syzkaller login: [ 57.205252] sshd (238) used greatest stack depth: 23864 bytes left Warning: Permanently added '[localhost]:10700' (ECDSA) to the list of known hosts. 2025/01/19 07:51:09 fuzzer started 2025/01/19 07:51:09 dialing manager at localhost:44245 [ 63.292503] cgroup: Unknown subsys name 'net' [ 63.388174] cgroup: Unknown subsys name 'cpuset' [ 63.421211] cgroup: Unknown subsys name 'rlimit' [ 69.092870] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.288766] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 07:51:27 syscalls: 205 2025/01/19 07:51:27 code coverage: enabled 2025/01/19 07:51:27 comparison tracing: enabled 2025/01/19 07:51:27 extra coverage: enabled 2025/01/19 07:51:27 setuid sandbox: enabled 2025/01/19 07:51:27 namespace sandbox: enabled 2025/01/19 07:51:27 Android sandbox: enabled 2025/01/19 07:51:27 fault injection: enabled 2025/01/19 07:51:27 leak checking: enabled 2025/01/19 07:51:27 net packet injection: enabled 2025/01/19 07:51:27 net device setup: enabled 2025/01/19 07:51:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 07:51:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 07:51:27 USB emulation: enabled 2025/01/19 07:51:27 hci packet injection: enabled 2025/01/19 07:51:27 wifi device emulation: enabled 2025/01/19 07:51:27 802.15.4 emulation: enabled 2025/01/19 07:51:27 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 07:51:28 starting 8 fuzzer processes 07:51:28 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r2 = socket(0x1, 0x6, 0x0) accept$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) connect$packet(r4, &(0x7f0000000240)={0x11, 0x1c, r5, 0x1, 0x2a, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4011) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000440)={0x8, &(0x7f0000000400)=[{0x0, 0x4, 0x2, 0x60}, {0x5, 0xaa, 0x0, 0x1}, {0x5, 0x2, 0x1f, 0x7f}, {0x3ff, 0xdf, 0x4, 0x401}, {0x2, 0x8, 0x2, 0x7776}, {0x7a, 0x9, 0x0, 0xd3}, {0x401, 0x9, 0x1f, 0xffffffc1}, {0x0, 0x0, 0x40, 0x80000000}]}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x72}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040840) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x300}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000094}, 0x20040810) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000940)) r9 = socket(0x18, 0x80000, 0x9) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000844) 07:51:28 executing program 1: ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000000)) ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000040)=@disckey={0x2, 0x1, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x803, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20008080) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000b80)=0xa) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000bc0), 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r5, 0x430, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40081) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000e80), r6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x95}, 0xc010) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000fc0)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r7, 0x404, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40001) 07:51:28 executing program 2: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x9, 0x9, 0x1, 0xe0, 0x2, 0x8}) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a80), 0x180, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000ac0)=@physical={0x0, 0x3, [{0x0, 0x0, 0x0, 0x4, 0x5, 0x1, 0x2, 0x9, 0x2, 0x1, 0xff, 0xff, 0x81}, {0xd, 0x3, 0x0, 0x9, 0x6, 0x0, 0x2, 0x5, 0x1, 0x0, 0x5, 0x4, 0x10001}, {0xe, 0x6, 0x8, 0x6, 0x8, 0x0, 0x1, 0x7, 0x4, 0x1, 0x0, 0x200, 0x9}, {0x4, 0x8, 0x7, 0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x2, 0x8, 0xfffffffa}]}) pipe(&(0x7f0000001300)={0xffffffffffffffff}) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000001340)={@lba=0x5}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001380), 0x500, 0x0) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f00000013c0)={0xff, 0x3f, 0x2, 0xff, 0x1, 0xff}) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000001400)=0x6) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/module/lockd', 0x2000, 0x53) ioctl$CDROM_SELECT_SPEED(r3, 0x5322, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$CDROM_SELECT_SPEED(r4, 0x5322, 0x22) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x78001, 0x0) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000001500)={0x2c, 0x9, 0x8, 0x20, 0x9, 0x20}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$CDROMREADTOCHDR(r6, 0x5305, &(0x7f0000001fc0)={0x6, 0x60}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002000), 0x341042, 0x0) ioctl$CDROMREADCOOKED(r7, 0x5315, &(0x7f0000002040)) ioctl$CDROM_LOCKDOOR(r4, 0x5329, 0x1) 07:51:28 executing program 