Warning: Permanently added '[localhost]:47726' (ECDSA) to the list of known hosts.
2025/01/22 02:03:49 fuzzer started
2025/01/22 02:03:50 dialing manager at localhost:44689
syzkaller login: [   67.540327] cgroup: Unknown subsys name 'net'
[   67.750653] cgroup: Unknown subsys name 'cpuset'
[   67.806369] cgroup: Unknown subsys name 'rlimit'
[   73.931463] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   85.088104] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/22 02:04:09 syscalls: 2217
2025/01/22 02:04:09 code coverage: enabled
2025/01/22 02:04:09 comparison tracing: enabled
2025/01/22 02:04:09 extra coverage: enabled
2025/01/22 02:04:09 setuid sandbox: enabled
2025/01/22 02:04:09 namespace sandbox: enabled
2025/01/22 02:04:09 Android sandbox: enabled
2025/01/22 02:04:09 fault injection: enabled
2025/01/22 02:04:09 leak checking: enabled
2025/01/22 02:04:09 net packet injection: enabled
2025/01/22 02:04:09 net device setup: enabled
2025/01/22 02:04:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/22 02:04:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/22 02:04:09 USB emulation: enabled
2025/01/22 02:04:09 hci packet injection: enabled
2025/01/22 02:04:09 wifi device emulation: enabled
2025/01/22 02:04:09 802.15.4 emulation: enabled
2025/01/22 02:04:09 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/22 02:04:09 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/22 02:04:09 fetching corpus: 0, signal 0/5749 (executing program)
2025/01/22 02:04:09 fetching corpus: 0, signal 0/5749 (executing program)
2025/01/22 02:04:12 starting 8 fuzzer processes
02:04:12 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
ioctl$RTC_AIE_OFF(r0, 0x7002)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='fdinfo/4\x00', &(0x7f0000000080)="7c56bfefa209f60f8859e0079073f71457074c076dad1dd49b7e3f5be8b7e370c6ca70f545ccdb6294da661a2a0e84c63f01c17b164a730cb2f7d082b7278218223c0d040e4c48e99b236a916d4ada7ad4f9c1b42fb446c09677e3c2174aa97026818eec65abc2ad", 0x68)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', <r1=>0x0, 0x7, 0x8, 0x3, 0x9, {{0x17, 0x4, 0x2, 0x7, 0x5c, 0x68, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@rr={0x7, 0x13, 0x3c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @local, @broadcast]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2e, 0x2, [{0x6, 0xd, "a1bac412187e3edd70f4b1"}, {0x4, 0xc, "ed9220051bc9ddc03868"}, {0x7, 0xf, "515974e10731260469303641c3"}]}]}}}}})
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x90501)
socketpair(0x11, 0xa, 0xfff, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000240)={@desc={0x1, 0x0, @desc4}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000340)={@empty, <r6=>0x0}, &(0x7f0000000380)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000000540)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000580)=0x28)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r9=>r2, {0xfffffffffffff8e2}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x18f3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xef9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x24000040)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x800, 0x0, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40000041)
getsockopt$sock_timeval(r2, 0x1, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x10)
bind$inet(r9, &(0x7f0000000b80)={0x2, 0x4e21, @remote}, 0x10)
sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x22400020}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_QUOTA={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)

02:04:12 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8f5, 0xa0102)
write$P9_RLERROR(r0, &(0x7f0000000040)={0xe, 0x7, 0x2, {0x5, '(\xbc*.*'}}, 0xe)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080))
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x4, 0x7, 0x39fd592f, 0x400], @devid})
write$cgroup_subtree(r0, &(0x7f00000010c0)={[{0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x0, 'rlimit'}, {0x2b, 'cpuset'}, {0x2d, 'rlimit'}, {0x2d, 'pids'}]}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001100))
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000011c0)={0x1, 0x4, 0x65, &(0x7f0000001140)=""/101})
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000001200))
lstat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
write$P9_RGETATTR(r0, &(0x7f0000001300)={0xa0, 0x19, 0x1, {0xc88, {0x20, 0x3, 0x8}, 0x40, r1, 0xffffffffffffffff, 0x7, 0x1ff, 0xb2, 0xa3, 0x7ff, 0x5, 0x9, 0xc73, 0x5, 0x20e, 0x7, 0x10001, 0x8, 0x6, 0x4}}, 0xa0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb62, 0x21}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a80)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000002b80)=0xe8)
recvmmsg$unix(r0, &(0x7f00000088c0)=[{{&(0x7f0000002bc0), 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002c40)=""/52, 0x34}, {&(0x7f0000002c80)=""/58, 0x3a}, {&(0x7f0000002cc0)=""/86, 0x56}, {&(0x7f0000002d40)=""/25, 0x19}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/209, 0xd1}], 0x6, &(0x7f0000003f00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003f80), 0x6e, &(0x7f00000061c0)=[{&(0x7f0000004000)=""/56, 0x38}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)}, {&(0x7f0000006080)}, {&(0x7f00000060c0)=""/215, 0xd7}], 0x6}}, {{&(0x7f0000006240), 0x6e, &(0x7f0000008700)=[{&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/182, 0xb6}, {&(0x7f0000007380)=""/147, 0x93}, {&(0x7f0000007440)=""/5, 0x5}, {&(0x7f0000007480)=""/156, 0x9c}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/162, 0xa2}, {&(0x7f0000008600)=""/228, 0xe4}], 0x8, &(0x7f0000008780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x3, 0x2000, 0x0)
lstat(&(0x7f0000008980)='\x00', &(0x7f00000089c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x6, 0x7, &(0x7f00000029c0)=[{&(0x7f0000001540)="4d231389e35cc9e5f13b86eda4072890a5d90e24135677d7c26358a3ceb3583d20b6e5047367509a5d6afed475bc8f420a8a92f590b13e42a322c5a9b366952fac752a26cada11bc7283d617e880379cffb4d75ee604d399bb31b2cb67e486ac2ebfb5a88e5854a02a9b7ab8d34e4477e50452df62a1af5f20063a1e8f4410b9bb4b36fd94abc8cb0669b9dabcc48952c441c55e42aafdeec2b82ea46674d4571317ccfd085c7fab4ef1ccc2a0402cd078f69599bf9a20", 0xb7, 0x101}, {&(0x7f0000001600)="fa1319809114259c12419d778556133366d66e6f27973682ef7bf7754503d9eb34eab1262edb914ac83df5840265b8b39dfeaf5bbc77a866a7a1fd9cfdb2df4e652e1776c13dbdcba07bbcde547adfe545bc801f22525b1d21b0fe52f0fdeada5f1f0d64", 0x64, 