [0x1f, 0x918, 0x7fff]}, @end, @noop, @generic={0x94, 0xf, "5ac35d3676ab40d74a925fe4f0"}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0xe, [{@empty, 0x5}]}]}}}}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x80010, r1, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000480)={'gre0\x00', r6, 0x90, 0x40, 0x80000000, 0x3ff, {{0x1b, 0x4, 0x1, 0x0, 0x6c, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x74, 0x0, 0x0, [0x9, 0x8, 0x3, 0x3, 0xffffffff, 0x3ff]}, @generic={0x7, 0xa, "08bc53ebe76b4fb5"}, @rr={0x7, 0x17, 0x81, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @multicast2]}, @end, @end, @cipso={0x86, 0x14, 0x0, [{0x1, 0xe, "090998e7d6c83b6c6419dff2"}]}, @noop]}}}}}) r8 = open_tree(r0, &(0x7f0000000580)='./file0\x00', 0x8900) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x111200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000410) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x515201, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x404, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x41}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x35}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x8801) 07:58:12 executing program 6: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x2, 0x81}, {0x1, 0xade, 0x800}, {0x4, 0x0, 0x1000}, {0x0, 0x47ea, 0x1000}, {0x1, 0x1f, 0xb1a13fad92fad5ab}, {0x0, 0xe9af, 0x800}], 0x6) r0 = semget(0x0, 0x1, 0x4) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000040)=""/159) r1 = semget(0x3, 0x1, 0x6) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000100)=""/110) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000180)=""/178) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x286001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x24008010) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r4, r5}}, './file0\x00'}) r8 = semget(0x1, 0x0, 0x120) semctl$GETNCNT(r8, 0x2, 0xe, &(0x7f00000004c0)=""/150) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x42}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4042}, 0x4040095) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 07:58:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x452c8fe1, 0x81, {{0x13, 0x4, 0x0, 0x7, 0x4c, 0x65, 0x0, 0x1f, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @cipso={0x86, 0x15, 0x0, [{0x6, 0xd, "ef7482ddd96b7f6680025f"}, {0x6, 0x2}]}, @lsrr={0x83, 0x1f, 0x59, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x2, 0x2, 0x14, @empty, @mcast1, 0x20, 0x1, 0x1}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x108, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x24008040}, 0x40000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xe0952889bf722643}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x88, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x66}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x4040) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001680), 0x2000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000016c0)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x68, r2}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x2, 0x5d0, 0x2, 0x7}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001b00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001880)={0x230, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x21c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "ec945ef99190f4e3afa7768081ec9a2fbd305e3382ddafc5fbd23c5dd2dcf3f49f2d3539a66db240aac9e64624dcaf69a6e72324b31701e6d53a2b46b92a436df5b20466844286b64d87d53f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "bb3aed605a77aecf9e50c79ba0a4b6de89e1362ce0fe97f1b4f185f66328c2a3af9801b24916e088d581aa1d160184b79529470d0fc7db94ad243864113c3dc5b0b04e98199d7d77235d84b5664edaf06d02c70bc632e03eb6b3e5bdf641b8241d518a3f9c539f26f8b488ef71785f164e69b837602f04db70e9f7cb9c2f8ddb9e982ca590a44174ae50c5acb7f02434347bb18d7f07748d2cc0fb7b89e716e9a99ab19688cd59701317cd1098d5f416f4820327d342c516206399a0470547c9ded049d15168899d28c78753038197def0ef10b32d12006bc573f4ae"}, @ETHTOOL_A_BITSET_MASK={0x76, 0x5, "b437aa34a0d813bff4b0a6866cf21960f7f8792a871f260b15d5ebfa770b0014ec3cc22fbe815bf37dd1d58ce5413820749c5ee89d2322ae8e4fddd0d0e7911a645ce3911056c6357bbbbfc10c7b6b8dce44ddc31f20780569da9e22116bd3d3cdbd011748dff4951b0d359b63c5efd16430"}, @ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "01c5d55ff3099c9bc3dd75a30828aec0323820bbebc9b0d70e90a653e828c9999d82aa2a520e5809f6b57fb4bf7b76af0e20489cf62764c71cbad9b0002ad2d66be7b4a4d262dd40c7d96fd11f91572cb60d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001c00)={'syztnl2\x00', &(0x7f0000001b80)={'ip6tnl0\x00', r1, 0x29, 0x20, 0x1e, 0x9, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x8, 0x300, 0x10000}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001c40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001d00)={'syztnl1\x00', &(0x7f0000001c80)={'syztnl0\x00', r2, 0x29, 0xf8, 0xe, 0x1, 0x32, @mcast1, @loopback, 0x700, 0x10, 0x4, 0x6}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d80)={0x19c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xb26efd342c81cbd3}, 0x1) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002000), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", ""]}, 0x24}}, 0x18801) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002240)={'ip_vti0\x00', &(0x7f0000002100)={'syztnl1\x00', r9, 0x8, 0x20, 0x8, 0x9, {{0x43, 0x4, 0x0, 0xc, 0x10c, 0x66, 0x0, 0x7f, 0x29, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x14, 0xda, 0x0, 