3: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x2) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x1000) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x2040) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) getpeername$packet(r0, &(0x7f0000000500), &(0x7f0000000540)=0x14) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x12c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bfb02c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26c5ec95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe4e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc563}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5158a969}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dd75664}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x336a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fc1ce9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eb5d77d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb19c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aa69c18}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3018b093}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe012cdb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fa8262d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa48d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2254}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f2fa77}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb72c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d1f18f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5245}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7543cd5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29ec}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xb0}, 0x484) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000780)=0xfe7, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x532}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}}, 0x51) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x340f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010810}, 0x40800) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000bc0), &(0x7f0000000c00)=0x14) 07:51:28 executing program 4: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/9p', 0x882, 0x124) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200208c1}, 0x40800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x200002, 0x107) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x890) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x10880, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000640)={&(0x7f0000000580), &(0x7f00000005c0)=""/109, 0x6d}) r6 = syz_open_dev$usbmon(&(0x7f0000000680), 0xfffffffffffffffc, 0x4000) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f00000006c0)=@lsc={0x3, 0x2, "4f223a91e1109ff45d91"}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000840)=0xe8) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x90e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x426}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020080}, 0x800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000a40)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000b00)={0x0, @can={0x1d, 0x0}, @vsock, @can={0x1d, r7}, 0x9, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000ac0)='team0\x00', 0x5, 0x2, 0x5188}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xf0, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf0}}, 0x4000) [ 82.519786] audit: type=1400 audit(1737273089.010:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:51:29 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c091) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x6048844}, 0x8040) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000804) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8b}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xac2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd5ea}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004001}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10814) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8840}, 0xc040) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r4) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000dc0)=@physical={0x0, 0x1, [{0x9, 0x9, 0xd, 0x2, 0x1, 0x0, 0x0, 0x8, 0x4, 0x1, 0x8, 0x8, 0x5}, {0x1, 0x8, 0x4, 0x3, 0x8, 0x1, 0x0, 0x5, 0x2, 0x1, 0xe59b, 0x4, 0x3a5}, {0x6, 0x5, 0x7, 0x4, 0x9, 0x1, 0x3, 0x6, 0x2, 0x1, 0x2e41, 0x9, 0xffff}, {0x2, 0xa, 0xa, 0x3, 0x0, 0x1, 0x3, 0x1, 0x6, 0x1, 0x0, 0x101}]}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x5) 07:51:29 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4a4441, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x4c0c00, 0x0) ioctl$CDROMRESUME(r1, 0x5302) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000080)) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x100) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/i915', 0x400080, 0x4) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000180)) ioctl$CDROMRESUME(r2, 0x5302) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$CDROMGETSPINDOWN(r3, 0x531d, &(0x7f0000000200)) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x63) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1) ioctl$CDROMRESUME(r2, 0x5302) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000280)={0xc1, 0x1d, 0x40, 0x5, 0xe5, 0x8}) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000d00)=@physical={0x0, 0x1, [{0xd, 0x6, 0x8, 0x1, 0x6, 0x0, 0x1, 0xc, 0x9, 0x1, 0xffffff20, 0x4, 0x5}, {0xe, 0x2, 0x7, 0x2, 0x2, 0x0, 0x1, 0xc, 0x4, 0x0, 0x9840, 0x3, 0xfffff000}, {0x0, 0x5, 0x5, 0x8, 0xe, 0x1, 0x1, 0xc, 0xe, 0x1, 0x8, 0x40, 0x1}, {0x5, 0x9, 0x5, 0x3, 0x3, 0x0, 0x2, 0x7, 0x0, 0x0, 0xffff, 0x7fff, 0x5}]}) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x3) 07:51:29 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x2d) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x88}}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x880, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/151, 0x97, 0x0, &(0x7f0000000440)=""/58, 0x3a}, &(0x7f00000004c0)=0x40) connect$packet(r1, &(0x7f0000000500)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r2) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x4c}}, 0x800) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x111000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r6) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/sg', 0x14080, 0x240) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x7}}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x68}}, 