Warning: Permanently added '[localhost]:35947' (ECDSA) to the list of known hosts.
2025/01/21 03:00:49 fuzzer started
2025/01/21 03:00:49 dialing manager at localhost:44833
syzkaller login: [ 67.572971] cgroup: Unknown subsys name 'net'
[ 67.720410] cgroup: Unknown subsys name 'cpuset'
[ 67.750098] cgroup: Unknown subsys name 'rlimit'
[ 73.984109] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[ 84.292883] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/21 03:01:06 syscalls: 2217
2025/01/21 03:01:06 code coverage: enabled
2025/01/21 03:01:06 comparison tracing: enabled
2025/01/21 03:01:06 extra coverage: enabled
2025/01/21 03:01:06 setuid sandbox: enabled
2025/01/21 03:01:06 namespace sandbox: enabled
2025/01/21 03:01:06 Android sandbox: enabled
2025/01/21 03:01:06 fault injection: enabled
2025/01/21 03:01:06 leak checking: enabled
2025/01/21 03:01:06 net packet injection: enabled
2025/01/21 03:01:06 net device setup: enabled
2025/01/21 03:01:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/21 03:01:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/21 03:01:06 USB emulation: enabled
2025/01/21 03:01:06 hci packet injection: enabled
2025/01/21 03:01:06 wifi device emulation: enabled
2025/01/21 03:01:06 802.15.4 emulation: enabled
2025/01/21 03:01:07 fetching corpus: 49, signal 14452/15443 (executing program)
2025/01/21 03:01:07 fetching corpus: 99, signal 16166/17981 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/19199 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/20070 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/20985 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/21852 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/22771 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/23699 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/24588 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/25524 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/26414 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/27269 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/28160 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/29104 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/29994 (executing program)
2025/01/21 03:01:07 fetching corpus: 136, signal 16511/29994 (executing program)
2025/01/21 03:01:11 starting 8 fuzzer processes
03:01:11 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/200, 0xc8, 0x10001)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x278, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff, @mcast2, 0x9}}}}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "51b01751f989b702c8b40104d517e4c909e4e010f7a056e562c60c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "ba3a122512b1381af60d53563dfdcba0df1be42986b5f6e75424d8a07936be7a12c689cce6800216e62bd0b68347fcc80c24c4b63f3c06d0a4871fafe4c2bf651a454b40fbf706f4272a3c03b8729b2f41aac6d19bb0dc734173f7fb4f6c7384e899a07d82d160"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xb, 0x3, "a88fc593a9c986"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x5e, 0x3, "761d89cba73abfe12be907d75dc72f1a39372f5b0d31f42456a7f341a3d738321fffd507479d0b7109b7e2def244fba349f66193d2300ac3c77f4b195b3078311463a7fab931def9a6a3a016ae39a886f57a34466a6c03e57aa8"}, @TIPC_NLA_NODE_ID={0x6, 0x3, "b9e6"}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4c732173}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4020}, 0xc000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540))
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4cb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6gre0\x00', <r4=>0x0, 0x29, 0xf, 0x80, 0x523dbef5, 0x44, @remote, @mcast2, 0x10, 0x80, 0x2, 0x9}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x40040)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000940)={0x2, 'sit0\x00', {0x5}, 0x9})
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xfe}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x40400000, 0xbdd8, 0x9, 0x1, 0x401000]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xa5000000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040006)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8840)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10000080)
03:01:11 executing program 1:
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000080)={{}, 0x0, 0x18, @inherit={0x78, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x9, {0x1a, 0xfffffffffffffa0a, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x1f}, [0x6, 0x40, 0x1, 0xff, 0x7ff, 0x1]}}, @name="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"})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001080)=0x2)
io_setup(0xff, &(0x7f00000010c0)=<r0=>0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0), 0x530541, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x200, 0x0)
io_submit(r0, 0x4, &(0x7f0000001440)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000001100)="dd687e98dbc98aea92abe44b093b654ec66e4208c7ff256371496d1452f96299e8e1b2b7ecf5173e75b47ef11d5c04ed2ad1921734b9e0404e825de886fe156c2620f4a6db1686b0ac531297a70581", 0x4f, 0x401, 0x0, 0x3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000001200)="f96d597e1a2693be19e7058a48ab1dbd303fc9781ebb7fa130c59f0507e4fb", 0x1f, 0x2, 0x0, 0x1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x8000, r2, &(0x7f00000012c0)="afcdb9cac1ae5ea3ae73182a2f876b", 0xf, 0x48, 0x0, 0x1, r3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x9, 0x1, 0xffffffffffffffff, &(0x7f0000001380)="284fea4ce3ada013041597c7dbe3dec5ada602ff37ae97a9892106547d673f22bfb7ee1d0dcec391ee0364b480b7520cae1dc36199333dfe2edc283513b9c35c52d1a19ff8e71fe72ef9d0086245f197d3d33fd3006e47abd14fd8a644d951b7f6884858beaffb48d127360b5314c9", 0x6f, 0xa793, 0x0, 0x3}])
ioctl$sock_proto_private(r2, 0x89e7, &(0x7f0000001480)="3223e0bb6b5e368bfe8bb704a283adacfa9ae9cf76e2ff")
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
r4 = accept(r3, &(0x7f00000014c0)=@ethernet={0x0, @remote}, &(0x7f0000001540)=0x80)
r5 = fcntl$getown(r4, 0x9)
r6 = fcntl$dupfd(r1, 0x0, r1)
kcmp(r5, 0x0, 0x3, r3, r6)