0xf, [0xfffffff7, 0x3ff, 0x20, 0x8]}, @lsrr={0x83, 0x1b, 0x71, [@loopback, @multicast2, @rand_addr=0x64010102, @local, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xf9, 0x3, 0x5, [{@multicast1, 0x52de}, {@local, 0x8}, {@remote, 0x6}, {@multicast1, 0x3}]}, @rr={0x7, 0x1b, 0xa7, [@empty, @multicast1, @loopback, @loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@remote, 0x80000001}]}, @timestamp_addr={0x44, 0x24, 0xd4, 0x1, 0xf, [{@loopback, 0x1f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@multicast1, 0x5}, {@loopback, 0x1}]}, @lsrr={0x83, 0x7, 0x57, [@empty]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x3, 'f'}, {0x1, 0x11, "5f7e5ab9669f1ba19eccdafca0f1a6"}, {0x0, 0x6, "52e5a766"}, {0x2, 0x9, "3531fdcd17e954"}]}, @rr={0x7, 0x1f, 0x33, [@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @broadcast, @empty]}]}}}}}) [ 89.428424] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.430216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.434510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.438235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.441640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.444205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.454382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.457209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.468603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.470742] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.477393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.481806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.486596] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.492699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.504803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.506577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.514277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.517312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.523840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.552374] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.555468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.558352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.562324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.564842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.568567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.570788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.574144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.576562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.579485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.582282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.595772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.598163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.604192] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.609470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.611403] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.615167] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.617533] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.619728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.621281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.632210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.637553] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.642106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.650501] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.677458] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.683236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.690351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.697053] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.699583] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.572392] Bluetooth: hci0: command tx timeout [ 91.573304] Bluetooth: hci1: command tx timeout [ 91.637359] Bluetooth: hci2: command tx timeout [ 91.701034] Bluetooth: hci3: command tx timeout [ 91.701597] Bluetooth: hci4: command tx timeout [ 91.764036] Bluetooth: hci6: command tx timeout [ 91.765392] Bluetooth: hci5: command tx timeout [ 91.765994] Bluetooth: hci7: command tx timeout [ 93.621078] Bluetooth: hci0: command tx timeout [ 93.621583] Bluetooth: hci1: command tx timeout [ 93.684173] Bluetooth: hci2: command tx timeout [ 93.748160] Bluetooth: hci3: command tx timeout [ 93.749484] Bluetooth: hci4: command tx timeout [ 93.812395] Bluetooth: hci5: command tx timeout [ 93.813516] Bluetooth: hci7: command tx timeout [ 93.813725] Bluetooth: hci6: command tx timeout [ 95.671251] Bluetooth: hci1: command tx timeout [ 95.671286] Bluetooth: hci0: command tx timeout [ 95.733191] Bluetooth: hci2: command tx timeout [ 95.797092] Bluetooth: hci4: command tx timeout [ 95.797138] Bluetooth: hci3: command tx timeout [ 95.860998] Bluetooth: hci5: command tx timeout [ 95.861074] Bluetooth: hci7: command tx timeout [ 95.861571] Bluetooth: hci6: command tx timeout [ 97.716207] Bluetooth: hci0: command tx timeout [ 97.717260] Bluetooth: hci1: command tx timeout [ 97.782056] Bluetooth: hci2: command tx timeout [ 97.844095] Bluetooth: hci4: command tx timeout [ 97.845459] Bluetooth: hci3: command tx timeout [ 97.908103] Bluetooth: hci7: command tx timeout [ 97.908160] Bluetooth: hci5: command tx timeout [ 97.910018] Bluetooth: hci6: command tx timeout [ 