Warning: Permanently added '[localhost]:38635' (ECDSA) to the list of known hosts. 2025/01/21 03:09:13 fuzzer started 2025/01/21 03:09:13 dialing manager at localhost:44833 syzkaller login: [ 61.796774] cgroup: Unknown subsys name 'net' [ 61.900731] cgroup: Unknown subsys name 'cpuset' [ 61.940074] cgroup: Unknown subsys name 'rlimit' [ 66.959233] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 77.969015] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 03:09:30 syscalls: 2217 2025/01/21 03:09:30 code coverage: enabled 2025/01/21 03:09:30 comparison tracing: enabled 2025/01/21 03:09:30 extra coverage: enabled 2025/01/21 03:09:30 setuid sandbox: enabled 2025/01/21 03:09:30 namespace sandbox: enabled 2025/01/21 03:09:30 Android sandbox: enabled 2025/01/21 03:09:30 fault injection: enabled 2025/01/21 03:09:30 leak checking: enabled 2025/01/21 03:09:30 net packet injection: enabled 2025/01/21 03:09:30 net device setup: enabled 2025/01/21 03:09:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 03:09:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 03:09:30 USB emulation: enabled 2025/01/21 03:09:30 hci packet injection: enabled 2025/01/21 03:09:30 wifi device emulation: enabled 2025/01/21 03:09:30 802.15.4 emulation: enabled 2025/01/21 03:09:30 fetching corpus: 50, signal 14454/15523 (executing program) 2025/01/21 03:09:30 fetching corpus: 100, signal 16166/18115 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/19394 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/20322 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/21249 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/22201 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/23136 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/24075 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/25059 (executing program) 2025/01/21 03:09:30 fetching corpus: 137, signal 16517/26030 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/26969 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/27917 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/28849 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/29776 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/30710 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/31357 (executing program) 2025/01/21 03:09:31 fetching corpus: 137, signal 16517/31357 (executing program) 2025/01/21 03:09:34 starting 8 fuzzer processes 03:09:34 executing program 0: r0 = epoll_create1(0x80000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x230003, 0x0) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) fsetxattr$security_evm(r2, &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x8, "c60f3c8b09"}, 0x7, 0x1) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}], 0x2, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x81]}, 0x8) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000240)={0x2, 0x2, 0x494, 0x7ff, 0x0, 0x57, 0xff, 0x4, 0x8001, 0xfff, 0x1f, 0xe48f, 0x4, 0x37ce46e2}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0xc004091) r3 = fsmount(r1, 0x0, 0x8) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x40600, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000003c0)='nolazytime\x00', 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x9) r5 = open(&(0x7f0000000400)='./file0\x00', 0x644100, 0x2) open_by_handle_at(r5, &(0x7f0000000440)=@ceph_nfs_confh={0x10, 0x2, {0x9c4, 0x7}}, 0x400) r6 = dup3(r4, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x81, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x10, 0x0, 0x10000, 0x3c}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', r7, 0x4, 0x40, 0x3, 0x0, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x20, 0x7, 0xfff, 0x6}}) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000600)) 03:09:34 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1, r0, &(0x7f0000000080)=0x1000, 0x2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0xa) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) r2 = dup2(r1, r1) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000180)={r1}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0xffffffff}, 0x4) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000200)) fchmodat(r0, &(0x7f0000000240)='./file0\x00', 0x12a) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)=""/75, &(0x7f0000000300)=0x4b) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = signalfd(0xffffffffffffffff, &(0x7f0000001a00)={[0x16]}, 0x8) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000001a40)={'syzkaller0\x00'}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001a80), 0x208000, 0x0) openat$cgroup(r4, &(0x7f0000001ac0)='syz1\x00', 0x200002, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001b00), 0x440, 0x0) pidfd_getfd(r5, r3, 