r7 = accept4$bt_l2cap(r3, &(0x7f0000001580)={0x1f, 0x0, @none}, &(0x7f00000015c0)=0xe, 0x80000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001600)={{<r8=>0x0, 0x0, 0xd4, 0x0, 0x6, 0xf34d, 0x8, 0x5, 0x6818d074, 0x1589, 0x3, 0x101, 0x8, 0x8, 0x8}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000016c0)={{r8, 0x400, 0xfffffffffffffff8, 0xa2, 0xfffffffffffffff8, 0x6, 0x3, 0x4, 0x81, 0xfffffffe, 0x8, 0xffffffffffffffff, 0xcfb, 0x6, 0x101}})
fsmount(r3, 0x0, 0xd)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000026c0)={0x100, 0x9, 0x200})
03:01:11 executing program 2:
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0xc, @rand_addr=0x64010101, 0x4e22, 0x4, 'sed\x00', 0x20, 0xffff, 0x40}, 0x2c)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100}, 0xc)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x40, {0x2, 0x4e22, @broadcast}, 'netpci0\x00'})
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@rand_addr=0x64010100, @loopback, 0x1, 0x6, [@local, @local, @loopback, @rand_addr=0x64010101, @remote, @local]}, 0x28)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000240)={0x33, @remote, 0x4e24, 0x3, 'lc\x00', 0x0, 0x9, 0x15}, 0x2c)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e)
setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000300)="fa9a6fc18c332c40a8b4f22b0e4b2f2f1cf24067d4d158923f4e8c6bb490001ae920c6cf08409fbcba6f3585646422bff721e21af91029bd4b0252784b4a36e3b82ae4f4a8564b7c6c42aebb5223ac84b6113a1058a40bb3875c898e7d858d6ab465ed110b18e83e3697b8a205d45022c338f44c30dd559fde665a42a53fe11ad31119e46da73dd875f92264267dc8920c1d1a676b9f2f4d614f98b775ad9d4e8caaea5da90f8a5d980d9aaf1d7bd2f863e9ab1d65f99789eb3c92250d0e68c447262a22a36ea048", 0xc8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c5}, 0x801)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x65}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000800)={0x1, 0x2, 0x1000, 0xc3, &(0x7f00000006c0)="b3770b5154571ad3fbf77d681f91b373cf3ae21feb2a3cfbd8fedd839fdd7d509e5c89e32c9e342273de39e574567b5ac3f341b1c5d32f58ef87cd2328b3f58fccd9d0bb76b0f8112eb63976fc07a457e424532ec3812e876834589bb6a1440e90611a230f86ed77fb4be47d27ba8f9c640db8d633b3004f064f70f8766983bf28c1945c50300f1d5339fa79e5f3883ca1657b29477f0f3d1836f97d766e254d9a88cf927fd6fa4f220aa059f9c15b92a2c5b5cadb9266fc7d52c31309ea4a3f203cd2", 0x2a, 0x0, &(0x7f00000007c0)="452509cd2a6cf02ae48c99afef261c20db47275b07228ec16f9a956ac48482d23d46f3915662f018524e"})
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000880)={0x3, 0xe7, "06d7f86eaf8da0404287ff7be677afff9e85356f72d95dd8abc4d0958da24cfc0358d179d44df800e7c65b46e3ab79a34b983e636fd52dd29de90318a94f9e2b0f6fe3bab6889468d2462ec88730c37bd8dbaa909b1af3cb9b0a150d1b2b4b7d5167efcecfae1cfbdebf034b2eebf52a5a3bc72159e9e3fec8b9ba20ecb2c79498f54098053de25fd69ae591905d608d3b365d59ae12185ae9b0be60080a7974e0357324353a8e637c1210f85004bb0b9d8a073865c7d3657c36b0a7935ce976929ef10ab543a6ea9bb2f03432e8d3abe8dcda989bd48f3650724724b222d17ab718e41169eb5e"})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7542efd3fd0f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3089340b9aff"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b5a61df3cfe6"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="82125c4f7de4"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40d1}, 0x800)
getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000ac0)={@remote, @multicast1}, &(0x7f0000000b00)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x80400, 0x80)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x8010)
03:01:11 executing program 3:
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000001)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xec, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac7d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa16ef4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf641}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8099}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6829f3dc}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ade9afa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f0a2f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78187a93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8503}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16fe7b5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47a0d783}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b1536b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f1c68a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6aee9ec1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78c8cb62}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a796a2b943ec841c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f1f7843064b0d3df522e6a17a88ac5f2437bb17cfa5bbc6f"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8028e28cbdc761c3febde3d4820c6637"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "db9cad0f48649d9d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6f319f2cd997618d9f7d2d04f04c84c5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9700f81f371ed6f338c4d7c65582f0ca5f91c709dc3632238793b8041751b480"}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x20044804)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x2, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x41b}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x40085)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x237be1a4608c062b}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa4, r1, 0x20, 0xffff, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x76, 0x33, @ctrl_frame=@ba={{}, {0x4}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x1, {0x7, 0x80}, "38e3e362b1993fff"}, {0x0, 0x1, {0x0, 0x1}, "fc392f03be46b650"}, {0x0, 0xc, {0x5, 0x3}, "b4700570f9cbed58"}, {0x0, 0x4, {0x1}, "49dcf462815e8854"}, {0x0, 0x9, {0xf, 0x9}, "e8034748a74f6d84"}, {0x0, 0x5, {0x0, 0x8}, "b8b29567210f1cb2"}, {0x0, 0x9, {0x3, 0x6}, "3f3b5cdbf919f69b"}], {0x0, 0x4, {0x8}, "4a54a794419527ba"}}}}]}, 0xa4}}, 0x4040080)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x48000, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000940)={0x1, 0x3})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x1, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