151.874214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.876634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.880136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.881445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.884745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.887374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.892890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.895778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.896745] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.898337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.900174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.904391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.911235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.915535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.919489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.923344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.926770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.931244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.006664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.007657] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.009432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.011650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.014201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.019702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.022118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.022769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.024066] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.025371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.026721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.035181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.036198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.041848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.048626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.054448] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.055534] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.056452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.057833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.070635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.072547] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.073786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.076786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.077888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.087040] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.094054] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.101638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.103061] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.104104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.110854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.973199] Bluetooth: hci2: command tx timeout [ 153.974036] Bluetooth: hci1: command tx timeout [ 154.035976] Bluetooth: hci0: command tx timeout [ 154.100983] Bluetooth: hci3: command tx timeout [ 154.164098] Bluetooth: hci7: command tx timeout [ 154.164258] Bluetooth: hci6: command tx timeout [ 154.164891] Bluetooth: hci5: command tx timeout [ 154.165467] Bluetooth: hci4: command tx timeout [ 156.020011] Bluetooth: hci1: command tx timeout [ 156.020504] Bluetooth: hci2: command tx timeout [ 156.084269] Bluetooth: hci0: command tx timeout [ 156.149083] Bluetooth: hci3: command tx timeout [ 156.212644] Bluetooth: hci6: command tx timeout [ 156.213549] Bluetooth: hci5: command tx timeout [ 156.214059] Bluetooth: hci4: command tx timeout [ 156.214505] Bluetooth: hci7: command tx timeout [ 158.068019] Bluetooth: hci2: command tx timeout [ 158.068519] Bluetooth: hci1: command tx timeout [ 158.132039] Bluetooth: hci0: command tx timeout [ 158.196104] Bluetooth: hci3: command tx timeout [ 158.260033] Bluetooth: hci5: command tx timeout [ 158.260076] Bluetooth: hci7: command tx timeout [ 158.260534] Bluetooth: hci4: command tx timeout [ 158.260954] Bluetooth: hci6: command tx timeout [ 160.116090] Bluetooth: hci1: command tx timeout [ 160.116627] Bluetooth: hci2: command tx timeout [ 160.179993] Bluetooth: hci0: command tx timeout [ 160.244125] Bluetooth: hci3: command tx timeout [ 160.308059] Bluetooth: hci6: command tx timeout [ 160.308522] Bluetooth: hci4: command tx timeout [ 160.308567] Bluetooth: hci7: command tx timeout [ 160.309619] Bluetooth: hci5: command tx timeout [ 213.845598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.847660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.849597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.850814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.851760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.853195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.858523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.860168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.861299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.862332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.866723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.867805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.961674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.966781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.971126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.983092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.984672] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.988294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.044488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.048220