0x0) close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b80)=0x14) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000001bc0)) 03:09:34 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x1, 0x73, &(0x7f0000000080)=""/115}) r1 = dup2(r0, r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\xbc:\x00') ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0)=0x4, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x111800, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000002c0)={{r0}, 0x0, 0x8, @inherit={0x60, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x8, {0xb, 0x0, 0x1, 0x20f, 0x6}, [0x4, 0x800, 0x9]}}, @name="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"}) r3 = fcntl$dupfd(r2, 0x406, r2) connect$bt_sco(r3, &(0x7f00000012c0), 0x8) r4 = syz_mount_image$ext4(&(0x7f0000001300)='ext3\x00', &(0x7f0000001340)='./file0\x00', 0x3, 0x3, &(0x7f0000001540)=[{&(0x7f0000001380)="40abf1d1fe9f351015a37f2930aab0dd645248036a60d711072b889725d5e39ea66fcc986e220d354bb7df18b9007d749aa063727a3a9ad349c1035a0e7391aaf84285870f34f728c326cc6371e80c1760afd3f53cf2394cb80983f5657faab81021883e56960f53272056228f62bec8ea876d01faa26376e4c4e7ce1e1f11151379615406fed4d67af08674d95e388e2dfef45abf7b2f3ecea7d874ad004eca9a03ba1bb1bac9c207c84b08", 0xac, 0x3}, {&(0x7f0000001440)="c3ade9fe4fc57aa6230185e29c00f12a2d2fe3c3ccd41d90e27f18c3194e61e1eebb1e54", 0x24, 0x4}, {&(0x7f0000001480)="ebc80dc3c9d2c9de7d4fc899427b3645535f828f4a71cfd77712cb4ec5b32d2da538aeacc21665cfca3cc5be43408239e8720596cc8320955455aec1989eced16c8731b4be138d05fe8840dfb36c1fdb9ed550613c932322357b94832603ffd949c321313cf5e9a5ef754d0b5c0246a94e4e4fd2fbce751fba4714569b56a7838627cb9905ac8a542b7a564081ed94cfe9b2233a52b8", 0x96, 0x6}], 0x0, &(0x7f00000015c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@grpjquota}], [{@uid_gt}]}) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x80) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000001640)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x0, @fd_index, 0x100000000, 0xfffffffffffffffb, 0x901, 0x18, 0x1, {0x1}}, 0x3) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001680), 0x30000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001740)={0x6, 'bond_slave_0\x00', {0x4}, 0x556}) 03:09:34 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400e040}, 0x8001) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004040) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x3b0643d4fce6951}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044041}, 0x40000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x80}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x80001) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) r3 = getpgid(0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x120, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sched_getattr(r3, &(0x7f00000007c0)={0x38}, 0x38, 0x0) sched_getattr(r3, &(0x7f0000000800)={0x38}, 0x38, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa0, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x815) r5 = gettid() sched_getattr(r5, &(0x7f0000000a00)={0x38}, 0x38, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a40)=0x0) sched_getattr(r6, &(0x7f0000000a80)={0x38}, 0x38, 0x0) r7 = accept(0xffffffffffffffff, &(0x7f0000000ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000b40)=0x80) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x108, 0x0, 0x401, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa59}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3fa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4088090) 03:09:34 executing program 4: fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/113, 0x71}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/192, 0xc0}], 0x8) socketpair(0x18, 0x800, 0x1, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) r2 = socket(0x9, 0x2, 0x400) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000580)={0x0, 0x6, 0x0, [0x10000, 0x4ef3, 0x215b, 0x8, 0x6], [0x1, 0xd441, 0x4, 0x0, 0xf7, 0x3, 0x5, 0x7, 0x5, 0x100, 0x9, 0x8000, 0xffffffffffffffff, 0x1f, 0x4, 0x7fff, 0x3f, 0xe19, 0x401, 0x6, 0x100, 0x5c9880f2, 0x1, 0x8001, 0x1ffc00000, 0x6, 0x1000200000, 0x2, 0x200, 0x8, 0x8001, 0x10000, 0x0, 0x7, 0x10000, 0x0, 0x2, 0xb4e6, 0x6, 0x2, 0x0, 0x1, 0xffffffffffff7fff, 0xffffffffffffc01a, 0x7fffffff, 0x3, 0x7, 0x0, 0xffff, 0x6, 0x5, 0x7d, 0x9, 0xffffffffffff0000, 0x7fff, 0x7, 0x5, 0xd65b, 0x1000, 0x1ff, 0x10000, 0xffffffffffffff7f, 0x818b, 0x7, 0xb8, 0x0, 0x4, 0x4, 0x200, 0x5, 0x3, 0xff, 0x5, 0x2, 0x40, 0x1, 0x1, 0x2, 0x6, 0x1bf, 0x100000001, 0x6, 0xe2, 0xffffffff, 0x6c, 0xb9ff, 0x8, 0x0, 0x7fff, 0x7, 0x401, 0x7f, 0x4, 0x9, 0x4, 0x7, 0x2000000, 0x10001, 0x836, 0x7, 0xffff, 0xcf, 0x5, 0x8, 0x80000001, 0x1, 0x2d, 0xa78, 0x7f, 0x80000001, 0x6d, 0x1f, 0x80000001, 0x3, 0x4, 0xff, 0x2, 0x9, 0x7fff, 0x6, 