Warning: Permanently added '[localhost]:35420' (ECDSA) to the list of known hosts. 2025/01/22 01:56:20 fuzzer started 2025/01/22 01:56:21 dialing manager at localhost:44689 syzkaller login: [ 68.401894] cgroup: Unknown subsys name 'net' [ 68.516767] cgroup: Unknown subsys name 'cpuset' [ 68.542303] cgroup: Unknown subsys name 'rlimit' [ 74.387612] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 01:56:38 syscalls: 2217 2025/01/22 01:56:38 code coverage: enabled 2025/01/22 01:56:38 comparison tracing: enabled 2025/01/22 01:56:38 extra coverage: enabled 2025/01/22 01:56:38 setuid sandbox: enabled 2025/01/22 01:56:38 namespace sandbox: enabled 2025/01/22 01:56:38 Android sandbox: enabled 2025/01/22 01:56:38 fault injection: enabled 2025/01/22 01:56:38 leak checking: enabled 2025/01/22 01:56:38 net packet injection: enabled 2025/01/22 01:56:38 net device setup: enabled 2025/01/22 01:56:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 01:56:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 01:56:38 USB emulation: enabled 2025/01/22 01:56:38 hci packet injection: enabled 2025/01/22 01:56:38 wifi device emulation: enabled 2025/01/22 01:56:38 802.15.4 emulation: enabled 2025/01/22 01:56:38 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/22 01:56:38 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/22 01:56:38 fetching corpus: 0, signal 0/5749 (executing program) 2025/01/22 01:56:38 fetching corpus: 0, signal 0/5749 (executing program) 2025/01/22 01:56:40 starting 8 fuzzer processes 01:56:40 executing program 0: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=""/233, &(0x7f0000000100)=0xe9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) set_thread_area(&(0x7f00000002c0)={0x1, 0xffffffffffffffff, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000480)={0x0, 0x1, 0x5, 0x210b088e}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@multicast1}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_mount_image$nfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x8, 0x8, &(0x7f0000000d80)=[{&(0x7f00000007c0)="7598dd7ae87efd733c950dd146dc526be369efbdf0db96f8dd02dfe8d8f9a69b53fc7ce1942a0c3942aa15b7ae71e607891da73bbbb87fb273a82d1679cbf13591cf90e21f9c090b83a38be418242b0192523a97617ea06c72cd031c52288fed3fe48213da2711755d4ddbf5f4d97bd13cb587870f4d42c7effc556b2090bb2cac1b555845eafabcab71806bec4ec96e14f3725dc77ebf2dabe45458a7e88fcd452c3e0c1f22bc33b3f2b97061a4451f380db5cdbf52dda651ddd107cb1b14b9c7a0ef5eeb2877b55858fb8eebc5f46bcc3b63540985e9cfb99f", 0xda}, {&(0x7f00000008c0)="08760409af6859a0d73dd6ec271b80b31607cd4ead4b6f547ea8a78d53c6ce181915a71644ffdbea15eec71095a0d93960aa0852f260469632d0146f833fde54a4088bed1635e7a1d7592726d216082eeb6d2d12c4f333efeed030c1ca3df432324835c4eeb5a91819311a88aa6578b51029720bdd2859ac6b3a4b76bbfdf3549df0abafaf7f82edb6d4da0e49104398b6e2ba5771eb5d62cc52bfbc0423549fc30ebe5fe180f616f594c2bd8f2c596586659918c67ab84321686294d363d1b4b5536ab4ec5bf7315a77fa5a44dadee7b89a90a3a7ed022a9409017f", 0xdc, 0x73}, {&(0x7f00000009c0)="ed911e57f8ce7d49a4508a015afb2c57d34499452e549ca40aa63e8ba4383ff0c104c10e6af1651407590587ee1db65524a12c9c0192107571fa85cffea5da54fad76d07d1e58414b9d850d0044a41f6497b9b5cbca0db6412ef59bf5e27196a50121e1c86d01655f30e2acdf13c73a6c61c0b7a0e01ac5c84bf9d7a9d32d9d1ad6e519e2d83d10a549f70dba759b646dc6e43b3a869206a84db11938b12f0085064efb93c8028c827e15d435be18745a75c85cd9facd3b5e56440149776e563aa2d0778830031a20cad7147ffc976de94f49f430c0e8daec4be28f569843521d2fe5bcf0580", 0xe6}, {&(0x7f0000000ac0)="b4e95459cec53477c923ea311ac26acc75b7b41d4a50058afddafaa9a357b94dd67647aedc8d73c3185e3875506bdf5a9fe527147fb519b11ba266121f9ab0e96cb6ff1e6ce9166711daf5e14d", 0x4d, 0x4}, {&(0x7f0000000b40), 0x0, 0xd7}, {&(0x7f0000000b80)="073b9cbdf7b8fa4bb43f0f9c0198ce8079402eef72b9aba1d397eba865cfd0df2abd1467ac033a0ab14af6de3eaaf7d017a1d2fbebdbff66f34850fb28c7dd38d6a547ece0254001ecf946bad797d96cb88582be9eb521c684327ab8ffc044be3bbb9bdd04504ee797bfceac0468a77b8665ce49f7bc2c4934dff5c57feabd1350ad42aa3bd8979a1cd8a845cb6e973fdfba7dc3b72b88ac0dd15d95b8f3267ace526874625d7b7e6996", 0xaa, 0x8}, {&(0x7f0000000c40)="149afc6468d74785990f8613342dcad0a42523e7a3127f16a2c54601fe4e49666578acb8f63ec4d2223580a88b92dbd7d079726560e057a11e7c45ee0637c7d5ed1b9d5912f64fc76010c156b4d4c90621d437b52d75b36c9de78c3b9df7c670cf64a2a4e54918a2ac0d8de6a5e95882d33b5b4746fd44e602eb884c70750e6acff553586e07fc191b3c5cf24604fc5805bf88", 0x93, 0xfff}, {&(0x7f0000000d00)="9ac16307d44a2140dafcae09bedfcacf91702a3cbdcfc4b4e731bc2340d2551d12b09e7d99e2b44754636d031d90e401f776d14978a241efbed837c343e0a12204a95b8eede01c7be846e838495b7a50200d071a8714340a949acc60b63b7eff3dce370e5a64587cb3c26b38a5174344", 0x70, 0x1}], 0x0, &(0x7f0000000e40)={[{'@&%'}], [{@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa00, 0x2d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x170}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x88ca}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x800}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x2, 0xffff, 0x1, 0x6000, 0x2, 0x0]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x32}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) writev(r2, &(0x7f00000013c0)=[{&(0x7f0000001000)="b2ea2b5b1ffeda6f3a3e44fb09f2aa3769a9cb9a592b06511cabebdfed763c38edde6e55f93c09eac5cdf90ce81b211256e21e2cedf2a0e06d65804d8a7a0e29e61a14f9f8", 0x45}, {&(0x7f0000001080)="eab555e7180c38b5b70c0fb7c8d24223db89b8ed9070511e066cc9f9655494c53d68d9529f3b59f57e2ffe528e677e3d9cc0d42da7b4f86a5dd1281694f9c0e56df85837ce26b14ed88163b366d1dbdd0c95262665fddaf094be49c6a251224283cb269d9aac1523c92d708d55aefa9c93afafcc", 0x74}, {&(0x7f0000001100)='F6(', 0x3}, {&(0x7f0000001140)="5cfba641854cf694bca6c6f4887aa570073f9736a99afc5baa51e55afdbf7d7831f456ee1693f5209432a5c49e9a1b28c15c75afa32a6344544bf61a9b3d6af3f0c049d4c48254c9835d61fa9a1be87e5fd1308d4cefe279a3d55f7fbd0c389d76bbeb531422bd2965187d28abb7a6183c1daa0dc977549ad6fc3d8e3f280664374d1a308d738768128e42337bb4e059afeae37327848cf6737191326ace7bef6dea86673eefc95a7f6573601232260e8a9a7700350047310856637c1100184a290a7526aa6b94be", 