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.050250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.051244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.054935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.057490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.058383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.060700] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.062400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.064082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.078224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.081761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.167694] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.171510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.172931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.173844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.174791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.176253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.177031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.178349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.180112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.188295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.197286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.199401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.209335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.216506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.219503] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.223201] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.224078] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.230869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.924637] Bluetooth: hci0: command tx timeout [ 215.925583] Bluetooth: hci1: command tx timeout [ 216.053166] Bluetooth: hci2: command tx timeout [ 216.117104] Bluetooth: hci3: command tx timeout [ 216.181661] Bluetooth: hci4: command tx timeout [ 216.308144] Bluetooth: hci6: command tx timeout [ 216.309172] Bluetooth: hci5: command tx timeout [ 216.309218] Bluetooth: hci7: command tx timeout [ 217.972016] Bluetooth: hci0: command tx timeout [ 217.972080] Bluetooth: hci1: command tx timeout [ 218.101088] Bluetooth: hci2: command tx timeout [ 218.164003] Bluetooth: hci3: command tx timeout [ 218.228996] Bluetooth: hci4: command tx timeout [ 218.356032] Bluetooth: hci7: command tx timeout [ 218.356988] Bluetooth: hci6: command tx timeout [ 218.357067] Bluetooth: hci5: command tx timeout [ 220.020031] Bluetooth: hci1: command tx timeout [ 220.020476] Bluetooth: hci0: command tx timeout [ 220.148014] Bluetooth: hci2: command tx timeout [ 220.212061] Bluetooth: hci3: command tx timeout [ 220.276185] Bluetooth: hci4: command tx timeout [ 220.404011] Bluetooth: hci5: command tx timeout [ 220.404043] Bluetooth: hci6: command tx timeout [ 220.404464] Bluetooth: hci7: command tx timeout [ 222.069047] Bluetooth: hci0: command tx timeout [ 222.069549] Bluetooth: hci1: command tx timeout [ 222.196956] Bluetooth: hci2: command tx timeout [ 222.261038] Bluetooth: hci3: command tx timeout [ 222.324234] Bluetooth: hci4: command tx timeout [ 222.452149] Bluetooth: hci6: command tx timeout [ 222.452660] Bluetooth: hci5: command tx timeout [ 222.453176] Bluetooth: hci7: command tx timeout [ 273.954859] [ 273.955095] ====================================================== [ 273.955635] WARNING: possible circular locking dependency detected [ 273.956175] 6.13.0-next-20250130 #1 Not tainted [ 273.956584] ------------------------------------------------------ [ 273.957800] kworker/u8:0/11 is trying to acquire lock: [ 273.958954] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.960840] [ 273.960840] but task is already holding lock: [ 273.962039] ffff888035f70768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 273.963799] [ 273.963799] which lock already depends on the new lock. [ 273.963799] [ 273.965739] [ 273.965739] the existing dependency chain (in reverse order) is: [ 273.967163] [ 273.967163] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 273.968345] __mutex_lock+0x13d/0xb50 [ 273.969256] wiphy_register+0x1b2e/0x25d0 [ 273.970347] ieee80211_register_hw+0x23a4/0x3d60 [ 273.971254] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 273.971948] init_mac80211_hwsim+0x389/0x870 [ 273.972591] do_one_initcall+0xf9/0x640 [ 273.973183] kernel_init_freeable+0x53d/0x7a0 [ 273.973839] kernel_init+0x1e/0x2d0 [ 273.974354] ret_from_fork+0x48/0x80 [ 273.974877] ret_from_fork_asm+0x1a/0x30 [ 273.975463] [ 273.975463] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.976205] __lock_acquire+0x29fd/0x4580 [ 273.976801] lock_acquire+0x19b/0x520 [ 273.977326] __mutex_lock+0x13d/0xb50 [ 273.977897] unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.978612] unregister_netdevice_queue+0x224/0x2e0 [ 273.979249] _cfg80211_unregister_wdev+0x57b/0x700 [ 273.979893] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 273.980554] ieee80211_unregister_hw+0x55/0x3a0 [ 273.981206] hwsim_exit_net+0x3a0/0x730 [ 273.981759] ops_exit_list+0xb3/0x180 [ 273.982306] cleanup_net+0x546/0xad0 [ 273.982818] process_one_work+0x8ee/0x1a10 [ 273.983442] worker_thread+0x674/0xe70 [ 273.984031] kthread+0x3ab/0x720 [ 273.984552] ret_from_fork+0x48/0x80 [ 273.985055] ret_from_fork_asm+0x1a/0x30 [ 273.985664] [ 273.985664] other info that might help us debug this: [ 273.985664] [ 273.986610] Possible unsafe locking scenario: [ 273.986610] [ 