0x7]}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x20048800) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000ac0)) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x15c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab35053393e07b0f55755cd4d703fac0a18da78afdf97338"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53ad673084700ac371e5ac68dfbdf6d5db28fc5c0be65c15"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "474d9127769ca1501a54ebf572546341722fea82f3f6cdae"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ccca5691d6dc9cc0a574eebd9b33625b4d835c63141e532e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f6a436c3fea6370bbc0a4c9b6f820c0aae77ddbe7cbbf327"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "455ff277766412f4487230fece0749e721304618ee09bd8c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7398c178b4bf73ff5afb2f486882240e89a44ae1d3d07e8f"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4041}, 0x80) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x144, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x20}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7d}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x10001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x20}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x97af}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0xc4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7345f5f341122fdd}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000090) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000001080)=""/244, &(0x7f0000001180)=0xf4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001280)={'ip6tnl0\x00', &(0x7f0000001200)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x7f, 0x400, 0x28, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8020, 0x4f, 0x1}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000012c0)={@private2, 0x0}, &(0x7f0000001300)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001400)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x74, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x74}}, 0x41) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, 0x0, 0x1e66e3637e6a6328, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xffffffff, 0x400]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40045802}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f5, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000844}, 0x40080d0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000001740)={&(0x7f0000001640), 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "79968b0aef7ace17c4fd5703031e5bd7"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x4000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, 0x0, 0x523, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000000, 0x4f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0xc4) [ 82.464268] audit: type=1400 audit(1737428974.400:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:09:34 executing program 6: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4dd7, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40854) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f8, 0x1, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x20080089) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x108, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x3b}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x81}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0x7}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x9, 0x3}, {0x9, 0x4}], "493344016277a075"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x5, 0x7}, {0x20, 0x1}, {0x81, 0x4}, {0x5, 0x7}, {0x1f, 0x7}, {0x7, 0x4}, {0x81, 0x5}, {0x8, 0x7}, {0x2, 0x1}, {0x81, 0x1}, {0x4, 0x1}, {0x3, 0x3}, {0xcc, 0x6}, {0x6, 0x7}, {0x3}, {0xfc, 0x4}], "c8d0e59afb948e1a"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xc7, 0x1}, {0x2}, {0x3, 0x2}, {0x1, 0x5}, {0x1f, 0x5}, {0x6, 0x2}, {0x40, 0x1}, {0x92, 0x6}, {0x3f, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x7}, {0xff, 0x5}, {0x73, 0x2}, {0x1f}, {0x7, 0x7}, {0x1d, 0x7}, {0x7, 0x7}], "47f638163da1e69e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xfc}, {0x1, 0x4}, {0x1, 0x2}, {0x9, 0x1}, {0xf8, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0xc3, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x3, 0x7}, {0xff, 0x5}, {0xfc, 0x2}, {0xcd, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x3}, {0x9f, 0x1}, {0x2, 0x4}, {0x5, 0x7}], "3a4af4be403aba94"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x4}, {0x0, 0x6}, {0x1, 0x4}, {0x19, 0x7}, {0x3, 0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x40}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x3}, {0xf4, 0x5}, {0x9, 0x4}, {0x1, 0x2}, {0x7f, 0x1}, {0x0, 0x7}, {0x8, 0x4}, {0x7f, 