0xc8}, {&(0x7f0000001240)="f5aabc051e732a8314da4212080f7b60e210e09fda0d70dfe2d09182dc879fdee2479f044be17b56ee0b9abcd26c43a1109ca536464b49bd2277f0fe4d713edd3089eaf9de2e21686c9e7ca12f712ec7494f4d2e030824cd869539aabbafe5fe37d1d8b090f85e0ba8c2aa1d360ca832a19f87ac2e38196e2db4e8f302e8e78ed054c1ee580c4ba0ac72d76bbf35309fde5a23203c8d490a557a3dc93e0ba56417011d22f097728b7a4bdcb13145d9a69b17d083272c7b27130d05f7546fb0bd7f4b295be7e33c812c5a1a3a150558402d5fd6d3df341e2422b8238e7fa1abda3bfd0427a6f6bf", 0xe7}, {&(0x7f0000001340)="1edd4097b85251ce672b6318745f44f942e963521aad469a3ded0aeb0978dba6f8f60fcc36ca010aa3b4b583e7143969c25b1f41c4326cf2c7a8721d304c689bbe22f22da5a64bac400459dfa7b8bfc85d3af8", 0x53}], 0x6) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000001440)={@id={0x2, 0x0, @auto="9cae58a07ff29e148e61c4d64ac7e1bf"}}) r5 = fsmount(r0, 0x1, 0x79) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 01:56:40 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x44004) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x58}}}}, [@NL80211_ATTR_TESTDATA={0x55, 0x45, "f661b9168eb8a1a3a12b8d33746f35786270ea928ea29e531f894e45de8d041efb09f7f60cdd7000890cdc20458b3d24f3135991f0ee32bc4e0e9f4163d761c70e205dbc6d3983c7fe05ba700cfde46c1b"}, @NL80211_ATTR_TESTDATA={0x83, 0x45, "b2027f28d6281bcecb74ba52d1769393ed5a2da3afe8fbbe4823702265bdf25cffc64ad68df1466e90bb9121f6a5c7af17c40870c9a805334eba9b2a485f6a4224f6bd30d45b644aadd5a04afd0d0e026414c476ee48c31a523a33fefc58717a32192a15632d7ebf29a1d5a7565753e98550b2c6c08a27af6d7ba6cd61ec75"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004010) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x1c4) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x13) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}, 0x20}, 0x1, 0x0, 0x0, 0x6044044}, 0x8000) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x440, 0x3f3, 0x100, 0x70bd28, 0x25dfdbfc, {0x4, 0x1, 0x6, [0x5, 0x20, 0x0, 0x1dd, 0x800, 0x0, 0x7fff, 0x1, 0x2, 0x25a, 0x0, 0x800, 0x7, 0x3ff, 0x0, 0x2, 0x5e, 0x5, 0x7, 0x89, 0x100, 0x0, 0x2, 0xca2, 0xb03b, 0x4, 0xff, 0x9, 0x6, 0x4, 0x541, 0x1000, 0xfffffffe, 0x2, 0x4, 0x8, 0xff, 0x7fff, 0x5, 0x2, 0x80000000, 0x10000, 0x0, 0x5, 0x2, 0x1f, 0x5, 0xfffffff8, 0x20, 0x1a80, 0x2000000, 0x1, 0x1, 0x7f3f7d43, 0x0, 0x5, 0x0, 0x9, 0x672, 0x1, 0x2, 0xe69, 0x749, 0xf7], [0x80000000, 0x5f548b73, 0x7, 0x5, 0x2, 0xfff, 0x80, 0x9e, 0x1, 0x100, 0x9, 0x0, 0x0, 0x4, 0xd7, 0x8, 0xe7ab, 0x8b, 0x0, 0x8000, 0x8, 0x3f, 0x7, 0x3, 0x9ee, 0x3, 0x7, 0x0, 0x6, 0x10000, 0x7, 0x1, 0x10001, 0xc77, 0x23, 0x6, 0x10001, 0x80000000, 0x800, 0x6, 0x400, 0x7fffffff, 0x0, 0x9, 0x0, 0x8, 0x8001, 0x4, 0x7, 0x11a, 0x6, 0x5, 0x800, 0x80, 0x8001, 0x9, 0x8, 0x19ea81f3, 0x8001, 0x7dfd8000, 0x2a, 0x8001, 0x3ff, 0x3], [0x1000100, 0x5, 0x0, 0x4, 0x200, 0xfff, 0x80000000, 0x6, 0x9, 0x3, 0x346, 0xbca, 0x7, 0xb61e, 0x2092, 0x3, 0x0, 0xee, 0x400, 0x401, 0x6, 0x3, 0xffff, 0x7cb6, 0x7ff, 0x1000, 0x7, 0x7, 0x1ff, 0x1cb9, 0x1ff, 0x7ff, 0x80, 0x6, 0x100, 0x8, 0x3, 0x80000001, 0x2, 0x40, 0x1ff, 0x1ff, 0x80e, 0x4, 0x4, 0x80000000, 0x3, 0x63, 0x101, 0x51c, 0x3, 0x5b5, 0x1000, 0x1, 0xff, 0x4, 0x3, 0x3e3, 0x3ff, 0x1, 0x1, 0x4, 0x40, 0x80000000], [0xdd0, 0x1ff, 0x9, 0x2, 0x6, 0x2, 0x3ff, 0x200, 0x9, 0x6, 0x9, 0x4cec, 0xaf, 0x7, 0x1000, 0x266c246, 0x8, 0x3, 0x604450e4, 0xff, 0x994d, 0x3, 0x0, 0x6, 0xba1, 0x9, 0x2, 0x0, 0xffff, 0xfffffffd, 0x2, 0xff, 0x7, 0x7, 0x6c8f0e7d, 0x80000000, 0x3, 0x7, 0x6, 0x6, 0x80000, 0xffffffc0, 0x3c, 0x0, 0xffffff01, 0x10000, 0xe6, 0xd, 0x5, 0x2, 0x20, 0x80, 0x9, 0xfffffffa, 0xd9300, 0x8000, 0xffffffe2, 0xfffffff8, 0x9, 0x5, 0x6, 0xa7, 0x6, 0x3], 0x1d, ['-{\x00', ':\x00', 'nl80211\x00', 'nl80211\x00', '\x00', '$+\'.-}\x00']}, ["", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r1, 0x311, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "873646650add7a5a7cc4971d1b560656"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x801) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) r3 = syz_io_uring_complete(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000bc0)={'IDLETIMER\x00'}, &(0x7f0000000c00)=0x1e) r4 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x4}}}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "d0f0a5b42a16"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "d73e32739c15978565b7"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "54f8e0a29b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x800c801}, 0x4804) r5 = signalfd4(r3, &(0x7f0000001380)={[0xfff]}, 0x8, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4841}, 0x20008000) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x20044001) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x560}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 01:56:40 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x28, 0x16}, 0x18) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080)={'team_slave_1', 0x32, 0x39}, 0xf) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x112, 0x5, 0x9, "afc7d7f8252bfcc3bb967b493552b66b", "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"}, 0x112, 0x1) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x256c, 0x6d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb6, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x1, 0x2b, 0x1, {0x22, 0x954}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x9, 0x9, 0x0, 0x40, 0x1}, 0x1f, &(0x7f00000002c0)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x1, 0x2, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x2, 0xf00f, 0x4c2}, @ptm_cap={0x3}]}, 0x9, [{0xed, &(0x7f0000000300)=@string={0xed, 0x3, "0fb9343eb4367b663ed8145e609624d3c7ce16b68bc41e8c683b97663c2f1c14808b0363b85edd60c16583c3fee62d9eb5fe9a7824a0816f473ea803f8dc41accd9706f301a670e7c68910bec588a7b7f36516955d3321c97f74f1193e3f7526233b7ba0e468027491efa2cdf5e508c08159a5babe75cbd8e6a5ecd2e8fcc94008c9ffc9e1e1d950c1f8b7baa492d4b52bf07b14bebdae28a0be3c0196fde7ffd1fe42e47f0b542040b74d1ccd1d3b77fb0ed6b61ff385dc52fcbd51e62a8547c075aa7408743172c6762ce7f4c1403b84b3a964bcac9bfdbf1a49d140694eadcab4f4c841f96f1861fde2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2409}}, {0xb9, &(0x7f00000004c0)=@string={0xb9, 0x3, "a6114a01cea1fa51520ebb552b9440619a7cf64b451da97f3e78e61e7ec75664313d876309694a26b042f96302bd18e76b10f2cd6df54de461e52e9a12260da8d2ed247d6f9592c3648c344ce626b152b5a2e5a926ef5d87eea56960db7546dd290f00346dfd40da3a242e09a4d748c0de100cabdb0da1e67a04eba49e2bd44092237ea5217bd3cbb3cbd804996accacdc5e9c663b0ee7b37a84845ef4a3f1de0ee0905bd7e71635ae5b1fd6a3c99d09fc0f504602e75b"}}, {0xb4, &(0x7f0000000580)=@string={0xb4, 