0x20040000) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000009c0)={0x2, 0x6}, 0x4) [ 83.806105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.808638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.810159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.816635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.818866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.820414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.866431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.873479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.884550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.887961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.891211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.892772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.001859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.008540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.012562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.014854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.019662] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.020564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.023543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.024899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.026366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.029457] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.032446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.033640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.035492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.039046] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.040188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.047368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.058668] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.063450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.069347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.074953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.085688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.085909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.087816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.090902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.125302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.126869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.132587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.135065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.136843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.140694] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.141704] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.147359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.152369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.175071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.205406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.224974] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.898723] Bluetooth: hci0: command tx timeout [ 85.962340] Bluetooth: hci1: command tx timeout [ 86.090558] Bluetooth: hci4: command tx timeout [ 86.091094] Bluetooth: hci3: command tx timeout [ 86.154415] Bluetooth: hci2: command tx timeout [ 86.218960] Bluetooth: hci5: command tx timeout [ 86.219111] Bluetooth: hci6: command tx timeout [ 86.282513] Bluetooth: hci7: command tx timeout [ 87.948407] Bluetooth: hci0: command tx timeout [ 88.012163] Bluetooth: hci1: command tx timeout [ 88.139923] Bluetooth: hci3: command tx timeout [ 88.139962] Bluetooth: hci4: command tx timeout [ 88.202487] Bluetooth: hci2: command tx timeout [ 88.267580] Bluetooth: hci6: command tx timeout [ 88.268135] Bluetooth: hci5: command tx timeout [ 88.332336] Bluetooth: hci7: command tx timeout [ 89.994497] Bluetooth: hci0: command tx timeout [ 90.059379] Bluetooth: hci1: command tx timeout [ 90.186772] Bluetooth: hci4: command tx timeout [ 90.187373] Bluetooth: hci3: command tx timeout [ 90.252355] Bluetooth: hci2: command tx timeout [ 90.315559] Bluetooth: hci5: command tx timeout [ 90.316723] Bluetooth: hci6: command tx timeout [ 90.379356] Bluetooth: hci7: command tx timeout [ 92.042505] Bluetooth: hci0: command tx timeout [ 92.106648] Bluetooth: hci1: command tx timeout [ 92.234590] Bluetooth: hci4: command tx timeout [ 92.235331] Bluetooth: hci3: command tx timeout [ 92.299348] Bluetooth: hci2: command tx timeout [ 92.362646] Bluetooth: hci6: command tx timeout [ 92.364500] Bluetooth: hci5: command tx timeout [ 92.427393] Bluetooth: hci7: command tx timeout [ 143.941968] syz-executor.1 (281) used greatest stack depth: 23552 bytes left [ 144.331783] [ 144.332081] ====================================================== [ 144.332817] WARNING: possible circular locking dependency detected [ 144.333570] 6.13.0-rc7-next-20250117 #1 Not tainted [ 144.334160] ------------------------------------------------------ [ 144.337796] kworker/u8:0/11 is trying to acquire lock: [ 144.339036] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.341170] [ 144.341170] but task is already holding lock: [ 144.341773] ffff888034aa8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.342746] [ 144.342746] which lock already depends on the new lock. [ 144.342746] [ 144.343505] [ 144.343505] the existing dependency chain (in reverse order) is: [ 144.344210] [ 144.344210] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 144.344868] __mutex_lock+0x13d/0xb50 [ 144.345350] wiphy_register+0x1b2e/0x25d0 [ 144.345846] ieee80211_register_hw+0x23a4/0x3d60 [ 144.346378] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 144.346936] init_mac80211_hwsim+0x389/0x870 [ 144.347451] do_one_initcall+0xf9/0x640 [ 144.347926] kernel_init_freeable+0x53d/0x7a0 [ 144.348446] kernel_init+0x1e/0x2d0 [ 144.348869] ret_from_fork+0x48/0x80 [ 144.349317] ret_from_fork_asm+0x1a/0x30 [ 144.349805] [ 144.349805] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 144.350413] __lock_acquire+0x29fd/0x4580 [ 144.350892] lock_acquire+0x19b/0x520 [ 144.351349] __mutex_lock+0x13d/0xb50 [ 144.351806] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.352423] unregister_netdevice_queue+0x224/0x2e0 [ 144.352980] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.353552] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.354100] ieee80211_unregister_hw+0x55/0x3a0 [ 144.354621] hwsim_exit_net+0x3a0/0x730 [ 144.355080] ops_exit_list+0xb3/0x180 [ 144.355520] cleanup_net+0x546/0xad0 [ 144.355956] process_one_work+0x8ee/0x1a10 [ 144.356459] worker_thread+0x674/0xe70 [ 144.356932] kthread+0x3ab/0x720 [ 144.357368] ret_from_fork+0x48/0x80 [ 144.357797] ret_from_fork_asm+0x1a/0x30 [ 144.358278] [ 144.358278] other info that might help us debug this: [ 144.358278] [ 144.359027] Possible unsafe locking scenario: [ 144.359027] [ 144.359591] CPU0 CPU1 [ 144.360044] ---- ---- [ 144.360491] lock(&rdev->wiphy.mtx); [ 144.360889] lock(rtnl_mutex); [ 144.361485] lock(&rdev->wiphy.mtx); [ 144.362103] lock(rtnl_mutex); [ 144.362461] [ 144.362461] *** DEADLOCK *** [ 144.362461] [ 144.363029] 4 locks held by kworker/u8:0/11: [ 144.363463] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 144.364472] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 144.365470] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 144.366381] #3: ffff888034aa8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.367400] [ 144.367400] stack backtrace: [ 144.367828] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 144.368622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 144.369408] Workqueue: netns cleanup_net [ 144.369822] Call Trace: [ 144.370071] [ 144.370297] dump_stack_lvl+0xca/0x120 [ 144.370711] print_circular_bug+0x47b/0x750 [ 144.371152] check_noncircular+0x2e9/0x3c0 [ 144.371584] ? __pfx_check_noncircular+0x10/0x10 [ 144.372059] ? hlock_class+0x4e/0x130 [ 144.372444] ? mark_lock+0xac/0xed0 [ 144.372820] ? srso_return_thunk+0x5/0x5f [ 144.373269] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 144.373741] ? lockdep_lock+0xba/0x1b0 [ 144.374160] ? __pfx_lockdep_lock+0x10/0x10 [ 144.374614] __lock_acquire+0x29fd/0x4580 [ 144.375046] ? __pfx___lock_acquire+0x10/0x10 [ 144.375500] ? lock_release+0x20f/0x6f0 [ 144.375911] ? __pfx_lock_release+0x10/0x10 [ 144.376352] lock_acquire+0x19b/0x520 [ 144.376743] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.377332] ? __pfx_lock_acquire+0x10/0x10 [ 144.377765] ? srso_return_thunk+0x5/0x5f [ 144.378191] ? lock_release+0x20f/0x6f0 [ 144.378595] ? srso_return_thunk+0x5/0x5f [ 144.379022] ? lock_is_held_type+0x9e/0x120 [ 144.379469] ? srso_return_thunk+0x5/0x5f [ 144.379902] __mutex_lock+0x13d/0xb50 [ 144.380305] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.380877] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.381466] ? srso_return_thunk+0x5/0x5f [ 144.381896] ? synchronize_rcu_expedited+0x38a/0x420 [ 144.382398] ? __pfx___mutex_lock+0x10/0x10 [ 144.382839] ? __pfx_autoremove_wake_function+0x10/0x10 [ 144.383377] ? srso_return_thunk+0x5/0x5f [ 144.383805] ? kasan_quarantine_put+0x84/0x1e0 [ 144.384280] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 144.384729] ? srso_return_thunk+0x5/0x5f [ 144.385167] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.385742] ? __virt_addr_valid+0x2e8/0x5d0 [ 144.386203] ? __pfx_lock_release+0x10/0x10 [ 144.386639] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 144.387224] ? find_held_lock+0x2c/0x110 [ 144.387653] ? srso_return_thunk+0x5/0x5f [ 144.388085] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 144.388591] ? srso_return_thunk+0x5/0x5f [ 144.389022] ? lock_release+0x20f/0x6f0 [ 144.389441] ? __pfx_lock_release+0x10/0x10 [ 144.389875] ? srso_return_thunk+0x5/0x5f [ 144.390305] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.390822] ? srso_return_thunk+0x5/0x5f [ 144.391258] unregister_netdevice_queue+0x224/0x2e0 [ 144.391763] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 144.392300] ? up_write+0x195/0x520 [ 144.392690] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.393187] ? srso_return_thunk+0x5/0x5f [ 144.393637] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.394130] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 144.394668] ? srso_return_thunk+0x5/0x5f [ 144.395095] ? srso_return_thunk+0x5/0x5f [ 144.395527] ? synchronize_rcu+0x1ff/0x260 [ 144.395953] ieee80211_unregister_hw+0x55/0x3a0 [ 144.396415] hwsim_exit_net+0x3a0/0x730 [ 144.396815] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.397269] ? srso_return_thunk+0x5/0x5f [ 144.397708] ? netdev_run_todo+0x788/0x1040 [ 144.398145] ? srso_return_thunk+0x5/0x5f [ 144.398575] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.399024] ops_exit_list+0xb3/0x180 [ 144.399415] cleanup_net+0x546/0xad0 [ 144.399796] ? __pfx_cleanup_net+0x10/0x10 [ 144.400230] process_one_work+0x8ee/0x1a10 [ 144.400678] ? __pfx_lock_acquire+0x10/0x10 [ 144.401122] ? __pfx_process_one_work+0x10/0x10 [ 144.401618] ? srso_return_thunk+0x5/0x5f [ 144.402050] ? move_linked_works+0x172/0x270 [ 144.402493] ? srso_return_thunk+0x5/0x5f [ 144.402923] ? assign_work+0x196/0x240 [ 144.403337] worker_thread+0x674/0xe70 [ 144.403748] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.404273] ? __pfx_worker_thread+0x10/0x10 [ 144.404736] kthread+0x3ab/0x720 [ 144.405100] ? __pfx_kthread+0x10/0x10 [ 144.405519] ? srso_return_thunk+0x5/0x5f [ 144.405943] ? finish_task_switch.isra.0+0x206/0x840 [ 