0x3}], "5ea2dd037dba27bd"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x124, r0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x25}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x48, 0xc5, "73f469e561c262ba668b4ec977985ac68081f77625fbaa32fcf43325876d1784d802b47a24f9cad7f189f34bf15c049bd0c17bd448e0a71518c6089309a896a04c7cf71b"}, @NL80211_ATTR_VENDOR_DATA={0xad, 0xc5, "fc9e22ce02cf2e5af795ffd45f9ba2a6b8fc5e2e19c0d2fa36f1bf7bd4a2ba3df1c1ebf498f337f329cd3d384e2bf8fe57cf292659a411c8b7c2b53a71e7c9551b5670c22b423b00f1354e4d2e767e0a1625abf6bd3f683a24b119b0c43ed473eb8e04d6e5e9b3b3b4af9b094673ffe4fc7a655dbcb19c0b405f0f8604000d75d823ecba30addfcb0936ae2befb0ddc5d7f0f935a9f09d8869d1066e9baf6fedd57718a83d1277bc37"}]}, 0x124}, 0x1, 0x0, 0x0, 0x4084010}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='net/tcp\x00') sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8004}, 0x20000000) preadv2(r3, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000b80)=""/15, 0xf}, {&(0x7f0000000bc0)=""/104, 0x68}, {&(0x7f0000000c40)=""/57, 0x39}, {&(0x7f0000000c80)=""/75, 0x4b}, {&(0x7f0000000d00)=""/110, 0x6e}, {&(0x7f0000000d80)=""/69, 0x45}], 0x7, 0x10000, 0x1, 0x1) r4 = open_tree(r3, &(0x7f0000000e80)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 03:09:34 executing program 5: sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdd2}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x438}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4ac6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x7c}}, 0x40084) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x87}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c080}, 0x80) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, 0x0, 0x1b11, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x98}}, 0x20000001) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000885}, 0x20000000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20100108}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xc9\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000a00)={'veth1_to_bond\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}}, 0x4040) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x75}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x7b}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 03:09:34 executing program 7: syncfs(0xffffffffffffffff) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) pwrite64(r0, &(0x7f0000000040)="bae9973b86b290c354df8f3a8ca49c2f786fbdb164759164a098b9c4a4f13d4078d20bcd10d0253e7097f989668699f5a726e91188eaf4b158d973bf40df140acb5d00385e8df553ec2deec13c48e595f33102acdb8cb3636be2ea478da6b1cee83a3e575f5df15b61c7ecffc5a5f8e4c35bec986244bb2041eb246937c6699c1400717d811b024e019372c15303b025ed51a12db105f2e48686c290488733484d94e8962cc206046f8e5c75898fb7b09774f3247542a0e9fd9eeaad742213ed3e5a2769079124caaf4625ceec4171a1687f9e", 0xd3, 0xbbba) fgetxattr(r0, &(0x7f0000000140)=@random={'system.', '/dev/hpet\x00'}, &(0x7f0000000180)=""/177, 0xb1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x80, 0x40, 0x200, 0x7, {{0x1c, 0x4, 0x1, 0x3f, 0x70, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @loopback, {[@noop, @ssrr={0x89, 0x13, 0x80, [@rand_addr=0x64010101, @empty, @multicast1, @rand_addr=0x64010102]}, @cipso={0x86, 0x38, 0x0, [{0x7, 0x10, "383f2c0a92077490896aa2766128"}, {0x2, 0x5, "92ed31"}, {0x6, 0x11, "5e3550e6178b801dc6e0f155138e0f"}, {0x1, 0xc, "dc25045125827f2619bd"}]}, @noop, @generic={0x82, 0x6, "87097cc2"}, @rr={0x7, 0x3, 0x76}, @end, @timestamp_prespec={0x44, 0x4, 0xbb, 0x3, 0x9}, @end]}}}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000380)={r1}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000003c0)=0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pread64(r2, &(0x7f0000000400)=""/68, 0x44, 0x100000001) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000500)={0x0, 'team0\x00', {0x4}, 0xfff}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040000) sendmsg$sock(r0, &(0x7f0000000c00)={&(0x7f0000000640)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)="3e2517fa61ff73109e201ebb3a0e1d8383b784a7b28ec7d5", 0x18}, {&(0x7f0000000700)="c5e8247a3a7f6ed3c75fdf32c2c38414a51849ecd4691fb034afba10c4c43b4a74716f3e827849c6b98dec08097a4f6210731f853b9387bb28738c33561bd2507309d86e4a17c88355b429327a44292a23b8d502b45a29cdd85a1f30c1dbe1ef2e44a23ab10f56800751f0afeaa63971bea8aee47a96e6be5403d97b19635300de7954c13a23b0869dc17b2877a59ecc3b6dee98abfac43931ced19845618906ba58bb027beac6f0ef43e12ed71fc68dc904f4e4e93b", 0xb6}, {&(0x7f00000007c0)="0332ba00507f88de4a1b9336e666b0fc57bfec663466bb82d998528a3f5540f9aef16dccb35ab1110f09e4cd74fb3ce2f5e6192096ffa90a20d4726d9863627008989475cc6e54fe27ba920f", 