0x3, "d7bd2490a24fbe3c43b07fee9203af7735b67fd9ad0fa4af6800214d3f76e7f8b7463243a95ce3cf4fd4a12d7c1a6c645735860000d522802d39258df0da1352334fd92149dcb97a1df2065691cf88a42229f547bc0c6b98ef4d9b50096435f1d2b661396685edce87440bb449188c3dc59fa6a346455cc1dab2e4bfe0692d2dbff6a54c2ea6b82d21af47da0ef6ee65db54016632393b5d54a462db27a0e9301bf6e0e59169d8600f65c771e54e3c8d34a2"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xfcff}}, {0x46, &(0x7f0000000680)=@string={0x46, 0x3, "76534b1d25624b24976eea0c9c7224a978eb1943542a6eb9b6c4ff1469b97ccfaca719b16701d3a0de040c4d0198f8713f0c2c15e70907736c13b225575b084fed9a95fc"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x425}}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x8849) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0xd9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x12) mkdir(&(0x7f0000000a40)='./file0\x00', 0x40) write$binfmt_elf64(r2, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1f, 0x8, 0x7, 0x5, 0x2, 0x3e, 0x2, 0x145, 0x40, 0x21e, 0x3, 0x5, 0x38, 0x1, 0x1, 0x9, 0x1}, [{0x70000000, 0xdc7d, 0xffffffff, 0x8001, 0x8, 0x5, 0xffff, 0x5}, {0x6474e551, 0x200, 0x3, 0xffffffff80000000, 0x4, 0x4, 0xffffffff, 0x2}], "c0468ee9c3f1790e25413a4ee9bb1d013230d834c5e35efc9f26f88c9ccf0ceec000ff97a512efd65e81c656ef2fc46bbc4caf6074e89d2c03033e1ef6ddbd5f9a136781f2815d6e75db70f2edd910718f53708e076d05ffc9a0a2ecb3889af3af7304f4ac38ca65385f1f9a5f8643abad90b4e4152b579a9fff191fd4c7cb2696bd0050553d62896d2e1f7609325afb2d4dbbf6ddf3906dc9db534868994c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa4f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000001800)={&(0x7f0000001700)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001780)="e747d9a4c0f40df27b8113", 0xb}], 0x1}, 0x941) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x10000000) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001ac0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r1) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x40, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x12}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400000, {0x80, 0x9, 0x200, 0x3b}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000805) 01:56:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x10000040) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20040000) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000340)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x90}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x20000800}, 0x44040) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000005c0)={0x54, 0x9, 0x1, {0xb25a, 0xfff}, {0x4, 0x4}, @ramp={0x3, 0x6, {0xf8c3, 0x4, 0xfffc, 0xfffd}}}) r4 = openat$incfs(r0, &(0x7f0000000600)='.pending_reads\x00', 0x140, 0x10) write$P9_RMKDIR(r4, &(0x7f0000000640)={0x14, 0x49, 0x1, {0x4, 0x0, 0x1}}, 0x14) fcntl$lock(r1, 0x25, &(0x7f0000000680)={0x1, 0x1, 0x80, 0x8a16, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3f8, 0x1, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x44000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1b0, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8050}, 0x4000805) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000f40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x438, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_NAN_FUNC={0x3f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SRF={0x44, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x20}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x39c, 0xe, 0x0, 0x1, [{0x27, 0x0, "359285c004138e8e2029f46592c2764ecaf3cfaa81830ab5ed1280cc309e364afe02e2"}, {0x87, 0x0, "d5d770c2fc2bc60724323b73e6e6d11e8ad012a50a2c8f711dc5605b10e96c56c43b32226f11baa7644a3787f6f439491a633c9791a71589ad14868a801f70bff4249294f5b53a6a37c0ca65d647688c8e596787136fa64d47f78f3e28ac3d1c2b882e9fd807bdc7c701fdffcd877904aec840218fafef1049033f7cf5325186eaf677"}, {0xdc, 0x0, "36d98dbed2b474bd9dcc5f311940d5237588f146bbd720f9a92e851aa3b2a6946a6686e588f42a95416b0fdd4153f7a8f212c9c9bb1af5486b233059a41ffdf45706dfcdf745d58a94e5268dff4be5bb9951246359c804cd16e7d850675159bc3a9526e44938475dcbe6cd008daa5402d75b7e22c2e9ca2083d2153d385403d4da5591c46c441ae399afffbd1443de2521457fd315d0e3a71ad91f8170455eb75353257fef624df846fc6a3e37134a70063b49187236891ca59d3fcd1900da0a32df3b6c42d41358d087fe8b0cec54b38a385ed88083abab"}, {0xb9, 0x0, "619f7151a6ec7a3b4e5ca732fee7f1c1c0a722568d4038cc3a959d0314df63f4a7a42f9532b7b87be311def1291c1e14d4dc01f0d636a43f87b49a8190591b75b2897ff85ebee30eab44726b8912bfe68cd5545c603cdf52f8ce418c47109c92b608257d9dea85e88cf80537727478acd9d73553ca054408062bfb04f3193b58a2269a5e76431b113d86e4004a2cda394a22eb011a710104bd806ce662fcc79cbba8e987c2b5c545eed3cd24c34bb31f628dfd9a05"}, {0x78, 0x0, "e82da27d3a33fc4d6fa6a077cabae91e1b985c6a6c960e68944ad81429927df16d223b61fc01ae621564d5e6cb9c7dec772f266a6f6c4f4ad90c141328b1ed57e82f4049fbb7d2f379e6c6ab45bf52a2357c3e8abf3a44d3bd36b102fd64a7a521e3642156027c680c6d8d14362d0583af0040ab"}, {0x55, 0x0, "441cbc37d8eca2060284be12d44e3e14c2bb3c0ceca71343f3e8186d8b1b00d177879de68f4bc870fb9a28ebc6a4539d56595f0a66cbfd7d0acd68a04b81c75228bc19e0b83913e2fcaf479f21ffb20e0e"}, {0x80, 0x0, "c4c8c86424327b2dc69c2350bcfef2323630128665d08cdfde8c5287fff9f52f52c1d7f63f3e1a93649bfc508c71e03a373ef0551defd31c57e50379d352f1f7d008cd532f7d8518b8e6c0ca04d192beb6340370acd2bdf0caa32970bc5d62dadabc54ef3cefa756b13970e2f8a8b4679e6f4a4563a2c46f24242f9e"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x438}}, 0x4000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x808) 01:56:40 executing program 4: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "b5da589651c6d120", "35b558e2ff939d815cdb70b7e75d40e6", "76fbfb82", "c6ce085a47ae4c77"}, 0x28) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x4000000) socketpair(0x0, 0x2, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x4, 0x3f}]}, 0xc, 0x1) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8804) r3 = syz_open_pts(r2, 0x89ab35f84aa157a4) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000003c0)=0x5) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x8000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x0, 