0x1}, {&(0x7f0000001680)="b957ae40f068ed09ef8137fdd3e9175566dedb215656b493b50b82a1ad6d9bd2b8de52f6ca9d8467bd02b409a1c06b06694038011964b454a527e93ab66a3bdd6095a7f1219062ab69f9d69e288e1ecd205e1313f0222d17e2f9a8b19a384bfe70346c177df3f3b2217997ddfdf3eff3600113113c7e9163b8899cecb6bda59cdd344f2e595ee9576b70ee88ad0cff9c13d52926c0a0c97aa342a4f078239a23d9cdf85064334c817be0cf7c2bcbca3dc0ebe49be728c0305cf8544bd98d5568edcf557b0884dc29d2e73b603d7f6dc4791c32ad8147da1f4ebf4f6814071f1842d90c56979242210334f41d93a7527277f377b9b28b5095432563ef2b1bdbfb97b033dfdada688d143ff1d823adefbf717eb3a149c83b43b5edf1c8f80f8366a4da73b58bc18d35d40a22d12040ac1dbb61120a43eeb00e4a19cb99fbdd4758ab7168c8a6f272d868fb9ec1fc19c3deab13eee511d775671fd14970fb928df242dced551d7bb523a89338ea55bcfdf5b1d7ca9cc3f21e197cfc8a544f80c906dce139af11f055ef49bd5d36a7e76f7104c2bafc5d191492e6c4c48eb24887b86f6219a10cc5f3a8dd44f203107e5eb9b21dddb10cb06a4a1627a99a829584a5f98475375f28ed1f7307f6420e92bcf9cf62a3ad8f2051d9312f66e7ae2e4b3064ba48022577dd74dfe9df4c2f8b72ee5c42a77051aaacc2b21759902fd445caf8cd06ab1f88fac0bcda5ce5dea61350419a8a1e14c48c8ebcefd13ca060a373c1d736673e487897002c96586f9a0c206457b9c11abad904f712c7ed719cfc8b723640f74f006fd0319d75e9bbacdb9a49a85b4228c5ffd6f6ff3af2f24af77c355954de4dffe064e857ce1d5a13e8f3d11efd44acd10e6b2e2b35e558f08fb5d404cd9539485adb1b30062c14bb87334615e25213c545fb1633f713a1e2c4cf06acb3db8cbfc57e8bbc62ed1dd016a71682760ac439dcd5a286f58c3b5b7dcfed1f355ba500628bc3ad04a68e7288e5a60d96b1b5f18ba5a80ff3ac00b32e992d1f90fd0b7978bd4a20b714f4aecb5f058ee009a3eff280b684d95870c9ae4cbb55930ba49d2c27a38194855bf91105b5dc68edd3e0b956b911263573330f011f971693a3f0ee5e76f74f0fbb0e241d8ff384b8af1968c7564f95ab5f8fb24ff970ad50535ddcdc39eb2f5b95c40e737eeaeff283a096b2f6948ca00596a8734a7d88361d91531316e8d75da0e10969fbe9fb9ea789439652da20c62cde7a8dcd44d489063907e37551fc5625050e4b16e60e1183e956a5f5e7ca010a5c1432a4afde8944869eadf7b5f5f42d64c16fe3f591c5b30226e54fd52c5d80aac3598304d89385795d8468da714a4939512fa6b8bbf94ec319df874e015427587965c6e0bca7a20ae0d56206469b936f24335be71bed161f0b5e810fae6a5d7c663ac11f2fecce9698d0c4a887e9d7cf8261699807a0bb0ee7424f4c1c171ae09f0b8a2a13c816c1ff2d5eaf5434c72f2ddf64c345a5b4f5c9208edcdffe3d073e89d7d8f5aa308d8d48b0369cc436d27d0f92a1e1fefbff1f8ef4937b5f30db8e074085960e7b7d61538d527a6b4718e7ea0dd59b9cfaaa1f0f03e82478bd4355ca4131513ae71f2143c2e932906138fedee48706ef44df3efef53d3e6ef22291818156de5e12f2b987426ad185aee6f65dda00f2064f435c94ac31a8e73e25e1f7c937d4dfc494670f3c1df38771699e95778148846593e58caf9ec0c93bd8ee2533744df541a89e350f8d7b160faf8bc07aa932d06ce705f7085a19e77e573e2be00fc3a8addc9e971be3fccc3b73237dbd382af326ab6b3a56ba35c344549e70809ff4aca01e99abf054f3ab89a3c6461820dbc9baa266a83d515c54e7f6c85bfef5c1501e2cb2144046f1d4ac09664417b8e29999230d44cc898e0d8de51e386525ac859c2827c3108818d75842e043e3a9736aef35d41b64b388ed9f571a078124683f8ce908950753f7e086e260e5bec5ea00534fe777935794921f1487f84e91d85a4c20bc77ea2498d3320195106b704961ffa8a5af1ccf0bd61c575940db62361097a257737c848f48c8488fdce0c5d67b69082bb9ea5ce41f65ebf66cda4c0b4fbe6d765addacf4e6cf4924050b4286d1de984e931dda8f857223e1306f583276560b95fcadfe4e474b3fc7212072d477aad4c1ed6c48417c77ffcca78195ccaf6d8430d415c7047efc968344283c984270bafd21faf2a81b0302088c26d5c87dd39b77c9ae83ecefc30c2a244319e3d7702a8b3423eeb04e501344286447a5b12f31f3d2ec547365dc104688d16cc66894846b770f2d9f33b8f84e6b6ef7728a2bef6232cbb9e74f1ccd367ecac6c91c3456099772e75135e7c46b38bdb46f1a8de09897ae301ccb649d231a992f90d45a6cafb10a6683c8aec108d695027fc4df61fb3202963b53ef0341671677ff31bab7b25b5ba1fc4d8b1d12d00e31ffbd9b8a4ceea31cec465864c9daf3e03b502ffc6c6b971c1ae60860caa55ce9a198c4982090feee5f3e6c6881bc30625e81bab39f422e55e58d6d2d369159f452990c11e3fd0b60cfb3e515944429ca1a31435310e072d6913f57ebbbb7b97531daeb0eef0daf7508b8ca8fc3823658a63565d9928024c86b6a4702370b3407c190b40ec1a71820bbebc2749001608e3bcc5c9b6c498c2217b8ba7a80c727c61967862