pipe2(&(0x7f0000000c40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x80, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e00), r4)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1000]}, @SEG6_ATTR_SECRET={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
pipe2$9p(&(0x7f0000001140)={<r7=>0xffffffffffffffff}, 0x88800)
ioctl$LOOP_SET_FD(r4, 0x4c00, r7)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000003140)={0x81, 0xd6df, 0x2, 0x0, 0x0, [{{r4}, 0xa94}, {}]})
03:01:11 executing program 5:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80, 0x800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8042000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa86a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x40080)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4040000)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x6800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x8009)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sysvipc/shm\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000007c0)={0x1, 0xf8, 0x10000})
r6 = syz_open_dev$vcsu(&(0x7f0000000800), 0xc9, 0x8000)
listen(r6, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000840)={{0x5, 0x1}, 'port1\x00', 0x44, 0x100031, 0x7, 0x4, 0x800, 0x531, 0x2, 0x0, 0x4, 0xc9})
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000900)=""/134)
[ 88.927883] audit: type=1400 audit(1737428471.292:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:01:11 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
r8 = signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
r9 = fsmount(r4, 0x1, 0x2)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9)
bind(r2, &(0x7f0000000bc0)=@qipcrtr={0x2a, 0xffffffff}, 0x80)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x48000)
03:01:11 executing program 6:
r0 = msgget(0x2, 0x100)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/91)
r1 = msgget(0x3, 0x2)
r2 = msgget(0x0, 0x80)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/214)
msgctl$IPC_RMID(r1, 0x0)
r3 = msgget$private(0x0, 0x8)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000180)=""/165)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000240)=""/113)
r4 = msgget(0x2, 0x3f0)
msgctl$MSG_INFO(r4, 0xc, &(0x7f00000002c0)=""/234)
msgsnd(r2, &(0x7f00000003c0)={0x0, "f946a8eb8d236d7d23108f5f9ef67e66eda34c7797ed52c7dd074d135e158e32c769631412"}, 0x2d, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/229)
r5 = msgget$private(0x0, 0x2)
msgsnd(r5, &(0x7f0000000500)={0x1, "4195edc600c637862b730364295dcd3123e41bed2877951ff8d4bd63460ed5bae01c80e4b27c6f3e44827591b297c710bb06dda87fa572a30f604bf7f722e7a6b4bdda485625db97a41403756b57b6764c74caebdda9a8727ee04b35df884bdea2ee51af156e05531f34f4ec6f0b80b69d70444eeb75284c411f3b057786477e0e3f920dff4f423d86a56bc2e5b61bab6ea1445bcd80be1c985aaff42fc4781fbff8c0faf4e4a174fb091365602024b3aabeb4f2de31a0c9b497e70a45aecb59c0083ec6747fe7536ee2f2c77ae0f74525f9fffd8c9dcb8cc2ee63956d9036f0b5245eb3"}, 0xec, 0x0)
r6 = msgget(0x0, 0x100)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, <r7=>0x0})
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000640)={{0x3, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xfff9}, 0x0, 0x0, 0x6, 0x4, 0x1ff, 0x9000000000000000, 0x3f, 0x6a, 0x7, 0xffff, r7, 0xffffffffffffffff})
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgctl$IPC_INFO(r1, 0x3, &(0x7f00000006c0)=""/82)
03:01:11 executing program 7:
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7f, 0x1f, 0x6, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x10, 0x1, 0x0, 0xeb}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x310, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x178, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "bf9178ba1d22f8967a20dd2a248fd55b92ca9d44f6e823dd6d3378d930b5e4ab975c9a7e3cc9d2a231a727150d803abaedc3d67030504882f3c1664db9ebbabf11615bcb18dd2cd0cf5744c6c03cf991839bb135d426a56ffa7cf2c86e5c475864f990419c19373228030d054ffc214bd01271fdfbec0efdbb16123197ba7b6c5a833ec968154b88955e1cf333af703531be1a9a328a54e72b29771a1b08d5b3d052a957026db33b1ec2d3fdb40643ae1069ff5ca921959c20c595b7e6b0f9ee8b06f1cb327fa7c563925d"}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "01cfecdd6fea4accc1f7555a70238d9f94418a37f857799ccde503c08f5f3f209343adadf82a3909aaffe255cc7c3f34d8fe06997da630c50c5b4cde8b346d2db962fef6b319165f8a4820c0665ab63766906b0b5d2ecffc74ba625012d1f5d8055abb0ce39e85a6b02b1323b244e17074854d99875c7837cd3faf575cb36cb4ebca663ca176ad2dd3d95e0d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "44d72a6363cd5c67abbdd61024ada30c8f1e5d74d28483695e28bb49ad087f9e3af43d10ed82805f7c4e15641bdecefab3460f0a2bb59e72df77ff0c1cb5fe1e28817555bc080fe23eedea1119adc402bb3bac78bdc35a79a862ad27a4d8f499c0f16631b905d2f59acbb98a91f5d4fbc29ee45266aa1417e1c96fe9317dedba8658b30d418b07c6c3bf6d5b5a536c1e29b1dc"}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x40000000}, 0x10)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, 0x0, 0x802, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8001}, 0x24048004)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x4f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010)
r2 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, 0x3, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x91)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x1, 0x4, 0x202, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFULA_CFG_QTHRESH={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8400}, 0x20040801)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x24060800)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000fc0), &(0x7f0000001000)=0xc)
r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001040), 0x140800)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000001080))
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x190, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0xa2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xde}, {0x6, 0x11, 0xfffc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}]}, 0x190}, 0x1, 0x0, 0x0, 0x8800}, 0xd0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x48000)