0x0) getsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000540), &(0x7f0000000580)=0x4) r5 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000600)=0x1c) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000640)=0x3) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000680)) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x20, 0x34, @random="497b4cd7e5c21146dd4b1482d94bc7ae989f342d7eae3c7f0ac3ec1a"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f1f}, @NL80211_ATTR_IE={0x29, 0x2a, [@rann={0x7e, 0x15, {{}, 0x0, 0x1, @broadcast, 0x6, 0x8, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000840)) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000880)={0x0, @adiantum, 0x0, @desc1}) [ 87.302136] audit: type=1400 audit(1737511000.675:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:56:40 executing program 5: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x1e89f) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xc8, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7ff}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000006}, 0x80) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000016c0), &(0x7f0000001700)={'U+', 0x6}, 0x16, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001740)={0x0, @remote, @multicast1}, &(0x7f0000001780)=0xc) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) rename(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)='./file0\x00') sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x74a273ee1b05e744}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xb4, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x18d}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = dup(r1) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f00000019c0)={0x2, 0x8, 0x5, 0x2, @msf={0x6a, 0x5, 0x20}, 0x86}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000001a00)) pipe(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x5c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x18}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48050}, 0x4010000) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setflags(r5, 0x2, 0x0) 01:56:40 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, @llc={0x1a, 0x319ca95e33ea6e52, 0x0, 0x7, 0x0, 0x1f}, @isdn={0x22, 0x1f, 0x0, 0x3, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x6dc, &(0x7f0000000040)='xfrm0\x00', 0x101, 0xbd, 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000001c0)={0x1, 0x7}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000240)={{r2}, 0x3, &(0x7f0000000200)=[0x70, 0x8, 0x9], 0xa931, 0x5, [0x7, 0x100000000, 0xf0, 0x7ff]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20020880) write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x4, 0xf0, 0x36e, 0x36e, 0x4, 0x3c1, 0x8}, "2e02e2ceb9c67c7de691d608d8b0fb60006ec447a56af53f903cf37cacdb10261d581f4f66f835941a77dd28c86ce0e7b4071c8173c3aab6fd91386f4a5711251718d4bb2d20", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa66) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000e80)=0x5, &(0x7f0000000ec0)=0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00), 0x40000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000f40)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000010c0)={&(0x7f0000000f80), 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r6, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2400, 0x62}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001140)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000012c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000014c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x17c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 01:56:40 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x50e434c9]}, 0x8, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'batadv_slave_1\x00', {0x80000000}, 0x8}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x1, 0xfffffffffffff59b}) r2 = syz_open_pts(0xffffffffffffffff, 0x101) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000180)={0xf3f3, 0xdb9, 0xf001}) fadvise64(r2, 0x400, 0x6, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0xd9e4f000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/cgroup', 0x2a40, 0x11c) syncfs(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/warn_count', 0x400400, 0x2) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x5, 0x1, 0x1f, 0x8001}, {0x535, 0xd5, 0x9, 0x417}, {0x1, 0xe8, 0xff, 0x4}, {0xf731, 0x0, 0x45, 0x668}, {0x5, 0x1, 0x0, 0x6}, {0x3, 0xff, 0xa1, 0x6dd}, {0x8, 0x9d, 0x7, 0x41f6}]}) r6 = accept4$packet(r1, 0x0, &(0x7f0000000300), 0x800) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x3) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)=""/167, &(0x7f0000000480)=0xa7) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000004c0)) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) [ 88.692701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.697480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.700455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.708557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.712089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.715724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.879381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.886370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.890264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.897409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.901007] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.903554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.905798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.920762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.925210] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.932300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.939335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.943249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.015107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.037608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.046017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.058329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.086626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