Warning: Permanently added '[localhost]:49946' (ECDSA) to the list of known hosts. 2025/01/19 08:07:06 fuzzer started 2025/01/19 08:07:07 dialing manager at localhost:44245 syzkaller login: [ 69.553716] cgroup: Unknown subsys name 'net' [ 69.651373] cgroup: Unknown subsys name 'cpuset' [ 69.683293] cgroup: Unknown subsys name 'rlimit' [ 77.208357] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 08:07:25 syscalls: 2217 2025/01/19 08:07:25 code coverage: enabled 2025/01/19 08:07:25 comparison tracing: enabled 2025/01/19 08:07:25 extra coverage: enabled 2025/01/19 08:07:25 setuid sandbox: enabled 2025/01/19 08:07:25 namespace sandbox: enabled 2025/01/19 08:07:25 Android sandbox: enabled 2025/01/19 08:07:25 fault injection: enabled 2025/01/19 08:07:25 leak checking: enabled 2025/01/19 08:07:25 net packet injection: enabled 2025/01/19 08:07:25 net device setup: enabled 2025/01/19 08:07:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 08:07:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 08:07:25 USB emulation: enabled 2025/01/19 08:07:25 hci packet injection: enabled 2025/01/19 08:07:25 wifi device emulation: enabled 2025/01/19 08:07:25 802.15.4 emulation: enabled 2025/01/19 08:07:25 fetching corpus: 50, signal 24027/25585 (executing program) 2025/01/19 08:07:25 fetching corpus: 100, signal 39067/41655 (executing program) 2025/01/19 08:07:25 fetching corpus: 150, signal 45088/48600 (executing program) 2025/01/19 08:07:25 fetching corpus: 200, signal 50889/55104 (executing program) 2025/01/19 08:07:26 fetching corpus: 250, signal 57642/62308 (executing program) 2025/01/19 08:07:26 fetching corpus: 300, signal 62307/67401 (executing program) 2025/01/19 08:07:26 fetching corpus: 350, signal 66452/71873 (executing program) 2025/01/19 08:07:26 fetching corpus: 400, signal 70432/76038 (executing program) 2025/01/19 08:07:26 fetching corpus: 450, signal 73165/78999 (executing program) 2025/01/19 08:07:26 fetching corpus: 500, signal 76106/82025 (executing program) 2025/01/19 08:07:27 fetching corpus: 550, signal 78548/84521 (executing program) 2025/01/19 08:07:27 fetching corpus: 600, signal 80943/86940 (executing program) 2025/01/19 08:07:27 fetching corpus: 650, signal 82458/88578 (executing program) 2025/01/19 08:07:27 fetching corpus: 700, signal 85646/91432 (executing program) 2025/01/19 08:07:27 fetching corpus: 750, signal 87746/93329 (executing program) 2025/01/19 08:07:27 fetching corpus: 800, signal 88693/94388 (executing program) 2025/01/19 08:07:28 fetching corpus: 850, signal 90102/95700 (executing program) 2025/01/19 08:07:28 fetching corpus: 900, signal 92169/97397 (executing program) 2025/01/19 08:07:28 fetching corpus: 950, signal 94013/98868 (executing program) 2025/01/19 08:07:28 fetching corpus: 1000, signal 95820/100280 (executing program) 2025/01/19 08:07:28 fetching corpus: 1050, signal 97963/101814 (executing program) 2025/01/19 08:07:28 fetching corpus: 1100, signal 99552/102932 (executing program) 2025/01/19 08:07:29 fetching corpus: 1150, signal 100993/103905 (executing program) 2025/01/19 08:07:29 fetching corpus: 1200, signal 102015/104582 (executing program) 2025/01/19 08:07:29 fetching corpus: 1250, signal 103217/105345 (executing program) 2025/01/19 08:07:29 fetching corpus: 1300, signal 104415/106089 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106638 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106681 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106737 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106776 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106834 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106877 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106923 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/106965 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/107017 (executing program) 2025/01/19 08:07:29 fetching corpus: 1338, signal 105354/107076 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107128 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107183 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107227 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107276 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107332 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107377 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107433 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107479 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107521 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107576 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107611 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107664 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107720 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107771 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107817 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107867 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107917 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107965 (executing program) 2025/01/19 08:07:30 fetching corpus: 1338, signal 105354/107965 (executing program) 2025/01/19 08:07:33 starting 8 fuzzer processes 08:07:33 executing program 2: r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x4, [0x265, 0x4], 0x100}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101901, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x10b, 0xff, 0x9, 0x26b, 0x146, 0xffff, 0x130}, "c195e2e39f7efc81b6266377aa39748128a1660a758933d400b3571719d28d429dacc65d07b2c9253ae5a2740c37da", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x94f) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000c00)={'veth0_to_team\x00', {0x2, 0x0, @initdev}}) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000c40), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000c80)={0x0, r3, 0x1, 0x1, 0x57d8, 0x1}) sync_file_range(r2, 0x2c0, 0xffffffffffffff45, 0x2) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000cc0)='io.