[ 90.367685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.367735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 90.371964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 90.378571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 90.381927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.389257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.398084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 90.401262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.403868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 90.408429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 90.411235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 90.413585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 90.414759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 90.416220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 90.417053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 90.423326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 90.429720] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 90.430174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 90.431412] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.433173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 90.438376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 90.439201] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 90.439939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 90.441537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.522002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 90.531927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 90.537295] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 90.538600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 90.551768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 90.554940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 90.554965] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 90.558202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 90.563044] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 90.567832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 90.570541] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 90.574486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 90.575414] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 90.575958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 90.576365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 90.577224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 90.578867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 90.585567] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 90.586966] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 90.587462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 90.604944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 90.608604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 90.608614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 90.613960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 92.497093] Bluetooth: hci1: command tx timeout
[ 92.497879] Bluetooth: hci0: command tx timeout
[ 92.497944] Bluetooth: hci2: command tx timeout
[ 92.560882] Bluetooth: hci3: command tx timeout
[ 92.625899] Bluetooth: hci5: command tx timeout
[ 92.626269] Bluetooth: hci6: command tx timeout
[ 92.689069] Bluetooth: hci4: command tx timeout
[ 92.689113] Bluetooth: hci7: command tx timeout
[ 94.545767] Bluetooth: hci1: command tx timeout
[ 94.545924] Bluetooth: hci0: command tx timeout
[ 94.546016] Bluetooth: hci2: command tx timeout
[ 94.609131] Bluetooth: hci3: command tx timeout
[ 94.672810] Bluetooth: hci5: command tx timeout
[ 94.673410] Bluetooth: hci6: command tx timeout
[ 94.737809] Bluetooth: hci4: command tx timeout
[ 94.737887] Bluetooth: hci7: command tx timeout
[ 96.594033] Bluetooth: hci2: command tx timeout
[ 96.594086] Bluetooth: hci0: command tx timeout
[ 96.594196] Bluetooth: hci1: command tx timeout
[ 96.656822] Bluetooth: hci3: command tx timeout
[ 96.720782] Bluetooth: hci6: command tx timeout
[ 96.721751] Bluetooth: hci5: command tx timeout
[ 96.785336] Bluetooth: hci7: command tx timeout
[ 96.785373] Bluetooth: hci4: command tx timeout
[ 98.640957] Bluetooth: hci0: command tx timeout
[ 98.642285] Bluetooth: hci2: command tx timeout
[ 98.642688] Bluetooth: hci1: command tx timeout
[ 98.705685] Bluetooth: hci3: command tx timeout
[ 98.768743] Bluetooth: hci5: command tx timeout
[ 98.769346] Bluetooth: hci6: command tx timeout
[ 98.832700] Bluetooth: hci7: command tx timeout
[ 98.833801] Bluetooth: hci4: command tx timeout
[ 152.883549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.889181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.890308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.897813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.901804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 152.904168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 153.007197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 153.013322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 153.017143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 153.029439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 153.038834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 153.042118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 153.074657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 153.083166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 153.099007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 153.115178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 153.117132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 153.120289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 153.125415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 153.128949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 153.131194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 153.134480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 