.099352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.106188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.107577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.153021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.173492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.179247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.188363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.203591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.205490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.224198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.228504] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.229113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.229805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.231672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.238260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.266435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.284890] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.285173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.290635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.302606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.316262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.316651] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.334188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.345357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.348524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.776426] Bluetooth: hci0: command tx timeout [ 90.968401] Bluetooth: hci1: command tx timeout [ 90.968443] Bluetooth: hci2: command tx timeout [ 91.225041] Bluetooth: hci3: command tx timeout [ 91.353004] Bluetooth: hci5: command tx timeout [ 91.416970] Bluetooth: hci7: command tx timeout [ 91.417303] Bluetooth: hci6: command tx timeout [ 91.417466] Bluetooth: hci4: command tx timeout [ 92.824073] Bluetooth: hci0: command tx timeout [ 93.016147] Bluetooth: hci2: command tx timeout [ 93.017153] Bluetooth: hci1: command tx timeout [ 93.272249] Bluetooth: hci3: command tx timeout [ 93.401981] Bluetooth: hci5: command tx timeout [ 93.464281] Bluetooth: hci4: command tx timeout [ 93.464321] Bluetooth: hci6: command tx timeout [ 93.464476] Bluetooth: hci7: command tx timeout [ 94.872001] Bluetooth: hci0: command tx timeout [ 95.065004] Bluetooth: hci2: command tx timeout [ 95.065094] Bluetooth: hci1: command tx timeout [ 95.320055] Bluetooth: hci3: command tx timeout [ 95.448203] Bluetooth: hci5: command tx timeout [ 95.512072] Bluetooth: hci6: command tx timeout [ 95.512705] Bluetooth: hci7: command tx timeout [ 95.513400] Bluetooth: hci4: command tx timeout [ 96.920159] Bluetooth: hci0: command tx timeout [ 97.112070] Bluetooth: hci1: command tx timeout [ 97.112177] Bluetooth: hci2: command tx timeout [ 97.368184] Bluetooth: hci3: command tx timeout [ 97.496013] Bluetooth: hci5: command tx timeout [ 97.561134] Bluetooth: hci6: command tx timeout [ 97.561172] Bluetooth: hci4: command tx timeout [ 97.561243] Bluetooth: hci7: command tx timeout [ 148.823803] syz-executor.7 (286) used greatest stack depth: 23248 bytes left [ 151.141485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.146827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.149137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.157150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.160276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.165322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.212148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.214646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.217124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.225792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.228940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.231676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.269230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.280705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.283133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.289429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.294183] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.306216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.359636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.362205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.365371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.376605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.385582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.387467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.421857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.422775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.424272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.435166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.436292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.448293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.449422] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.450201] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.450566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.473769] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.525176] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.534774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.597113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.599442] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.602534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.604639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.609183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.614700] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.616800] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.618662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.626277] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.690217] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.714242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.725223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.240156] Bluetooth: hci0: command tx timeout [ 153.304066] Bluetooth: hci1: command tx timeout [ 153.368066] Bluetooth: hci2: command tx timeout [ 153.496142] Bluetooth: hci3: command