273.987337] CPU0 CPU1 [ 273.987848] ---- ---- [ 273.988357] lock(&rdev->wiphy.mtx); [ 273.988821] lock(rtnl_mutex); [ 273.989489] lock(&rdev->wiphy.mtx); [ 273.990194] lock(rtnl_mutex); [ 273.990623] [ 273.990623] *** DEADLOCK *** [ 273.990623] [ 273.991320] 4 locks held by kworker/u8:0/11: [ 273.991868] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 273.993141] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 273.994264] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 273.995085] #3: ffff888035f70768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 273.995915] [ 273.995915] stack backtrace: [ 273.996282] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250130 #1 [ 273.996320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 273.996342] Workqueue: netns cleanup_net [ 273.996386] Call Trace: [ 273.996397] [ 273.996409] dump_stack_lvl+0xca/0x120 [ 273.996468] print_circular_bug+0x47b/0x750 [ 273.996516] check_noncircular+0x2e9/0x3c0 [ 273.996557] ? lock_repin_lock+0x207/0x320 [ 273.996620] ? __pfx_check_noncircular+0x10/0x10 [ 273.996662] ? hlock_class+0x4e/0x130 [ 273.996693] ? mark_lock+0xac/0xed0 [ 273.996734] ? __pfx_lock_repin_lock+0x10/0x10 [ 273.996799] ? lockdep_lock+0xba/0x1b0 [ 273.996858] ? __pfx_lockdep_lock+0x10/0x10 [ 273.996923] __lock_acquire+0x29fd/0x4580 [ 273.996982] ? __pfx___lock_acquire+0x10/0x10 [ 273.997028] ? lock_release+0x20f/0x6f0 [ 273.997074] ? __pfx_lock_release+0x10/0x10 [ 273.997123] lock_acquire+0x19b/0x520 [ 273.997168] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.997217] ? __pfx_lock_acquire+0x10/0x10 [ 273.997263] ? srso_return_thunk+0x5/0x5f [ 273.997320] ? lock_release+0x20f/0x6f0 [ 273.997365] ? srso_return_thunk+0x5/0x5f [ 273.997422] ? lock_is_held_type+0x9e/0x120 [ 273.997490] ? srso_return_thunk+0x5/0x5f [ 273.997550] __mutex_lock+0x13d/0xb50 [ 273.997604] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.997650] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.997697] ? srso_return_thunk+0x5/0x5f [ 273.997754] ? synchronize_rcu_expedited+0x38a/0x420 [ 273.997800] ? __pfx___mutex_lock+0x10/0x10 [ 273.997855] ? __pfx_autoremove_wake_function+0x10/0x10 [ 273.997911] ? srso_return_thunk+0x5/0x5f [ 273.997967] ? kasan_quarantine_put+0x84/0x1e0 [ 273.998031] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 273.998067] ? srso_return_thunk+0x5/0x5f [ 273.998128] unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.998174] ? __virt_addr_valid+0x2e8/0x5d0 [ 273.998229] ? __pfx_lock_release+0x10/0x10 [ 273.998275] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 273.998321] ? find_held_lock+0x2c/0x110 [ 273.998382] ? srso_return_thunk+0x5/0x5f [ 273.998441] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 273.998502] ? srso_return_thunk+0x5/0x5f [ 273.998558] ? lock_release+0x20f/0x6f0 [ 273.998604] ? __pfx_lock_release+0x10/0x10 [ 273.998648] ? srso_return_thunk+0x5/0x5f [ 273.998705] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.998754] ? srso_return_thunk+0x5/0x5f [ 273.998816] unregister_netdevice_queue+0x224/0x2e0 [ 273.998860] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 273.998904] ? up_write+0x195/0x520 [ 273.998961] _cfg80211_unregister_wdev+0x57b/0x700 [ 273.999014] ? srso_return_thunk+0x5/0x5f [ 273.999075] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 273.999113] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 273.999152] ? srso_return_thunk+0x5/0x5f [ 273.999208] ? srso_return_thunk+0x5/0x5f [ 273.999265] ? synchronize_rcu+0x1ff/0x260 [ 273.999309] ieee80211_unregister_hw+0x55/0x3a0 [ 273.999354] hwsim_exit_net+0x3a0/0x730 [ 273.999396] ? __pfx_hwsim_exit_net+0x10/0x10 [ 273.999437] ? srso_return_thunk+0x5/0x5f [ 273.999493] ? netdev_run_todo+0x788/0x1040 [ 273.999543] ? __pfx_hwsim_exit_net+0x10/0x10 [ 273.999586] ops_exit_list+0xb3/0x180 [ 273.999629] cleanup_net+0x546/0xad0 [ 273.999675] ? __pfx_cleanup_net+0x10/0x10 [ 273.999730] process_one_work+0x8ee/0x1a10 [ 273.999798] ? __pfx_lock_acquire+0x10/0x10 [ 273.999844] ? __pfx_process_one_work+0x10/0x10 [ 273.999905] ? srso_return_thunk+0x5/0x5f [ 273.999961] ? move_linked_works+0x172/0x270 [ 274.000007] ? srso_return_thunk+0x5/0x5f [ 274.000063] ? assign_work+0x196/0x240 [ 274.000123] worker_thread+0x674/0xe70 [ 274.000184] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.000237] ? __pfx_worker_thread+0x10/0x10 [ 274.000300] kthread+0x3ab/0x720 [ 274.000356] ? __pfx_kthread+0x10/0x10 [ 274.000410] ? srso_return_thunk+0x5/0x5f [ 274.000466] ? finish_task_switch.isra.0+0x206/0x840 [ 274.000519] ? __pfx_kthread+0x10/0x10 [ 274.000575] ret_from_fork+0x48/0x80 [ 274.000607] ? __pfx_kthread+0x10/0x10 [ 274.000661] ret_from_fork_asm+0x1a/0x30 [ 274.000731] [ 