0x4c}, {&(0x7f0000000840)="bbdff2bbd268ae16474e53c7f19ca7bfa9b6569f7636567145246febddc4fd1c0e6a00a128504559105463c4511088b614d5c4176ae65674666298a10461ad44f6031b4314d098d6e0fa135530435274ff1c94026f014390a5275200c90532e72c8757f76b47aa5a79aa6c2fea1584284ccf6f459415f043f42ee3d1edb4a357fc86c7838d17d2acb25e73ca5c0d7372ca49b5fcc259412259f08c612b4c101854f1025003ac0017f85d95d83585af77f7a1909cbad4bb5b4e6e246362a0fdedff18d6703f15ec873b3605a01f86a62532f7aaad20142074754c939dbad0eee378e0d39681d97a5926b565af0f7fe39ad1", 0xf1}, {&(0x7f0000000940)="73ba71ca72f57b16eb98d5bfa3b0d68d62b476584fb14e24ad3dacdfbcb56c117617885a2708502d28196245a1e246e4197d4eda9db81b98989bc3623faa10e881ca424c10ccdc7b037627", 0x4b}, {&(0x7f00000009c0)="49d5b68a0512ae75801c24bce654f784cbf1eab6", 0x14}, {&(0x7f0000000a00)="04754ed49e1719d4de4e57c6f415e8a9ee14266ae9b56797e7971cbca7921fcce9e8eea734db3eb639d779bfe47801b713b31f64746fcccb88ba1d9f606845b58bcdbee22591c827f37c3040eb8464db2ff341bb5519e8737321c42be49b2f5c9b9746e88c06b7c9e7507a42f4467904fd539ff9495e52f1d994f0d39215ca018ff740c4cf0d44e6ad202252bee15be163e43e987f0a1fb2497919f70bdf35b1e2b8e099d66fd3deb3e0496a39483ace66da6552f98822c2d66ad7dde13c", 0xbe}, {&(0x7f0000000ac0)="45850a13eea9367ba2d346ddd20a34bf5adb6c7e5a5cf393501398732e5feaa69ce90d94d8a65826c4317e80734d6de53f4a1467d9988bb0a8bfa124df033a69078f70fcada133e93f9d5a98cccfac12cc66ea7b5dc0d02a7ec48d1d655a0c18d9f2ea6806c3d19788c0", 0x6a}], 0x8, &(0x7f0000000bc0)}, 0x20000800) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000c40)={0xe3, 0x3}, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000c80), 0x1ff, 0x100) ioctl$FIONCLEX(r4, 0x5450) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000cc0)={'veth0\x00', 0x460}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000d00)=0x1) [ 83.886048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.890863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.893826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.904985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.909092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.911596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.918834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.923840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.926412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.946789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.949896] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.952027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.993061] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.996896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.998998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.021920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.025811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.027940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.037377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.045660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.047144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.048857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.051101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.058808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.060870] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.063124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.065188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.068898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.073411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.074824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.077282] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.079427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.084958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.086108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.090873] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.096129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.097532] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.105137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.109919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.125951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.137898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.169871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.172923] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.175604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.176875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.177862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.189265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.197105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.958834] Bluetooth: hci0: command tx timeout [ 86.020843] Bluetooth: hci1: command tx timeout [ 86.148603] Bluetooth: hci3: command tx timeout [ 86.212633] Bluetooth: hci7: command tx timeout [ 86.213589] Bluetooth: hci4: command tx timeout [ 86.276606] Bluetooth: hci2: command tx timeout [ 86.276632] Bluetooth: hci5: command tx timeout [ 86.278114] Bluetooth: hci6: command tx timeout [ 88.004538] Bluetooth: hci0: command tx timeout [ 88.068549] Bluetooth: hci1: command tx timeout [ 88.197349] Bluetooth: hci3: command tx timeout [ 88.261594] Bluetooth: hci4: command tx timeout [ 88.261670] Bluetooth: hci7: command tx timeout [ 88.324649] Bluetooth: hci2: command tx timeout [ 88.325215] Bluetooth: hci5: command tx timeout [ 88.326603] Bluetooth: hci6: command tx timeout [ 90.052764] Bluetooth: hci0: command tx timeout [ 90.116781] Bluetooth: hci1: command tx timeout [ 90.244649] Bluetooth: hci3: command tx timeout [ 90.309342] Bluetooth: hci7: command tx timeout [ 90.309446] Bluetooth: hci4: command tx timeout [ 90.372594] Bluetooth: hci6: command tx timeout [ 90.372680] Bluetooth: hci5: command tx timeout [ 90.372732] Bluetooth: hci2: command tx timeout [ 92.101912] Bluetooth: hci0: command tx timeout [ 92.165570] Bluetooth: hci1: command tx timeout [ 92.293520] Bluetooth: hci3: command tx timeout [ 92.356556] Bluetooth: hci7: command tx timeout [ 92.356588] Bluetooth: hci4: command tx timeout [ 92.420572] Bluetooth: hci2: command tx timeout [ 92.420661] Bluetooth: hci5: command tx timeout [ 92.420750] Bluetooth: hci6: command tx timeout [ 144.838835] [ 144.839081] ====================================================== [ 144.839664] WARNING: possible circular locking dependency detected [ 144.840244] 6.13.0-rc7-next-20250120 #1 Not tainted [ 144.840720] ------------------------------------------------------ [ 144.841542] kworker/u8:0/11 is trying to acquire lock: [ 144.842748] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.844575] [ 144.844575] but task is already holding lock: [ 144.845667] ffff88803a230768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.847847] [ 144.847847] which lock already depends on the new lock. [ 144.847847] [ 144.849297] [ 144.849297] the existing dependency chain (in reverse order) is: [ 144.850579] [ 144.850579] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 144.851237] __mutex_lock+0x13d/0xb50 [ 144.851699] wiphy_register+0x1b2e/0x25d0 [ 144.852184] ieee80211_register_hw+0x23a4/0x3d60 [ 144.852725] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 144.853285] init_mac80211_hwsim+0x389/0x870 [ 144.853811] do_one_initcall+0xf9/0x640 [ 144.854295] kernel_init_freeable+0x53d/0x7a0 [ 144.854827] kernel_init+0x1e/0x2d0 [ 144.855252] ret_from_fork+0x48/0x80 [ 144.855686] ret_from_fork_asm+0x1a/0x30 [ 144.856176] [ 144.856176] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 144.856802] __lock_acquire+0x29fd/0x4580 [ 144.857283] lock_acquire+0x19b/0x520 [ 144.857737] __mutex_lock+0x13d/0xb50 [ 144.858200] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.858825] unregister_netdevice_queue+0x224/0x2e0 [ 144.859410] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.859987] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.860551] ieee80211_unregister_hw+0x55/0x3a0 [ 144.861075] hwsim_exit_net+0x3a0/0x730 [ 144.861545] ops_exit_list+0xb3/0x180 [ 144.861994] cleanup_net+0x546/0xad0 [ 144.862442] process_one_work+0x8ee/0x1a10 [ 144.862951] worker_thread+0x674/0xe70 [ 144.863430] kthread+0x3ab/0x720 [ 144.863859] ret_from_fork+0x48/0x80 [ 144.864292] ret_from_fork_asm+0x1a/0x30 [ 144.864782] [ 144.864782] other info that might help us debug this: [ 144.864782] [ 144.865525] Possible unsafe locking scenario: [ 144.865525] [ 144.866105] CPU0 CPU1 [ 144.866553] ---- ---- [ 144.867006] lock(&rdev->wiphy.mtx); [ 144.867408] lock(rtnl_mutex); [ 144.868004] lock(&rdev->wiphy.mtx); [ 144.868631] lock(rtnl_mutex); [ 144.868991] [ 144.868991] *** DEADLOCK *** [ 144.868991] [ 144.869563] 4 locks held by kworker/u8:0/11: [ 144.869990] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 144.870990] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 144.871950] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 144.872850] #3: ffff88803a230768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.873853] [ 144.873853] stack backtrace: [ 144.874276] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1 [ 144.875060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 144.875829] Workqueue: netns cleanup_net [ 144.876237] Call Trace: [ 144.876497] [ 144.876719] dump_stack_lvl+0xca/0x120 [ 144.877126] print_circular_bug+0x47b/0x750 [ 144.877562] check_noncircular+0x2e9/0x3c0 [ 144.877985] ? __pfx_check_noncircular+0x10/0x10 [ 144.878453] ? hlock_class+0x4e/0x130 [ 144.878827] ? mark_lock+0xac/0xed0 [ 144.879197] ? srso_return_thunk+0x5/0x5f [ 144.879623] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 144.880079] ? lockdep_lock+0xba/0x1b0 [ 144.880504] ? __pfx_lockdep_lock+0x10/0x10 [ 144.880952] __lock_acquire+0x29fd/0x4580 [ 144.881378] ? __pfx___lock_acquire+0x10/0x10 [ 144.881825] ? lock_release+0x20f/0x6f0 [ 144.882227] ? __pfx_lock_release+0x10/0x10 [ 144.882661] lock_acquire+0x19b/0x520 [ 144.883047] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.883618] ? __pfx_lock_acquire+0x10/0x10 [ 144.884049] ? srso_return_thunk+0x5/0x5f [ 144.884483] ? lock_release+0x20f/0x6f0 [ 144.884889] ? srso_return_thunk+0x5/0x5f [ 144.885318] ? lock_is_held_type+0x9e/0x120 [ 144.885762] ? srso_return_thunk+0x5/0x5f [ 144.886197] __mutex_lock+0x13d/0xb50 [ 144.886598] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.887163] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.887735] ? srso_return_thunk+0x5/0x5f [ 144.888163] ? synchronize_rcu_expedited+0x38a/0x420 [ 144.888669] ? __pfx___mutex_lock+0x10/0x10 [ 144.889109] ? __pfx_autoremove_wake_function+0x10/0x10 [ 144.889639] ? srso_return_thunk+0x5/0x5f [ 144.890070] ? kasan_quarantine_put+0x84/0x1e0 [ 144.890541] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 144.890986] ? srso_return_thunk+0x5/0x5f [ 144.891417] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.891971] ? __virt_addr_valid+0x2e8/0x5d0 [ 144.892425] ? __pfx_lock_release+0x10/0x10 [ 144.892855] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 144.893432] ? find_held_lock+0x2c/0x110 [ 144.893855] ? srso_return_thunk+0x5/0x5f [ 144.894282] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 144.894782] ? srso_return_thunk+0x5/0x5f [ 144.895206] ? lock_release+0x20f/0x6f0 [ 144.895609] ? __pfx_lock_release+0x10/0x10 [ 144.896038] ? srso_return_thunk+0x5/0x5f [ 144.896472] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.896985] ? srso_return_thunk+0x5/0x5f [ 144.897416] unregister_netdevice_queue+0x224/0x2e0 [ 144.897908] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 144.898441] ? up_write+0x195/0x520 [ 144.898824] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.899316] ? srso_return_thunk+0x5/0x5f [ 144.899751] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.900241] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 144.900785] ? srso_return_thunk+0x5/0x5f [ 144.901214] ? srso_return_thunk+0x5/0x5f [ 144.901645] ? synchronize_rcu+0x1ff/0x260 [ 144.902066] ieee80211_unregister_hw+0x55/0x3a0 [ 144.902533] hwsim_exit_net+0x3a0/0x730 [ 144.902931] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.903374] ? srso_return_thunk+0x5/0x5f [ 144.903800] ? netdev_run_todo+0x788/0x1040 [ 144.904235] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.904693] ops_exit_list+0xb3/0x180 [ 144.905079] cleanup_net+0x546/0xad0 [ 144.905460] ? __pfx_cleanup_net+0x10/0x10 [ 144.905891] process_one_work+0x8ee/0x1a10 [ 144.906335] ? __pfx_lock_acquire+0x10/0x10 [ 144.906766] ? __pfx_process_one_work+0x10/0x10 [ 144.907244] ? srso_return_thunk+0x5/0x5f [ 144.907673] ? move_linked_works+0x172/0x270 [ 144.908115] ? srso_return_thunk+0x5/0x5f [ 144.908548] ? assign_work+0x196/0x240 [ 144.908956] worker_thread+0x674/0xe70 [ 144.909363] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.909885] ? __pfx_worker_thread+0x10/0x10 [ 144.910343] kthread+0x3ab/0x720 [ 144.910704] ? __pfx_kthread+0x10/0x10 [ 144.911105] ? srso_return_thunk+0x5/0x5f [ 144.911533] ? finish_task_switch.isra.0+0x206/0x840 [ 144.912040] ? __pfx_kthread+0x10/0x10 [ 144.912455] ret_from_fork+0x48/0x80 [ 144.912822] ? __pfx_kthread+0x10/0x10 [ 144.913225] ret_from_fork_asm+0x1a/0x30 [ 144.913658] [ 147.157755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.158615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.159261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.164493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.166133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.166880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.218972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.219934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.221676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.224302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.226294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.227847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.278764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.283060] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.284617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.295259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.300672] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.303682] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.339503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.340912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.344137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.354132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.358400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.361012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