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000d00)) r5 = dup2(r2, r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000e40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e80)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000f80)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x4e21, 0x40, 0x4e20, 0x0, 0x2, 0xe0, 0x80, 0xb, r6, r7}, {0x1, 0x7785, 0x3, 0x9, 0x1, 0x38670c3e, 0x6, 0x1ff}, {0x8000, 0x7, 0x9, 0x6}, 0x6, 0x6e6bb6, 0x1, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d3, 0x2b}, 0x0, @in6=@local, 0x3500, 0x0, 0x0, 0x5, 0x80000001, 0x1ff, 0x5}}, 0xe8) r8 = memfd_secret(0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x761a}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x954f}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9cfa}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80880) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x22cf8d23}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56de0b1f}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x449d2a96}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48744f60}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x86f1b29}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x164}, 0x1, 0x0, 0x0, 0x40801}, 0x815) 08:07:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x2c004) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xdf15da71d2ba2c19}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x600440c5) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/devlink', 0x202a82, 0x1c) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf83}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x7a}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb0}, {0x8, 0xb, 0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ec1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}]}]}, 0x30}}, 0x48000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x720, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) r5 = syz_open_procfs(0x0, &(0x7f0000000800)='net/vlan/vlan1\x00') accept4(r3, &(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000008c0)=0x80, 0x80000) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x80800, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f0000000780), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044004}, 0x400) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r5) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1e0, r9, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7a01420e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e37}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe424}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf471}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000044}, 0x4804) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d80), 0x2504c2, 0x0) finit_module(r10, &(0x7f0000000dc0)='nbd\x00', 0x3) 08:07:33 executing program 3: unshare(0x100) r0 = semget(0x0, 0x3, 0x604) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x4970]) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000040)=""/118) unshare(0x8010080) unshare(0x8060900) unshare(0xc000a00) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/252) semtimedop(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x800}, {0x1, 0xfbff, 0x800}], 0x2, &(0x7f0000000200)={0x77359400}) unshare(0x10000000) unshare(0x6a000080) unshare(0x200) unshare(0x28000800) semctl$IPC_RMID(r0, 0x0, 0x0) unshare(0x8000800) unshare(0x28000200) unshare(0x400) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000240)=""/48) unshare(0x2e000880) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:07:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x30}, {r0, 0x140}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x400}, {r1, 0xf183}, {0xffffffffffffffff, 0xa0}], 0x7, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) fadvise64(0xffffffffffffffff, 0x9, 0x400000000000, 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x3, 0xffffffffffff0001, 0xb3, &(0x7f0000000100)=""/179}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e23, 0x8, @mcast2, 0x10001}, {0xa, 0x4e23, 0x9, @private1, 0xffffbf70}, 0x7, [0x9, 0x1, 0x4, 0x400, 0x2, 0x7, 0x1]}, 0x5c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa4700, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x800000) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000340)={0x97, "f74965c2a682c74d6346c2655c1c61d0f3e8a67632b48d49cc27202e3d945d3427e74be9ac0082c54e192cc26ac945c4b73a8e68fafb79717cface59413ad0cb08cb14687776d38834ea3c0ccc35b4309ed52309a566fc0e21a551886bbcaa2190b7ef3a1abfa1a211186bbad47d4416376426304d6d7a0bbe6158d50cd3d3955072d111be6a92829b8218340c05780cd1103c742aadc1"}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000400)) statx(r4, &(0x7f0000000440)='./file0\x00', 0x4000, 0x200, &(0x7f0000000480)) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000580)={0x0, 0x53, 0x7ff, 0x400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f00000005c0), &(0x7f0000000640)=0x68) 08:07:33 executing program 0: getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x5, {{0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}}, 0x0, 0x3, [{{0xa, 0x4e20, 0xee7d, @loopback, 0xffff0001}}, {{0xa, 0x4e23, 0x6, @private2, 0x10001}}, {{0xa, 0x4e24, 0x0, @private0, 0x6}}]}, 0x210) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000300)={{}, "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"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000001340)=0x5) pread64(r0, &(0x7f0000001380)=""/159, 0x9f, 0x7f) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/206, 0xce, 0x2) r2 = dup3(r0, r1, 