144.406441] ? __pfx_kthread+0x10/0x10 [ 144.406843] ret_from_fork+0x48/0x80 [ 144.407206] ? __pfx_kthread+0x10/0x10 [ 144.407604] ret_from_fork_asm+0x1a/0x30 [ 144.408029] [ 146.009957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.011672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.012993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.015746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.017949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.021535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.078677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.080508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.082202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.090114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.093205] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.094709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.226042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.227864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.228698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.232310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.233747] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.234481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.274749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.283564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.284756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.298548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.301653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.303723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.336477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.342761] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.356481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.366163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.366767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.368104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.373235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.374177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.376645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.376903] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.379160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.379462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.413652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.416622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.425129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.427239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.429071] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.432487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.449004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.450503] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.451525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.455242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.456589] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.457116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.042373] Bluetooth: hci0: command tx timeout [ 148.170378] Bluetooth: hci1: command tx timeout [ 148.300344] Bluetooth: hci2: command tx timeout [ 148.364306] Bluetooth: hci3: command tx timeout [ 148.426296] Bluetooth: hci4: command tx timeout [ 148.490429] Bluetooth: hci7: command tx timeout [ 148.491078] Bluetooth: hci6: command tx timeout [ 148.491116] Bluetooth: hci5: command tx timeout [ 150.091078] Bluetooth: hci0: command tx timeout [ 150.218394] Bluetooth: hci1: command tx timeout [ 150.346505] Bluetooth: hci2: command tx timeout [ 150.410561] Bluetooth: hci3: command tx timeout [ 150.474634] Bluetooth: hci4: command tx timeout [ 150.538402] Bluetooth: hci5: command tx timeout [ 150.538534] Bluetooth: hci6: command tx timeout [ 150.538610] Bluetooth: hci7: command tx timeout [ 152.138376] Bluetooth: hci0: command tx timeout [ 152.266389] Bluetooth: hci1: command tx timeout [ 152.394460] Bluetooth: hci2: command tx timeout [ 152.458319] Bluetooth: hci3: command tx timeout [ 152.522330] Bluetooth: hci4: command tx timeout [ 152.586514] Bluetooth: hci7: command tx timeout [ 152.587605] Bluetooth: hci6: command tx timeout [ 152.587681] Bluetooth: hci5: command tx timeout [ 154.186322] Bluetooth: hci0: command tx timeout [ 154.314339] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 07:52:31 Registers: info registers vcpu 0 RAX=ffff88800bbfd340 RBX=ffff88807b2a66e8 RCX=ffffffff81429a4a RDX=1ffff11001e21300 RSI=0000000000000008 RDI=ffff88800f109800 RBP=fbfbfbfbfbfbfbfb RSP=ffff88800f24fdd0 R8 =0000000000000000 R9 =ffffed1001e21300 R10=ffff88800f109807 R11=ffff88800bbfd7f8 R12=ffff88807b2a6ff9 R13=ffffffff8864df18 R14=ffff88800bbfd340 R15=0000000000000086 RIP=ffffffff81aedda6 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005767010 CR3=000000000b788000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004157423a00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000065 R11=6666666666666666 R12=0000000000000065 R13=0000000000000001 R14=ffff888008fea02a R15=ffff8880095dee28 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005755000 CR3=000000000b788000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c00000f010000000c0000af000 XMM04=000000c00000ef90000000c0000aef00 XMM05=000000c00000eff8000000c0000aef80 XMM06=000000c00000f010000000c0000af000 XMM07=000000c00000f030000000c0000af080 XMM08=000000c00017a4b0000000c00017a480 XMM09=000000c00017a510000000c00017a4e0 XMM10=000000c00017a540000000c000055530 XMM11=000000c00017a5a0000000c00017a570 XMM12=000000c00017a600000000c00017a5d0 XMM13=000000c00017a660000000c00017a630 XMM14=000000c00017a6c0000000c00017a690 XMM15=000000c000105080000000c00017a6f0