153.160234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 153.163043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 153.270420] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 153.279094] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 153.279847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 153.284144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 153.289134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 153.296145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 153.297154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 153.311007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 153.313224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 153.328059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 153.331009] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 153.333203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 153.344863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 153.346499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 153.349894] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 153.352103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 153.365344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 153.376340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 153.377109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 153.378419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 153.379263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 153.391278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 153.434994] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 153.438305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 154.961686] Bluetooth: hci0: command tx timeout
[ 155.089876] Bluetooth: hci1: command tx timeout
[ 155.216891] Bluetooth: hci3: command tx timeout
[ 155.280852] Bluetooth: hci2: command tx timeout
[ 155.409360] Bluetooth: hci6: command tx timeout
[ 155.473784] Bluetooth: hci7: command tx timeout
[ 155.474088] Bluetooth: hci4: command tx timeout
[ 155.474386] Bluetooth: hci5: command tx timeout
[ 157.008689] Bluetooth: hci0: command tx timeout
[ 157.136714] Bluetooth: hci1: command tx timeout
[ 157.264762] Bluetooth: hci3: command tx timeout
[ 157.329656] Bluetooth: hci2: command tx timeout
[ 157.456752] Bluetooth: hci6: command tx timeout
[ 157.520823] Bluetooth: hci5: command tx timeout
[ 157.521193] Bluetooth: hci4: command tx timeout
[ 157.521243] Bluetooth: hci7: command tx timeout
[ 159.056872] Bluetooth: hci0: command tx timeout
[ 159.184744] Bluetooth: hci1: command tx timeout
[ 159.314771] Bluetooth: hci3: command tx timeout
[ 159.376706] Bluetooth: hci2: command tx timeout
[ 159.504823] Bluetooth: hci6: command tx timeout
[ 159.568792] Bluetooth: hci7: command tx timeout
[ 159.568898] Bluetooth: hci4: command tx timeout
[ 159.568951] Bluetooth: hci5: command tx timeout
[ 161.104859] Bluetooth: hci0: command tx timeout
[ 161.232868] Bluetooth: hci1: command tx timeout
[ 161.361239] Bluetooth: hci3: command tx timeout
[ 161.424702] Bluetooth: hci2: command tx timeout
[ 161.554746] Bluetooth: hci6: command tx timeout
[ 161.616852] Bluetooth: hci7: command tx timeout
[ 161.616965] Bluetooth: hci5: command tx timeout
[ 161.617052] Bluetooth: hci4: command tx timeout
[ 208.468017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 208.468140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 208.811238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 208.811321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.707294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.707423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.746237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.746358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 210.028551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 210.028674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:03:12 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
r8 = signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
r9 = fsmount(r4, 0x1, 0x2)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9)
bind(r2, &(0x7f0000000bc0)=@qipcrtr={0x2a, 0xffffffff}, 0x80)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x48000)
[ 210.383683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 210.383827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:03:12 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
r8 = signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
r9 = fsmount(r4, 0x1, 0x2)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9)
bind(r2, &(0x7f0000000bc0)=@qipcrtr={0x2a, 0xffffffff}, 0x80)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x48000)
03:03:13 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
r8 = signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
r9 = fsmount(r4, 0x1, 0x2)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9)
bind(r2, &(0x7f0000000bc0)=@qipcrtr={0x2a, 0xffffffff}, 0x80)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x48000)
03:03:13 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
r8 = signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
r9 = fsmount(r4, 0x1, 0x2)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9)
bind(r2, &(0x7f0000000bc0)=@qipcrtr={0x2a, 0xffffffff}, 0x80)
03:03:14 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
r8 = signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
r9 = fsmount(r4, 0x1, 0x2)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9)
[ 212.042792]
[ 212.043045] ======================================================
[ 212.043662] WARNING: possible circular locking dependency detected
[ 212.044261] 6.13.0-rc7-next-20250120 #1 Not tainted
[ 212.044742] ------------------------------------------------------
[ 212.045788] kworker/u8:1/66 is trying to acquire lock:
[ 212.047115] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[ 212.049574]
[ 212.049574] but task is already holding lock:
[ 212.051292] ffff888034108768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 212.053735]
[ 212.053735] which lock already depends on the new lock.