0x80000) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x18, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40000c0) sendfile(r0, r0, &(0x7f0000001880)=0xfffffffffffff000, 0x3) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000018c0)={@initdev}, &(0x7f0000001900)=0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001940)={0x7fffffff, 0xa1, 0x0, 0x89, 0x2, [{0xfff, 0xffff, 0xd8ff, '\x00', 0x108}, {0x4, 0x4, 0x81, '\x00', 0x80}]}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa8, 0x3, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xdf6f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8c}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}]}}, @CTA_LABELS_MASK={0x1c, 0x17, [0xa64d, 0x1, 0x1, 0x29c, 0x5, 0x11d]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r2) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5051759250e42c33c3bb92289208c343"}, @NL80211_ATTR_PMK={0x14, 0xfe, "33a2a676a71d902254e86f0d2ff669e5"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20040020) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001d00)={'vxcan0\x00'}) r4 = syz_open_pts(r0, 0x200401) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000001d40)={0x4, "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"}) 08:07:33 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x3) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x43, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x32, 0x140) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x3ff, 0x6) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv4=@tcp={{0x12, 0x4, 0x0, 0x1e, 0xe1, 0x66, 0x0, 0x7, 0x6, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x0, 0xf, "3831f8e0c863b4b550e9e8421d"}, @noop, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x8, [{@rand_addr=0x64010100, 0x5}]}, @ssrr={0x89, 0xf, 0xfd, [@multicast1, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e24, 0x4e22, r2, r3, 0x0, 0x0, 0x9, 0x4, 0x100, 0x0, 0x1, {[@exp_fastopen={0xfe, 0x8, 0xf989, "39c09de6"}, @exp_fastopen={0xfe, 0x4}, @sack_perm={0x4, 0x2}]}}, {"43e283457185cd952f92e9d0ef2e9334e57e4fb1046caf477024d95f8a84091ff121a210be42275858846bb03ec03caad58db6bb23fa3f6b8023af176ff7aa2461808d7114fbf13be6ea73387685ff0341119d9f0eef8ccec683c1d02ad8584f482fbe621594a11b620e10488e3c083ea194925853"}}}}, 0xe5) syz_extract_tcp_res(&(0x7f0000000280), 0x6, 0x9) syz_extract_tcp_res(&(0x7f00000002c0), 0xd38, 0x2) syz_emit_ethernet(0xd4, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @remote, @void, {@llc={0x4, {@llc={0xf0, 0x8e, 'N', "3049aa085017433a9455469333f6c28a080aa732a21ed0f8d6441383f598cef26d77c0fcaa564ebf65d9eac9942322766614423b8089271616f09654cc7b26a7a7f5013148e12a195ec58194b94118d21006fda928fdbaa1257e0af4ff954c7482f04ed17e583d2e75e8934f13b17ca98ecd49470807d87b9cb79e70b65465e6a4ad133605b975a7d3b0fc9417fe438ebe14558f248ad5a74bb3262a474352d291519d7af5422311e0df99a5ee484a047e26a29071b6735b855e19d5ee1a3bf4de850f"}}}}}, &(0x7f0000000400)={0x1, 0x2, [0x427, 0xc83, 0x87, 0xc94]}) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) syz_emit_ethernet(0xc7, &(0x7f00000005c0)={@multicast, @empty, @void, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0x9}, {0xffffa}, {0x20, 0x0, 0x1}, {0x1}, {0x7}, {0x4}, {0x200, 0x0, 0x1}], @ipv4=@udp={{0x9, 0x4, 0x2, 0x1, 0x99, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@generic={0x82, 0x10, "2f2a0e40b9269834e5e89edf0e0c"}]}}, {0x4e24, 0x4e20, 0x75, 0x0, @gue={{0x2, 0x0, 0x1, 0x3, 0x0, @val=0x80}, "98e0681b1f87d12b5dafa700c33c9397cc1c1153b5a8db8383899f050fa4e6861f6de41e7da4fe1370bf4f7ac3aa67ffffe7f31b33a134276ab05fc8f735d20dce1ca024c6b8f72b7a5ee8ed06cf9a1005058a85b2144dd8ebd214aaf59a738e057c20250c"}}}}}}}, &(0x7f00000006c0)={0x1, 0x3, [0xcee, 0x894, 0x8bd, 0x1c7]}) fcntl$setflags(r1, 0x2, 0x0) close_range(r1, r0, 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000cc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000780)={0x4f8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x3e0, 0x4, 0x0, 0x1, [{0x3c0, 0x1, 0x0, 0x1, [@range={{0xa}, @val={0x1e4, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x48, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x78, 0x1, "2d5e5847d1c23a0352b5bd7c91a7cf391187e18fad2a53923771910bc07e27a8b2fb2d66253e58c0ebb4db91a18352d0240565e517a498d12b919af7c6bdf9129e780a8d6d398f0bc253857d754c212df8aad237b98f6d24a103aabc296d2070ed60e10e5383180afc8a7fe67465485f443b0e45"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0xf0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x52, 0x1, "339b0769cf4075599609bc9000e92cc2815c504f937b48f0e0134b82181e3decb11277983ffa48c7345db92a4c8a8780def1ea34d5b69efae3a1d3124fc3e54dba75adcdeaaf3cd3c2ffad13ec63"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}, @tproxy={{0xb}, @void}, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc5771f9d7ebba75c}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @tunnel={{0xb}, @void}, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x200}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}]}}, @socket={{0xb}, @void}, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8}]}}, @target={{0xb}, @val={0xfc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xf, 0x1, '/dev/vcsu#\x00'}, @NFTA_TARGET_NAME={0xf, 0x1, '/dev/hwrng\x00'}, @NFTA_TARGET_INFO={0xd5, 0x3, "97dc7df144dc7a18d40844a71b1b705e05c1954f22b7bda19831fdd7d1be01dc1e00e2cd5b925754b04b7f5deb93fa533956f40ba2b327e5bc62f822f2bfbd0db59ca69bb733dd7f9fd540a8e4ed059e247728bc92fc8e27979b51cc693b60d875bbbef13048492093f519ebed0a9b99d17a3c7f3a1b648e1a85a2bf55d1449728fe1fc6e7ae140a23a23ab6f65e8a4dcbc2f724d68fed0b34f2efb2f67b42e6d4103a220260aede0c1016e90dbd6c4f80797a1301a8dcfb81be1f6b10e585d1c776e9f617f4db828dac163ae552f1685a"}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@socket={{0xb}, @void}, @tproxy={{0xb}, @void}]}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf3, 