.418548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.424278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.424424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.427279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.429712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.431414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.432417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.433985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.434947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.435090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.444829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.445588] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.446785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.447506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.448203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.448400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.454892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.455944] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.458279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.459130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.468873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.483536] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.485008] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.503828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.188539] Bluetooth: hci0: command tx timeout [ 149.252516] Bluetooth: hci1: command tx timeout [ 149.381462] Bluetooth: hci3: command tx timeout [ 149.381538] Bluetooth: hci2: command tx timeout [ 149.573501] Bluetooth: hci5: command tx timeout [ 149.573540] Bluetooth: hci4: command tx timeout [ 149.636537] Bluetooth: hci7: command tx timeout [ 149.636559] Bluetooth: hci6: command tx timeout [ 151.236663] Bluetooth: hci0: command tx timeout [ 151.303583] Bluetooth: hci1: command tx timeout [ 151.429543] Bluetooth: hci2: command tx timeout [ 151.429618] Bluetooth: hci3: command tx timeout [ 151.620698] Bluetooth: hci5: command tx timeout [ 151.621501] Bluetooth: hci4: command tx timeout [ 151.684961] Bluetooth: hci6: command tx timeout [ 151.685955] Bluetooth: hci7: command tx timeout [ 153.285480] Bluetooth: hci0: command tx timeout [ 153.348524] Bluetooth: hci1: command tx timeout [ 153.476864] Bluetooth: hci3: command tx timeout [ 153.476945] Bluetooth: hci2: command tx timeout [ 153.668561] Bluetooth: hci4: command tx timeout [ 153.668590] Bluetooth: hci5: command tx timeout [ 153.732620] Bluetooth: hci6: command tx timeout [ 153.735471] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:10:36 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283e250 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb30 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000001 R11=3038383866666666 R12=ffffffff886990b0 R13=ffff8880095dee28 R14=ffffffff88699320 R15=0000000000000000 RIP=ffffffff8283e2a5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb4c85eba00 CR3=000000000ce6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=31333635383434343472696474736574 XMM02=2f313336353834343434726964747365 XMM03=5a4e324937522e72656c6c616b7a7973 XMM04=78650a006873616d7320636578650a00 XMM05=7320636578650a0073746e6968206365 XMM06=6c61746f7420636578650a0073646565 XMM07=6578650e007a7a756620636578650900 XMM08=650800737472617473657220726f7475 XMM09=6d7320636578650a006e656720636578 XMM10=0073746e696820636578650a00687361 XMM11=6578650a00736465657320636578650a XMM12=7566206365786509006c61746f742063 XMM13=616469646e616320636578650e007a7a XMM14=0065676169727420636578650b006574 XMM15=0000657a696d696e696d20636578650d info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81999597 RDX=ffff8880137c8000 RSI=ffffffff819995ac RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88800d2b7598 R8 =0000000000000000 R9 =fffffbfff0c80a7a R10=0000000000000000 R11=0000000000000000 R12=ffffea000079f480 R13=ffffea000079f448 R14=8000000000000067 R15=800000001e7d2067 RIP=ffffffff8171a3d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030b10 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055adf1e74a80 CR3=000000000ce6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000074230000000c000057bf0 XMM02=000000c0000741e0000000c000057c50 XMM03=000000c0000742d0000000c000057cb0 XMM04=000000c000146090000000c000146060 XMM05=000000c0001460f0000000c0001460c0 XMM06=000000c000146150000000c000146120 XMM07=000000c000145760000000c0000874d0 XMM08=000000c0001464b0000000c000146480 XMM09=000000c000146510000000c0001464e0 XMM10=000000c000146540000000c000087530 XMM11=000000c0001465a0000000c000146570 XMM12=000000c000146600000000c0001465d0 XMM13=000000c000146660000000c000146630 XMM14=000000c0001466c0000000c000146690 XMM15=000000c0000e7080000000c0001466f0