[ 212.053735]
[ 212.054706]
[ 212.054706] the existing dependency chain (in reverse order) is:
[ 212.055430]
[ 212.055430] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 212.056095] __mutex_lock+0x13d/0xb50
[ 212.056565] wiphy_register+0x1b2e/0x25d0
[ 212.057058] ieee80211_register_hw+0x23a4/0x3d60
[ 212.057595] mac80211_hwsim_new_radio+0x2759/0x4d60
[ 212.058168] init_mac80211_hwsim+0x389/0x870
[ 212.058693] do_one_initcall+0xf9/0x640
[ 212.059177] kernel_init_freeable+0x53d/0x7a0
[ 212.059716] kernel_init+0x1e/0x2d0
[ 212.060142] ret_from_fork+0x48/0x80
[ 212.060572] ret_from_fork_asm+0x1a/0x30
[ 212.061056]
[ 212.061056] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 212.061672] __lock_acquire+0x29fd/0x4580
[ 212.062160] lock_acquire+0x19b/0x520
[ 212.062607] __mutex_lock+0x13d/0xb50
[ 212.063064] unregister_netdevice_many_notify+0x1612/0x1c80
[ 212.063709] unregister_netdevice_queue+0x224/0x2e0
[ 212.064263] _cfg80211_unregister_wdev+0x57b/0x700
[ 212.064822] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 212.065380] ieee80211_unregister_hw+0x55/0x3a0
[ 212.065903] hwsim_exit_net+0x3a0/0x730
[ 212.066367] ops_exit_list+0xb3/0x180
[ 212.066815] cleanup_net+0x546/0xad0
[ 212.067273] process_one_work+0x8ee/0x1a10
[ 212.067780] worker_thread+0x674/0xe70
[ 212.068252] kthread+0x3ab/0x720
[ 212.068671] ret_from_fork+0x48/0x80
[ 212.069097] ret_from_fork_asm+0x1a/0x30
[ 212.069584]
[ 212.069584] other info that might help us debug this:
[ 212.069584]
[ 212.070339] Possible unsafe locking scenario:
[ 212.070339]
[ 212.070911] CPU0 CPU1
[ 212.071371] ---- ----
[ 212.071818] lock(&rdev->wiphy.mtx);
[ 212.072220] lock(rtnl_mutex);
[ 212.072798] lock(&rdev->wiphy.mtx);
[ 212.073416] lock(rtnl_mutex);
[ 212.073772]
[ 212.073772] *** DEADLOCK ***
[ 212.073772]
[ 212.074333] 4 locks held by kworker/u8:1/66:
[ 212.074771] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[ 212.075798] #1: ffff88800ed87d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[ 212.076777] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[ 212.077668] #3: ffff888034108768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 212.078691]
[ 212.078691] stack backtrace:
[ 212.079131] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250120 #1
[ 212.079948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 212.080736] Workqueue: netns cleanup_net
[ 212.081150] Call Trace:
[ 212.081403] <TASK>
[ 212.081631] dump_stack_lvl+0xca/0x120
[ 212.082044] print_circular_bug+0x47b/0x750
[ 212.082487] check_noncircular+0x2e9/0x3c0
[ 212.082916] ? __pfx_check_noncircular+0x10/0x10
[ 212.083405] ? hlock_class+0x4e/0x130
[ 212.083787] ? srso_return_thunk+0x5/0x5f
[ 212.084229] ? mark_lock+0xac/0xed0
[ 212.084618] ? lockdep_lock+0xba/0x1b0
[ 212.085038] ? __pfx_lockdep_lock+0x10/0x10
[ 212.085496] __lock_acquire+0x29fd/0x4580
[ 212.085933] ? __pfx___lock_acquire+0x10/0x10
[ 212.086386] ? lock_release+0x20f/0x6f0
[ 212.086809] ? __pfx_lock_release+0x10/0x10
[ 212.087263] ? srso_return_thunk+0x5/0x5f
[ 212.087710] lock_acquire+0x19b/0x520
[ 212.088103] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 212.088688] ? __pfx_lock_acquire+0x10/0x10
[ 212.089127] ? __pfx_lock_release+0x10/0x10
[ 212.089563] ? __pfx_try_to_wake_up+0x10/0x10
[ 212.090017] ? srso_return_thunk+0x5/0x5f
[ 212.090452] ? lock_is_held_type+0x9e/0x120
[ 212.090910] ? srso_return_thunk+0x5/0x5f
[ 212.091363] __mutex_lock+0x13d/0xb50
[ 212.091767] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 212.092345] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 212.092924] ? srso_return_thunk+0x5/0x5f
[ 212.093359] ? synchronize_rcu_expedited+0x38a/0x420
[ 212.093871] ? __pfx___mutex_lock+0x10/0x10
[ 212.094326] ? srso_return_thunk+0x5/0x5f
[ 212.094766] ? srso_return_thunk+0x5/0x5f
[ 212.095214] ? kasan_quarantine_put+0x84/0x1e0
[ 212.095702] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 212.096153] ? srso_return_thunk+0x5/0x5f
[ 212.096656] unregister_netdevice_many_notify+0x1612/0x1c80
[ 212.097271] ? __virt_addr_valid+0x2e8/0x5d0
[ 212.097730] ? __pfx_lock_release+0x10/0x10
[ 212.098164] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 212.098763] ? find_held_lock+0x2c/0x110
[ 212.099203] ? srso_return_thunk+0x5/0x5f
[ 212.099648] ? kernfs_remove_by_name_ns+0xc7/0x130
[ 212.100153] ? srso_return_thunk+0x5/0x5f
[ 212.100586] ? lock_release+0x20f/0x6f0
[ 212.100995] ? __pfx_lock_release+0x10/0x10