0x7, 0x1, 0x0, "112dec3473d62d4931eada25a74e7b77d5e6b08c6797ed916191c83e49b5fd69112164d18efbf4a7ff727dfd3daf818cf085662f5a2cdb2cd7ce8fdc66365020690cc6079f73c93a8c7a5eb717f89386c7a38c8ae942775f19217cac8d7aee61915571b6a1de0037ba84a8ef1b7e826cb3d05c36663f32f85446e540aa141b8767eae848a5a6118f1e89a063c89656fa5b958baf4779d26a3f03da333c77cd122251fc35cac9ea99070e72d7fb14465405fdb54c370c4945f3050a93bbdcae3091781fcacb168256b8e04f8adeefe58c7db3deefb0824fef47bdd09232878f5c6287ff517705964ea038a12b8b0890"}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5, {0x3ff}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 08:07:33 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff8}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40012}, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000400)=0xffffff80, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x820, 0x70bd2c, 0x9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x28044000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}}, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r1) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2d4, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_PMSR_ATTR_PEERS={0x2b4, 0x5, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12c03610}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fa}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe7d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x54}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd36}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3c00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x400c061) 08:07:33 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) kcmp(r0, 0xffffffffffffffff, 0x1, r1, r2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) getsockname$unix(r3, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/251, 0xfb) lremovexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'user.', '\x00'}) open$dir(&(0x7f00000003c0)='./file0\x00', 0x80000, 0x108) r4 = inotify_init() ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000400)=0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x1) r5 = openat$cgroup_ro(r3, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000500)='./file0\x00', r5, &(0x7f0000000580)='./file0\x00') r6 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x65, 0x101000) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000600)={0x9, 0x7f}) write$P9_RREADLINK(r3, &(0x7f0000000640)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r7 = open(&(0x7f0000000680)='./file0\x00', 0x10400, 0x20) fspick(r7, &(0x7f00000006c0)='./file0\x00', 0x0) chdir(&(0x7f0000000700)='./file0\x00') [ 95.417302] audit: type=1400 audit(1737274053.402:7): avc: denied { execmem } for pid=274 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 96.703993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.706381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.708933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.714982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.719030] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.721393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.859034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.862097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.867215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.872109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.875267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.890761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.996023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.008244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.013292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.016964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.024062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.025144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.027339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.027809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.030809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.053447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.055345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.068268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.069986] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.077109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.077766] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.082588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.086504] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.088120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.091242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.092503] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.095993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.105265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.113022] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.117018] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.121147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.147085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.153301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.157428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.157469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.171021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.197411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.203697] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.205489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.209576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.217042] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.247113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.768256] Bluetooth: hci0: command tx timeout [ 98.959785] Bluetooth: hci1: command tx timeout [ 99.151787] Bluetooth: hci4: command tx timeout [ 99.215796] Bluetooth: hci2: command tx timeout [ 99.216098] Bluetooth: hci6: command tx timeout [ 99.216219] Bluetooth: hci3: command tx timeout [ 99.282323] Bluetooth: hci7: command tx timeout [ 99.282525] Bluetooth: hci5: command tx timeout [ 100.815730] Bluetooth: hci0: command tx timeout [ 101.007822] Bluetooth: hci1: command tx timeout [ 101.201111] Bluetooth: hci4: command tx timeout [ 101.264935] Bluetooth: hci3: command tx timeout [ 101.265109] Bluetooth: hci6: command tx timeout [ 101.265200] Bluetooth: hci2: command tx timeout [ 101.327981] Bluetooth: hci5: command tx timeout [ 101.328981] Bluetooth: hci7: command tx timeout [ 102.864733] Bluetooth: hci0: command tx timeout [ 103.055775] Bluetooth: hci1: command tx timeout [ 103.248176] Bluetooth: hci4: command tx timeout [ 103.311856] Bluetooth: hci2: command tx timeout [ 103.312044] Bluetooth: hci6: command tx timeout [ 103.312235] Bluetooth: hci3: command tx timeout [ 103.376070] Bluetooth: hci7: command tx timeout [ 103.376319] Bluetooth: hci5: command tx timeout [ 104.912763] Bluetooth: hci0: command tx timeout [ 105.105102] Bluetooth: hci1: command tx timeout [ 105.295712] Bluetooth: hci4: command tx timeout [ 105.359836] Bluetooth: hci3: command tx timeout [ 105.359942] Bluetooth: hci6: command tx timeout [ 105.359993] Bluetooth: hci2: command tx timeout [ 105.423774] Bluetooth: hci7: command tx timeout [ 105.423883] Bluetooth: hci5: command tx timeout [ 156.526920] syz-executor.7 (282) used greatest stack depth: 23552 bytes left [ 159.387447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.392733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.396784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.404563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.413807] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.416965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.454909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.459586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.465105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.468058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.468584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.469496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.472238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.474017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.476166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.479591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.479901] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.483609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.485247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.489305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.492059] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.494074] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.496856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.498547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.627238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.634859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.635394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.639916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.645382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.648808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.649399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.653028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.656993] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 159.657564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.668804] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.670446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.890604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.893311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.895195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.898495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.901458] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 159.902436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.195347] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.210279] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.228121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.293883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.369337] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.392387] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.487868] Bluetooth: hci0: command tx timeout [ 161.551977] Bluetooth: hci2: command tx timeout [ 161.552336] Bluetooth: hci3: command tx timeout [ 161.680979] Bluetooth: hci1: command tx timeout [ 161.743842] Bluetooth: hci6: command tx timeout [ 161.807804] Bluetooth: hci4: command tx timeout [ 162.063722] Bluetooth: hci5: command tx timeout [ 162.448787] Bluetooth: hci7: command tx timeout [ 163.535774] Bluetooth: hci0: command tx timeout [ 163.599747] Bluetooth: hci3: command tx timeout [ 163.599828] Bluetooth: hci2: command tx timeout [ 163.727746] Bluetooth: hci1: command tx timeout [ 163.791871] Bluetooth: hci6: command tx timeout [ 163.855704] Bluetooth: hci4: command tx timeout [ 164.111781] Bluetooth: hci5: command tx timeout [ 164.495710] Bluetooth: hci7: command tx timeout [ 165.583939] Bluetooth: hci0: command tx timeout [ 165.647724] Bluetooth: hci2: command tx timeout [ 165.647806] Bluetooth: hci3: command tx timeout [ 165.775730] Bluetooth: hci1: command tx timeout [ 165.839717] Bluetooth: hci6: command tx timeout [ 165.904578] Bluetooth: hci4: command tx timeout [ 166.159942] Bluetooth: hci5: command tx timeout [ 166.543714] Bluetooth: hci7: command tx timeout [ 167.631699] Bluetooth: hci0: command tx timeout [ 167.696371] Bluetooth: hci3: command tx