tx timeout [ 153.496212] Bluetooth: hci4: command tx timeout [ 153.687994] Bluetooth: hci6: command tx timeout [ 153.688085] Bluetooth: hci5: command tx timeout [ 153.816018] Bluetooth: hci7: command tx timeout [ 155.288087] Bluetooth: hci0: command tx timeout [ 155.353908] Bluetooth: hci1: command tx timeout [ 155.416015] Bluetooth: hci2: command tx timeout [ 155.544067] Bluetooth: hci3: command tx timeout [ 155.544971] Bluetooth: hci4: command tx timeout [ 155.736010] Bluetooth: hci6: command tx timeout [ 155.737641] Bluetooth: hci5: command tx timeout [ 155.864045] Bluetooth: hci7: command tx timeout [ 157.336935] Bluetooth: hci0: command tx timeout [ 157.400047] Bluetooth: hci1: command tx timeout [ 157.464665] Bluetooth: hci2: command tx timeout [ 157.592066] Bluetooth: hci4: command tx timeout [ 157.592087] Bluetooth: hci3: command tx timeout [ 157.785166] Bluetooth: hci5: command tx timeout [ 157.785197] Bluetooth: hci6: command tx timeout [ 157.913943] Bluetooth: hci7: command tx timeout [ 159.384044] Bluetooth: hci0: command tx timeout [ 159.449047] Bluetooth: hci1: command tx timeout [ 159.511964] Bluetooth: hci2: command tx timeout [ 159.640017] Bluetooth: hci3: command tx timeout [ 159.641290] Bluetooth: hci4: command tx timeout [ 159.834046] Bluetooth: hci6: command tx timeout [ 159.834147] Bluetooth: hci5: command tx timeout [ 159.961944] Bluetooth: hci7: command tx timeout [ 213.151501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.153392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.155050] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.161389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.163524] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.164823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.350057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.354016] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.358345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.364471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.365251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.372272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.375047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.384341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.399236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.417064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.421097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.422240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.448628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.455026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.455339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.458765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.461967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.462800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.469956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.478609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.478794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.482105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.484776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.493609] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.493660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.499338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.499607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.506396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.510300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.527326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.528028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.582411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.584040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.584355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.586708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.589090] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.596423] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.596744] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.604468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.612062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.641143] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.645219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.192019] Bluetooth: hci0: command tx timeout [ 215.450031] Bluetooth: hci3: command tx timeout [ 215.512000] Bluetooth: hci1: command tx timeout [ 215.578984] Bluetooth: hci2: command tx timeout [ 215.640328] Bluetooth: hci5: command tx timeout [ 215.704105] Bluetooth: hci6: command tx timeout [ 215.768095] Bluetooth: hci7: command tx timeout [ 215.768514] Bluetooth: hci4: command tx timeout [ 217.240898] Bluetooth: hci0: command tx timeout [ 217.496014] Bluetooth: hci3: command tx timeout [ 217.562039] Bluetooth: hci1: command tx timeout [ 217.623935] Bluetooth: hci2: command tx timeout [ 217.687972] Bluetooth: hci5: command tx timeout [ 217.752061] Bluetooth: hci6: command tx timeout [ 217.815976] Bluetooth: hci7: command tx timeout [ 217.816055] Bluetooth: hci4: command tx timeout [ 219.287972] Bluetooth: hci0: command tx timeout [ 219.544698] Bluetooth: hci3: command tx timeout [ 219.607943] Bluetooth: hci1: command tx timeout [ 219.671958] Bluetooth: hci2: command tx timeout [ 219.736062] Bluetooth: hci5: command tx timeout [ 219.801902] Bluetooth: hci6: command tx timeout [ 219.863960] Bluetooth: hci4: command tx timeout [ 219.864052] Bluetooth: hci7: command tx timeout [ 221.336174] Bluetooth: hci0: command tx timeout [ 221.592105] Bluetooth: hci3: command tx timeout [ 221.656315] Bluetooth: hci1: command tx timeout [ 221.720083] Bluetooth: hci2: command tx timeout [ 221.785899] Bluetooth: hci5: command tx timeout [ 221.847924] Bluetooth: hci6: command tx timeout [ 221.912632] Bluetooth: hci7: command tx timeout [ 221.912711] Bluetooth: hci4: command tx timeout [ 273.465916] [ 273.466167] ====================================================== [ 273.466758] WARNING: possible circular locking dependency detected [ 273.467352] 6.13.0-next-20250121 #1 Not tainted [ 273.467802] ------------------------------------------------------ [ 273.468835] kworker/u8:0/11 is trying to acquire lock: [ 