275.586813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.590712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.597810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.605856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.609860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.612446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.708220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.710808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.713227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.716769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.719119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.721152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.907374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.910435] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.915163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.920142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.922699] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.924677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.985634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.996299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.004338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.025435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.032378] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.034481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.037036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.049282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.070067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.073472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.078131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.081488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.090221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.092150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.099358] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.110409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.116597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.128222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.139808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.149106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.159816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.185333] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.187211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.196270] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.205785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.210147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.224449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.264230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.272361] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.274802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.683972] Bluetooth: hci0: command tx timeout [ 277.747959] Bluetooth: hci1: command tx timeout [ 278.004138] Bluetooth: hci2: command tx timeout [ 278.133104] Bluetooth: hci3: command tx timeout [ 278.197915] Bluetooth: hci5: command tx timeout [ 278.259985] Bluetooth: hci4: command tx timeout [ 278.324010] Bluetooth: hci6: command tx timeout [ 278.388063] Bluetooth: hci7: command tx timeout [ 279.731956] Bluetooth: hci0: command tx timeout [ 279.796990] Bluetooth: hci1: command tx timeout [ 280.051928] Bluetooth: hci2: command tx timeout [ 280.180026] Bluetooth: hci3: command tx timeout [ 280.244628] Bluetooth: hci5: command tx timeout [ 280.307987] Bluetooth: hci4: command tx timeout [ 280.372022] Bluetooth: hci6: command tx timeout [ 280.435948] Bluetooth: hci7: command tx timeout [ 281.780904] Bluetooth: hci0: command tx timeout [ 281.843952] Bluetooth: hci1: command tx timeout [ 282.099962] Bluetooth: hci2: command tx timeout [ 282.227920] Bluetooth: hci3: command tx timeout [ 282.291910] Bluetooth: hci5: command tx timeout [ 282.355921] Bluetooth: hci4: command tx timeout [ 282.419907] Bluetooth: hci6: command tx timeout [ 282.485961] Bluetooth: hci7: command tx timeout [ 283.828025] Bluetooth: hci0: command tx timeout [ 283.892049] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 08:01:18 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283d2d5 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed100134f046 R10=000000000000005b R11=6f6c206863696877 R12=000000000000005b R13=0000000000000010 R14=ffffffff88693020 R15=ffffffff8283d2c0 RIP=ffffffff8283d32d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f85416fc040 CR3=0000000016166000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000003f743ea9f2ab88b0 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=67725345576c2e72656c6c616b7a7973 XMM04=000000c00030a2e8000000c00030a260 XMM05=000000c00030a460000000c00030a300 XMM06=000000c00030a4b0000000c00030a488 XMM07=000000c00030a500000000c0003091c0 XMM08=000000c00030a4d8000000c000309420 XMM09=000000c000308990000000c00030a5e0 XMM10=000000c000309230000000c000308d40 XMM11=000000c00030a380000000c00030a278 XMM12=000000c0003088f0000000c00030a528 XMM13=000000c0003092a0000000c000308f00 XMM14=000000c000309360000000c000309300 XMM15=000000c000308900000000c0003093d0 info registers vcpu 1 RAX=ffff88800b409280 RBX=ffff88800b408de0 RCX=ffffffff81429b7a RDX=ffff88800b404360 RSI=0000000000000001 RDI=ffff88800b409480 RBP=ffff88800b409480 RSP=ffff88800eff7da0 R8 =0000000000000000 R9 =ffffed1001d15a00 R10=ffff88800e8ad007 R11=ffff88800e5657f8 R12=ffff88800b408ad0 R13=ffff88800b408de0 R14=ffff88800e565340 R15=0000000000000086 RIP=ffffffff81aef260 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe11a3dd038 CR3=0000000016166000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0000d9ce0000000c0000cd860 XMM02=000000c0000cd950000000c0000cd920 XMM03=000000c0000da580000000c0000cd980 XMM04=000000c000086750000000c000086720 XMM05=000000c000086f60000000c000086f30 XMM06=000000c000086fc0000000c000086f90 XMM07=000000c000087020000000c000086ff0 XMM08=000000c00005a3c0000000c000087050 XMM09=000000c000087080000000c00005b650 XMM10=000000c0000870e0000000c0000870b0 XMM11=000000c000087140000000c000087110 XMM12=000000c000106f20000000c000087170 XMM13=0000000000000041000000c00001a000 XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060