timeout [ 167.696488] Bluetooth: hci2: command tx timeout [ 167.824159] Bluetooth: hci1: command tx timeout [ 167.887733] Bluetooth: hci6: command tx timeout [ 167.953683] Bluetooth: hci4: command tx timeout [ 168.207755] Bluetooth: hci5: command tx timeout [ 168.591815] Bluetooth: hci7: command tx timeout [ 221.351380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.356927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.358545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.365423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.370184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.374238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.531550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.537357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.542227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.551083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.557963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.560022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.613215] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.618130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.620754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.622320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.626913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.630998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.635573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.641798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.644000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.646306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.685207] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.689037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.714423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.729016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.730313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.746469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.767207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.779902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.851592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.880463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.898989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.907361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.935043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.946485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.951218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.955289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.959162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.977305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 222.006295] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.025595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 222.058521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 222.062438] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 222.065353] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.096205] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.148181] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 222.162597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.439783] Bluetooth: hci0: command tx timeout [ 223.631741] Bluetooth: hci1: command tx timeout [ 223.696781] Bluetooth: hci2: command tx timeout [ 223.759880] Bluetooth: hci3: command tx timeout [ 223.887721] Bluetooth: hci4: command tx timeout [ 224.016065] Bluetooth: hci5: command tx timeout [ 224.208946] Bluetooth: hci7: command tx timeout [ 224.273661] Bluetooth: hci6: command tx timeout [ 225.487766] Bluetooth: hci0: command tx timeout [ 225.679788] Bluetooth: hci1: command tx timeout [ 225.745648] Bluetooth: hci2: command tx timeout [ 225.809742] Bluetooth: hci3: command tx timeout [ 225.936760] Bluetooth: hci4: command tx timeout [ 226.063878] Bluetooth: hci5: command tx timeout [ 226.255759] Bluetooth: hci7: command tx timeout [ 226.319848] Bluetooth: hci6: command tx timeout [ 227.535725] Bluetooth: hci0: command tx timeout [ 227.727737] Bluetooth: hci1: command tx timeout [ 227.791791] Bluetooth: hci2: command tx timeout [ 227.857737] Bluetooth: hci3: command tx timeout [ 227.983749] Bluetooth: hci4: command tx timeout [ 228.113678] Bluetooth: hci5: command tx timeout [ 228.303677] Bluetooth: hci7: command tx timeout [ 228.368703] Bluetooth: hci6: command tx timeout [ 229.584783] Bluetooth: hci0: command tx timeout [ 229.777662] Bluetooth: hci1: command tx timeout [ 229.840733] Bluetooth: hci2: command tx timeout [ 229.906676] Bluetooth: hci3: command tx timeout [ 230.032702] Bluetooth: hci4: command tx timeout [ 230.160796] Bluetooth: hci5: command tx timeout [ 230.351708] Bluetooth: hci7: command tx timeout [ 230.415721] Bluetooth: hci6: command tx timeout [ 281.006532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.006775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.193450] [ 282.193724] ====================================================== [ 282.194335] WARNING: possible circular locking dependency detected [ 282.194941] 6.13.0-rc7-next-20250117 #1 Not tainted [ 282.195442] ------------------------------------------------------ [ 282.196714] kworker/u8:1/67 is trying to acquire lock: [ 282.203258] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.205616] [ 282.205616] but task is already holding lock: [ 282.206931] ffff888019350768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 282.209201] [ 282.209201] which lock already depends on the new lock. [ 282.209201] [ 282.210979] [ 282.210979] the existing dependency chain (in reverse order) is: [ 282.212631] [ 282.212631] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 282.214181] __mutex_lock+0x13d/0xb50 [ 282.215251] wiphy_register+0x1b2e/0x25d0 [ 282.216407] ieee80211_register_hw+0x23a4/0x3d60 [ 282.217663] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 282.218977] init_mac80211_hwsim+0x389/0x870 [ 282.220196] do_one_initcall+0xf9/0x640 [ 282.221337] kernel_init_freeable+0x53d/0x7a0 [ 282.222545] kernel_init+0x1e/0x2d0 [ 282.223527] ret_from_fork+0x48/0x80 [ 282.224530] ret_from_fork_asm+0x1a/0x30 [ 282.225661] [ 282.225661] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 282.227091] __lock_acquire+0x29fd/0x4580 [ 282.228229] lock_acquire+0x19b/0x520 [ 282.229269] __mutex_lock+0x13d/0xb50 [ 282.230336] unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.231759] unregister_netdevice_queue+0x224/0x2e0 [ 282.233054] _cfg80211_unregister_wdev+0x57b/0x700 [ 282.234341] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 282.235633] ieee80211_unregister_hw+0x55/0x3a0 [ 282.236845] hwsim_exit_net+0x3a0/0x730 [ 282.237919] ops_exit_list+0xb3/0x180 [ 282.238946] cleanup_net+0x546/0xad0 [ 282.239966] process_one_work+0x8ee/0x1a10 [ 282.241203] worker_thread+0x674/0xe70 [ 282.242356] kthread+0x3ab/0x720 [ 282.243390] ret_from_fork+0x48/0x80 [ 282.244447] ret_from_fork_asm+0x1a/0x30 [ 282.245657] [ 282.245657] other info that might help us debug this: [ 282.245657] [ 282.247497] Possible unsafe locking scenario: [ 282.247497] [ 282.248890] CPU0 CPU1 [ 282.250000] ---- ---- [ 282.251099] lock(&rdev->wiphy.mtx); [ 282.252085] lock(rtnl_mutex); [ 282.253526] lock(&rdev->wiphy.mtx); [ 282.255052] lock(rtnl_mutex); [ 282.255925] [ 282.255925] *** DEADLOCK *** [ 282.255925] [ 282.257335] 4 locks held by kworker/u8:1/67: [ 282.258410] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 282.260926] #1: ffff88800f3ffd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 282.263333] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 282.265551] #3: ffff888019350768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 282.268026] [ 282.268026] stack backtrace: [ 282.269102] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 282.270214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 282.271291] Workqueue: netns cleanup_net [ 282.271868] Call Trace: [ 282.272227] [ 282.272538] dump_stack_lvl+0xca/0x120 [ 282.273112] print_circular_bug+0x47b/0x750 [ 282.273555] check_noncircular+0x2e9/0x3c0 [ 282.273980] ? __pfx_check_noncircular+0x10/0x10 [ 282.274461] ? hlock_class+0x4e/0x130 [ 282.274850] ? srso_return_thunk+0x5/0x5f [ 282.275288] ? mark_lock+0xac/0xed0 [ 282.275667] ? lockdep_lock+0xba/0x1b0 [ 282.276089] ? __pfx_lockdep_lock+0x10/0x10 [ 282.276567] __lock_acquire+0x29fd/0x4580 [ 282.276995] ? __pfx___lock_acquire+0x10/0x10 [ 282.277440] ? lock_release+0x20f/0x6f0 [ 282.277843] ? __pfx_lock_release+0x10/0x10 [ 282.278272] ? srso_return_thunk+0x5/0x5f [ 282.278706] lock_acquire+0x19b/0x520 [ 282.279089] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.279670] ? __pfx_lock_acquire+0x10/0x10 [ 282.280111] ? __pfx_lock_release+0x10/0x10 [ 282.280564] ? __pfx_try_to_wake_up+0x10/0x10 [ 282.281033] ? srso_return_thunk+0x5/0x5f [ 282.281470] ? lock_is_held_type+0x9e/0x120 [ 282.281928] ? srso_return_thunk+0x5/0x5f [ 282.282361] __mutex_lock+0x13d/0xb50 [ 282.282756] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.283338] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.283924] ? srso_return_thunk+0x5/0x5f [ 282.284368] ? synchronize_rcu_expedited+0x38a/0x420 [ 282.284869] ? __pfx___mutex_lock+0x10/0x10 [ 282.285308] ? srso_return_thunk+0x5/0x5f [ 282.285736] ? srso_return_thunk+0x5/0x5f [ 282.286160] ? kasan_quarantine_put+0x84/0x1e0 [ 282.286629] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 282.287072] ? srso_return_thunk+0x5/0x5f [ 282.287500] unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.288063] ? __virt_addr_valid+0x2e8/0x5d0 [ 282.288533] ? __pfx_lock_release+0x10/0x10 [ 282.288980] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 282.289577] ? find_held_lock+0x2c/0x110 [ 282.290011] ? srso_return_thunk+0x5/0x5f [ 282.290454] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 282.290969] ? srso_return_thunk+0x5/0x5f [ 282.291407] ? lock_release+0x20f/0x6f0 [ 282.291821] ? __pfx_lock_release+0x10/0x10 [ 282.292267] ? srso_return_thunk+0x5/0x5f [ 282.292702] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 282.293214] ? srso_return_thunk+0x5/0x5f [ 282.293647] unregister_netdevice_queue+0x224/0x2e0 [ 282.294143] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 282.294670] ? up_write+0x195/0x520 [ 282.295052] _cfg80211_unregister_wdev+0x57b/0x700 [ 282.295543] ? srso_return_thunk+0x5/0x5f [ 282.295984] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 282.296494] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 282.297047] ? srso_return_thunk+0x5/0x5f [ 282.297489] ? srso_return_thunk+0x5/0x5f [ 282.297917] ? synchronize_rcu+0x1ff/0x260 [ 282.298337] ieee80211_unregister_hw+0x55/0x3a0 [ 282.298814] hwsim_exit_net+0x3a0/0x730 [ 282.299224] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.299682] ? srso_return_thunk+0x5/0x5f [ 282.300117] ? netdev_run_todo+0x788/0x1040 [ 282.300566] ? srso_return_thunk+0x5/0x5f [ 282.301007] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.301465] ops_exit_list+0xb3/0x180 [ 282.301862] cleanup_net+0x546/0xad0 [ 282.302252] ? __pfx_cleanup_net+0x10/0x10 [ 282.302691] process_one_work+0x8ee/0x1a10 [ 282.303148] ? __pfx_lock_acquire+0x10/0x10 [ 282.303590] ? __pfx_process_one_work+0x10/0x10 [ 282.304080] ? srso_return_thunk+0x5/0x5f [ 282.304531] ? move_linked_works+0x172/0x270 [ 282.304986] ? srso_return_thunk+0x5/0x5f [ 282.305423] ? assign_work+0x196/0x240 [ 282.305847] worker_thread+0x674/0xe70 [ 282.306268] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 282.306800] ? __pfx_worker_thread+0x10/0x10 [ 282.307270] kthread+0x3ab/0x720 [ 282.307644] ? __pfx_kthread+0x10/0x10 [ 282.308055] ? srso_return_thunk+0x5/0x5f [ 282.308499] ? finish_task_switch.isra.0+0x206/0x840 [ 282.309016] ? __pfx_kthread+0x10/0x10 [ 282.309424] ret_from_fork+0x48/0x80 [ 282.309795] ? __pfx_kthread+0x10/0x10 [ 282.310202] ret_from_fork_asm+0x1a/0x30 [ 282.310641] [ 283.865214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.868052] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.870088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.875933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.879033] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.883784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.998735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.003557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.006232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.011134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.015554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.020030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.061200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.075522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.081901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.096157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.101730] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.114960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.138072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.140497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.143177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.147754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.159492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.164907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.165212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.169933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.171726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.172025] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.175897] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.178746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.398252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.405076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.412643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.511201] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.518184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.523127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.527172] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.532008] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.532030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.548394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.558244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.581783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.608974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.637051] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 284.637986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.651912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.688199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 284.695943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.904860] Bluetooth: hci0: command tx timeout [ 286.031713] Bluetooth: hci1: command tx timeout [ 286.160751] Bluetooth: hci2: command tx timeout [ 286.223673] Bluetooth: hci3: command tx timeout [ 286.287694] Bluetooth: hci4: command tx timeout [ 286.608705] Bluetooth: hci5: command tx timeout [ 286.736799] Bluetooth: hci7: command tx timeout [ 286.800696] Bluetooth: hci6: command tx timeout [ 287.952620] Bluetooth: hci0: command tx timeout [ 288.079704] Bluetooth: hci1: command tx timeout [ 288.209751] Bluetooth: hci2: command tx timeout [ 288.271658] Bluetooth: hci3: command tx timeout [ 288.335709] Bluetooth: hci4: command tx timeout [ 288.656627] Bluetooth: hci5: command tx timeout [ 288.783748] Bluetooth: hci7: command tx timeout [ 288.847678] Bluetooth: hci6: command tx timeout [ 289.999706] Bluetooth: hci0: command tx timeout [ 290.127731] Bluetooth: hci1: command tx timeout [ 290.255711] Bluetooth: hci2: command tx timeout [ 290.321650] Bluetooth: hci3: command tx timeout [ 290.383845] Bluetooth: hci4: command tx timeout [ 290.704894] Bluetooth: hci5: command tx timeout [ 290.832769] Bluetooth: hci7: command tx timeout [ 290.895697] Bluetooth: hci6: command tx timeout [ 292.048640] Bluetooth: hci0: command tx timeout [ 292.176146] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 08:10:40 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8bb27 RDX=ffffed100d9c6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=ffff88800e518540 R12=ffffffff864021d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c60aa6b7c0 CR3=0000000016034000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004119bb2000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800f3febb8 R8 =0000000000000001 R9 =ffffed1001e7fd67 R10=0000000000000038 R11=2f72656b726f776b R12=0000000000000038 R13=0000000000000001 R14=ffff888008fea019 R15=ffff88800f3feeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005590ef741320 CR3=0000000016034000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000012454b124669607a XMM02=000000000000000024cdfbaa485006f8 XMM03=426c5563484a2e72656c6c616b7a7973 XMM04=000000c0000860c0000000c000086090 XMM05=000000c000086120000000c0000860f0 XMM06=000000c00005b4d0000000c000086150 XMM07=000000c0000858c0000000c000086180 XMM08=000000c0000864e0000000c0000864b0 XMM09=000000c00005b530000000c000086510 XMM10=000000c000086570000000c000086540 XMM11=000000c0000865d0000000c0000865a0 XMM12=000000c000086630000000c000086600 XMM13=000000c000086690000000c000086660 XMM14=000000c0000866f0000000c0000866c0 XMM15=000000c000102160000000c00005b560