273.470206] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.472441] [ 273.472441] but task is already holding lock: [ 273.473782] ffff888029e58768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 273.476161] [ 273.476161] which lock already depends on the new lock. [ 273.476161] [ 273.477812] [ 273.477812] the existing dependency chain (in reverse order) is: [ 273.479435] [ 273.479435] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 273.481101] __mutex_lock+0x13d/0xb50 [ 273.481738] wiphy_register+0x1b2e/0x25d0 [ 273.482411] ieee80211_register_hw+0x23a4/0x3d60 [ 273.483148] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 273.483928] init_mac80211_hwsim+0x389/0x870 [ 273.484648] do_one_initcall+0xf9/0x640 [ 273.485300] kernel_init_freeable+0x53d/0x7a0 [ 273.486023] kernel_init+0x1e/0x2d0 [ 273.486601] ret_from_fork+0x48/0x80 [ 273.487194] ret_from_fork_asm+0x1a/0x30 [ 273.487856] [ 273.487856] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.488697] __lock_acquire+0x29fd/0x4580 [ 273.489359] lock_acquire+0x19b/0x520 [ 273.489976] __mutex_lock+0x13d/0xb50 [ 273.490600] unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.491445] unregister_netdevice_queue+0x224/0x2e0 [ 273.492201] _cfg80211_unregister_wdev+0x57b/0x700 [ 273.492962] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 273.493726] ieee80211_unregister_hw+0x55/0x3a0 [ 273.494448] hwsim_exit_net+0x3a0/0x730 [ 273.495084] ops_exit_list+0xb3/0x180 [ 273.495693] cleanup_net+0x546/0xad0 [ 273.496297] process_one_work+0x8ee/0x1a10 [ 273.496985] worker_thread+0x674/0xe70 [ 273.497640] kthread+0x3ab/0x720 [ 273.498213] ret_from_fork+0x48/0x80 [ 273.498791] ret_from_fork_asm+0x1a/0x30 [ 273.499454] [ 273.499454] other info that might help us debug this: [ 273.499454] [ 273.500466] Possible unsafe locking scenario: [ 273.500466] [ 273.501240] CPU0 CPU1 [ 273.501850] ---- ---- [ 273.502460] lock(&rdev->wiphy.mtx); [ 273.503016] lock(rtnl_mutex); [ 273.503801] lock(&rdev->wiphy.mtx); [ 273.504647] lock(rtnl_mutex); [ 273.505131] [ 273.505131] *** DEADLOCK *** [ 273.505131] [ 273.505921] 4 locks held by kworker/u8:0/11: [ 273.506514] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 273.507887] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 273.509238] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 273.510348] #3: ffff888029e58768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 273.511377] [ 273.511377] stack backtrace: [ 273.511820] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250121 #1 [ 273.512616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 273.513386] Workqueue: netns cleanup_net [ 273.513811] Call Trace: [ 273.514064] [ 273.514289] dump_stack_lvl+0xca/0x120 [ 273.514703] print_circular_bug+0x47b/0x750 [ 273.515142] check_noncircular+0x2e9/0x3c0 [ 273.515566] ? __pfx_check_noncircular+0x10/0x10 [ 273.516038] ? srso_return_thunk+0x5/0x5f [ 273.516469] ? hlock_class+0x4e/0x130 [ 273.516849] ? srso_return_thunk+0x5/0x5f [ 273.517280] ? arch_scale_cpu_capacity+0x17/0xa0 [ 273.517762] ? lockdep_lock+0xba/0x1b0 [ 273.518173] ? __pfx_lockdep_lock+0x10/0x10 [ 273.518622] ? srso_return_thunk+0x5/0x5f [ 273.519058] __lock_acquire+0x29fd/0x4580 [ 273.519487] ? srso_return_thunk+0x5/0x5f [ 273.519921] ? __pfx___lock_acquire+0x10/0x10 [ 273.520376] ? srso_return_thunk+0x5/0x5f [ 273.520804] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.521325] ? srso_return_thunk+0x5/0x5f [ 273.521770] lock_acquire+0x19b/0x520 [ 273.522160] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.522739] ? __pfx_lock_acquire+0x10/0x10 [ 273.523176] ? srso_return_thunk+0x5/0x5f [ 273.523611] ? lock_release+0x20f/0x6f0 [ 273.524023] ? srso_return_thunk+0x5/0x5f [ 273.524452] ? lock_is_held_type+0x9e/0x120 [ 273.524910] __mutex_lock+0x13d/0xb50 [ 273.525313] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.525896] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.526468] ? srso_return_thunk+0x5/0x5f [ 273.526908] ? synchronize_rcu_expedited+0x38a/0x420 [ 273.527406] ? __pfx___mutex_lock+0x10/0x10 [ 273.527851] ? __pfx_autoremove_wake_function+0x10/0x10 [ 273.528388] ? srso_return_thunk+0x5/0x5f [ 273.528817] ? kasan_quarantine_put+0x84/0x1e0 [ 273.529295] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 273.529752] ? srso_return_thunk+0x5/0x5f [ 273.530187] unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.530739] ? __virt_addr_valid+0x2e8/0x5d0 [ 273.531204] ? __pfx_lock_release+0x10/0x10 [ 273.531638] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 273.532229] ? find_held_lock+0x2c/0x110 [ 273.532658] ? srso_return_thunk+0x5/0x5f [ 273.533091] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 273.533609] ? srso_return_thunk+0x5/0x5f [ 273.534052] ? lock_release+0x20f/0x6f0 [ 273.534455] ? __pfx_lock_release+0x10/0x10 [ 273.534890] ? srso_return_thunk+0x5/0x5f [ 273.535324] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.535843] ? srso_return_thunk+0x5/0x5f [ 273.536282] unregister_netdevice_queue+0x224/0x2e0 [ 273.536775] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 273.537313] ? up_write+0x195/0x520 [ 273.537707] _cfg80211_unregister_wdev+0x57b/0x700 [ 273.538210] ? srso_return_thunk+0x5/0x5f [ 273.538644] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 273.539144] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 273.539692] ? srso_return_thunk+0x5/0x5f [ 273.540126] ? srso_return_thunk+0x5/0x5f [ 273.540560] ? synchronize_rcu+0x1ff/0x260 [ 273.540997] ieee80211_unregister_hw+0x55/0x3a0 [ 273.541468] hwsim_exit_net+0x3a0/0x730 [ 273.541883] ? __pfx_hwsim_exit_net+0x10/0x10 [ 273.542333] ? srso_return_thunk+0x5/0x5f [ 273.542767] ? netdev_run_todo+0x788/0x1040 [ 273.543209] ? __pfx_hwsim_exit_net+0x10/0x10 [ 273.543661] ops_exit_list+0xb3/0x180 [ 273.544053] cleanup_net+0x546/0xad0 [ 273.544439] ? __pfx_cleanup_net+0x10/0x10 [ 273.544878] process_one_work+0x8ee/0x1a10 [ 273.545326] ? __pfx_lock_acquire+0x10/0x10 [ 273.545765] ? __pfx_process_one_work+0x10/0x10 [ 273.546250] ? srso_return_thunk+0x5/0x5f [ 273.546689] ? move_linked_works+0x172/0x270 [ 273.547139] ? srso_return_thunk+0x5/0x5f [ 273.547569] ? assign_work+0x196/0x240 [ 273.547984] worker_thread+0x674/0xe70 [ 