[ 212.101434] ? srso_return_thunk+0x5/0x5f
[ 212.101870] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 212.102401] ? srso_return_thunk+0x5/0x5f
[ 212.102843] unregister_netdevice_queue+0x224/0x2e0
[ 212.103361] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 212.103908] ? up_write+0x195/0x520
[ 212.104300] _cfg80211_unregister_wdev+0x57b/0x700
[ 212.104804] ? srso_return_thunk+0x5/0x5f
[ 212.105242] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 212.105750] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 212.106301] ? srso_return_thunk+0x5/0x5f
[ 212.106738] ? srso_return_thunk+0x5/0x5f
[ 212.107184] ? synchronize_rcu+0x1ff/0x260
[ 212.107626] ieee80211_unregister_hw+0x55/0x3a0
[ 212.108104] hwsim_exit_net+0x3a0/0x730
[ 212.108517] ? __pfx_hwsim_exit_net+0x10/0x10
[ 212.108971] ? srso_return_thunk+0x5/0x5f
[ 212.109407] ? netdev_run_todo+0x788/0x1040
[ 212.109851] ? __pfx_hwsim_exit_net+0x10/0x10
[ 212.110309] ops_exit_list+0xb3/0x180
[ 212.110702] cleanup_net+0x546/0xad0
[ 212.111097] ? __pfx_cleanup_net+0x10/0x10
[ 212.111555] process_one_work+0x8ee/0x1a10
[ 212.112009] ? __pfx_lock_acquire+0x10/0x10
[ 212.112449] ? __pfx_process_one_work+0x10/0x10
[ 212.112925] ? srso_return_thunk+0x5/0x5f
[ 212.113351] ? move_linked_works+0x172/0x270
[ 212.113792] ? srso_return_thunk+0x5/0x5f
[ 212.114218] ? assign_work+0x196/0x240
[ 212.114623] worker_thread+0x674/0xe70
[ 212.115032] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 212.115566] ? __pfx_worker_thread+0x10/0x10
[ 212.116022] kthread+0x3ab/0x720
[ 212.116380] ? __pfx_kthread+0x10/0x10
[ 212.116781] ? srso_return_thunk+0x5/0x5f
[ 212.117208] ? finish_task_switch.isra.0+0x206/0x840
[ 212.117711] ? __pfx_kthread+0x10/0x10
[ 212.118125] ret_from_fork+0x48/0x80
[ 212.118502] ? __pfx_kthread+0x10/0x10
[ 212.118912] ret_from_fork_asm+0x1a/0x30
[ 212.119365] </TASK>
03:03:14 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
signalfd(r5, &(0x7f0000000b80)={[0x9]}, 0x8)
fsmount(r4, 0x1, 0x2)
03:03:14 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', <r6=>r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@empty, @local, @private1, 0x4, 0x6, 0x8000, 0x300, 0x7d, 0x1c0080, r6})
fsmount(r4, 0x1, 0x2)
03:03:14 executing program 4:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>r0, 0x2f, 0x1, 0x4, 0x3e4e, 0x60, @private1, @mcast2, 0x80, 0x8, 0x2, 0x4}})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x80, 0x7800, 0x8, 0x80000000, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0x3a, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@end, @lsrr={0x83, 0xf, 0xc4, [@local, @loopback, @rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>r1, 0x29, 0x0, 0x7f, 0x6, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3, 0x7}})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="37faaf4cde6f9b2310e64629ad7c11c6", 0x10)
recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/232, 0xe8}], 0x3, &(0x7f00000006c0)=""/223, 0xdf}, 0x10320)
pipe(&(0x7f0000000800)={<r4=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200404a0}, 0x40810)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x9000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x2f, 0x40, 0x40, 0x6, 0xbd43576b4c112de2, @remote, @private2, 0x80, 0x1, 0x200, 0x3}})
openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101080, 0x0)
fsmount(r4, 0x1, 0x2)
[ 214.433065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 214.436169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 214.438403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 214.444345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 214.449349] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 214.452306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 214.582052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 214.583744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 214.587746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 214.591585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 214.593434] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 214.594550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 214.614993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 214.617934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 214.625284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 214.628957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 