273.548397] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.548924] ? __pfx_worker_thread+0x10/0x10 [ 273.549383] kthread+0x3ab/0x720 [ 273.549753] ? __pfx_kthread+0x10/0x10 [ 273.550164] ? srso_return_thunk+0x5/0x5f [ 273.550597] ? finish_task_switch.isra.0+0x206/0x840 [ 273.551103] ? __pfx_kthread+0x10/0x10 [ 273.551511] ret_from_fork+0x48/0x80 [ 273.551883] ? __pfx_kthread+0x10/0x10 [ 273.552289] ret_from_fork_asm+0x1a/0x30 [ 273.552727] [ 273.599743] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 275.100662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.102711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.104243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.110259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.114823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.130894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.188296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.192344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.194607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.207021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.214621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.217639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.252606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.253191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.253639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.271831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.274568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.278082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.319021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.343053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.369186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.372555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.383232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.385022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.389960] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.391985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.392305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.413993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.414721] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.415153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.455571] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.482246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.515485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.532470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.542477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.547227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.687784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.690262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.711157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.711620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.755171] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.756547] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.769135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.770149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.770741] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.771173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.781211] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.784928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.144220] Bluetooth: hci0: command tx timeout [ 277.271924] Bluetooth: hci1: command tx timeout [ 277.335930] Bluetooth: hci2: command tx timeout [ 277.465889] Bluetooth: hci4: command tx timeout [ 277.465960] Bluetooth: hci3: command tx timeout [ 277.722881] Bluetooth: hci5: command tx timeout [ 277.847939] Bluetooth: hci6: command tx timeout [ 277.912158] Bluetooth: hci7: command tx timeout [ 279.191927] Bluetooth: hci0: command tx timeout [ 279.320884] Bluetooth: hci1: command tx timeout [ 279.383966] Bluetooth: hci2: command tx timeout [ 279.511921] Bluetooth: hci3: command tx timeout [ 279.511949] Bluetooth: hci4: command tx timeout [ 279.769901] Bluetooth: hci5: command tx timeout [ 279.895915] Bluetooth: hci6: command tx timeout [ 279.960901] Bluetooth: hci7: command tx timeout [ 281.242034] Bluetooth: hci0: command tx timeout [ 281.368927] Bluetooth: hci1: command tx timeout [ 281.432062] Bluetooth: hci2: command tx timeout [ 281.560890] Bluetooth: hci4: command tx timeout [ 281.560919] Bluetooth: hci3: command tx timeout [ 281.815941] Bluetooth: hci5: command tx timeout [ 281.943893] Bluetooth: hci6: command tx timeout [ 282.007904] Bluetooth: hci7: command tx timeout [ 283.288889] Bluetooth: hci0: command tx timeout [ 283.416080] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 01:59:47 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283eb10 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb30 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000001 R11=3038383866666666 R12=ffffffff886990b0 R13=ffff8880095dee28 R14=ffffffff88699320 R15=0000000000000000 RIP=ffffffff8283eb65 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005559ba80d000 CR3=000000000e6e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041112c8000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800dd91bc0 RBX=ffff8880377b2bd8 RCX=ffffffff81429a4a RDX=1ffff11001ba4480 RSI=0000000000000008 RDI=ffff88800dd22400 RBP=0000000000000000 RSP=ffff88800be27dd0 R8 =0000000000000000 R9 =ffffed1001ba4480 R10=ffff88800dd22407 R11=ffff88800dd92078 R12=ffff8880377b2ff9 R13=ffff888015d18378 R14=ffff88800dd91bc0 R15=0000000000000086 RIP=ffffffff81aef85a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005600cd58aff8 CR3=000000000e6e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000004257fa0ff5638000 XMM02=00000000000000003fd953f18ac72dcb XMM03=000000c0002aa190000000c00000e448 XMM04=000000c00000e268000000c00000e348 XMM05=000000c00000e398000000c00000e320 XMM06=000000c00000e510000000c00000e3a8 XMM07=000000c00000e5d8000000c00000e560 XMM08=000000c00000e298000000c00000e280 XMM09=000000c00000e430000000c00000e3b8 XMM10=000000c00000e2c0000000c00000e5b0 XMM11=000000c00000e348000000c00000e308 XMM12=000000c00000e320000000c00000e268 XMM13=000000c00000e3a8000000c00000e398 XMM14=000000c00000e560000000c00000e510 XMM15=000000c00000e600000000c00000e5d8