214.631554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 214.632491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 214.744165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 214.744826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 214.745347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 214.746974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 214.748030] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 214.748590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 214.774851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 214.778418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 214.779044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 214.780724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 214.781862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 214.782554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 214.811068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 214.815143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 214.840963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 214.866845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 214.871776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 214.881160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 214.890022] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 214.892680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 214.897088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 214.910461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 214.911546] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 214.912257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 216.465677] Bluetooth: hci0: command tx timeout
[ 216.657681] Bluetooth: hci2: command tx timeout
[ 216.657764] Bluetooth: hci1: command tx timeout
[ 216.784774] Bluetooth: hci3: command tx timeout
[ 216.849680] Bluetooth: hci4: command tx timeout
[ 216.977694] Bluetooth: hci6: command tx timeout
[ 217.041665] Bluetooth: hci7: command tx timeout
[ 218.514089] Bluetooth: hci0: command tx timeout
[ 218.705358] Bluetooth: hci2: command tx timeout
[ 218.705432] Bluetooth: hci1: command tx timeout
[ 218.834623] Bluetooth: hci3: command tx timeout
[ 218.897632] Bluetooth: hci4: command tx timeout
[ 219.024703] Bluetooth: hci6: command tx timeout
[ 219.088779] Bluetooth: hci7: command tx timeout
[ 220.560668] Bluetooth: hci0: command tx timeout
[ 220.752820] Bluetooth: hci2: command tx timeout
[ 220.752902] Bluetooth: hci1: command tx timeout
[ 220.880646] Bluetooth: hci3: command tx timeout
[ 220.944644] Bluetooth: hci4: command tx timeout
[ 221.073019] Bluetooth: hci6: command tx timeout
[ 221.137672] Bluetooth: hci7: command tx timeout
VM DIAGNOSIS:
03:03:14 Registers:
info registers vcpu 0
RAX=0000000000998988 RBX=00007fd9e357f000 RCX=0000000000040000 RDX=0000000000000000
RSI=0000000000017070 RDI=0000000000000006 RBP=000000c000041e10 RSP=000000c000041de8
R8 =0000000000998988 R9 =0000000000000038 R10=0000000001f21248 R11=0000000000000061
R12=0000000000000003 R13=000000c000000900 R14=000000c0003203c0 R15=0000000000000000
RIP=00000000004148f4 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000000c000030410 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f38102ad2f8 CR3=000000001375a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=652e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000
XMM04=3674656e695f6b636f73246c74636f69 XMM05=38720a297d3672202c30383030633178
XMM06=202c35722864666c616e676973203d20 XMM07=30386230303030303030663778302826
XMM08=0a29387830202c7d5d3978305b7b3d29 XMM09=2c347228746e756f6d7366203d203972
XMM10=6c74636f690a29327830202c31783020 XMM11=2844465f45474e4148435f504f4f4c24
XMM12=0a293972202c363063347830202c3872 XMM13=7567657269775f5845444e4946494743
XMM14=66666666666666666666783028647261 XMM15=202c333339387830202c666666666666
info registers vcpu 1
RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ed86b28
R8 =0000000000000000 R9 =fffffbfff0be1bdc R10=0000000000000000 R11=3038383866666666
R12=0000000000000005 R13=ffff88800ed86e28 R14=000000000000000c R15=ffff88800ed86e28
RIP=ffffffff8283e33d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f38102b9018 CR3=000000000dfa4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f381028c7c000007f381028c7c8
XMM02=00007f381028c7e000007f381028c7c0 XMM03=00007f381028c7c800007f381028c7c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000