e2f5bcb03d829d67e3e678c49c02c2c9297a084270dcf46e52834748b17e849e76a49dd63bbfe3e4e0883f0a04d093d9b2464213d3da9b183d6893f46b52dfd812fc03a233edc0b8f05ec7f096c6ef9b37d60e68a83dbaa090ac38b7eb68b1ac34dbaae5381822feb02d195f832530c8202df4538af0c5ae05c186ccc3a8770eb73569030f04de89d703616a54aa04169483c6009c47b95c6a95c1f6772f62412271cc6be9eadd5fc0917562f70bba137cbcd5af07f359edc816e903419d89fbaadee8d67bc60897cf0c6fa3f47107339a20ce73efb7bdcabbf33da68cefd40fbd6407e730fb7aa0e24587d087e6c6475fc2eef5a9d32ea8e1c11972c3ea9508d6f821091a1144e3dbfa804c0088921844f294d741edb2cdf0b643d54c794c7a45c46247017d1dc71096c4e57638813d51c8e388db20c1282776dca95517c3a306e11b894a219baf80ba8f506af49b168f93fedd956f7d459fb73e3f193975e5ce54819ced99fa8e088d58a559bebe1245abfa2ff8869479b23c0850513c034a41ab00f620314a97efaf648fda094f3209c7dbd14f99f0ef0730638966929023c9c4ad29b5cb47fd72dbfd31e992daed76d83bec20b29cbe8cc174956ed0b46ee256eea4736d89968b6754ecb8448d40b26450aa84ec4c154224caf9bd80ba893caa0fb477d67e45d68f09539ea89b1e03d059664007ce4e1a07e4dcfa28b7e4873078ebf0d82477fd345dbb25e81fc616ee258a2d1f8ff09f5791e359af3981091fe9f562de86aef6142bce38a2d6e5a25800e8fdb5ed4137c3d7310e81797d47c34aef3797481a284d8fb0561ad18a679fb33d04c5c943ac0336e0f6d3677e1c4c542c6032d7612c088bda31dc02af5fd6a70279d2084d114fd60a23ee4d34c6e38235efec6b7501e1460d20e505c59093bed4d0cb59780073a3dfe2a9e1623e0d6a0fbf0042e14ddf30fa50463dd7f9d82d4567606bd899bb93e8aa9b4f0fb911bd63f453b15ceb962107caaf98e48cd6ba7995390b9f68123418853f5344762b776faf53661318b38f1fa3c1974f0d02aaac0c3132d8dba875808300f9bd8fc04c33411d678edf8f7aebe8b44c34916cdf80ef4ab5fc9ed647af58afe3caa4ffb4914025b75f0d0efb866450e2d3a1d783d9ad109942a223caa8be1ca28459aa4f31e46856df96cf946f27c4d8d93026b8e4b2664039db41c0439aeb23b87288a8dd5e59a9a54e3c4f376998ebac70b123960a22f0c8177fddd8538e464863c21da87f87a918e3d6354c42a51b9efdaa6c5d56a11492ebde8aab14f4981ca6ac2cf9067c6ada328fd40ed47dc070f62ceb0f7f2c55e2a87c0e4a33d62c0c3c7b650aef51fe7465e250fd9758bd84bbb341b5ea88dd6398e3e67233cde9ea8f9ddcdabaefd0fb3ecc920e21d4715d1c520cb6f990427d538c4ce5b243e56103aa3c6067442ea5b4d8da6f135dfe6085bbbc6ce5eddbe4505414e9bcad132e9b801152ee68d14153e3b30ff3e5f0a62f059a398d9c4af973c7f8a9071eea2f7db19bfba02b566fc1ab776951492aa664a3108f49b2a660d77bac9e87dfa95009b912a9bce6ee3d7e390ce63bbab13a96a812d5ecee5a490cd02fa8e6a319f4bc6aa6967480d1f6dc333e167b2a63e8a064ab0b6e5cd8d0dccb0733cdcc1263523899a3f4aebb3cd06b8ee0b5f67f0fbc69e931cedfb016dd6960cae23bfbdcbd4a495b42469d81eb2456402636758bd2d38ddeece7af0fc43bfc74ebd48d84683de921a2560ddf44eee1176739838a8e3e72bd960467e16ee2ac84a81336af6a8661cbc74c81804c84869d3bf01bdf3930ff93d0d32cb86158c1750a526da782331fa0c0974ab78a715bdf895581a00545f9a69bfa083953880c483f573a76c19665499ce3af53bd02e7ac6a9e5df722285d982cd2f43218472c0a6a4af6aa76a0e661aca14185f042678552c4044acce939f1f472d37d03b5e865961f75562a4b49530b943d5747f8568409c976cbdc403443b70dd3741aa6ebec231dbebd92efa69f73c52c6fa0713a2f08a695528a1b1d5c0a34d8968e90bf19dbd9aef1986537378b68850e531ca0da63cde87c8de0e0537e330ea4f1c90ca9ce7c8ed94df07bfd66860092d5f9883f29f7637b3ed49b4fc2b6e8f9addf8a061c0f563a26ab37792a00ee9a6132f1710268843cdc5595d0f81d3f3a0c5adeba63680c485a9e3bdef5cf5782aac24658ddb7e7196ac3e90a399e0ae39b60f38fad7340113dd220b4967ce54705f5863e2cb0b446c8de5d6ee9df5102eff9e8a9e04fff61a16e88c4dc4b88b91ae2a64f6868bb7c66231ddc4f789591ea152c142275f2afcade3c286ac5b43760c6b5ec4b86c5a45bc484c6ff469da12f40a16da2e3e8f47d684bd46f1d7da52f92004d254dc41360a37ef0422a3603eb4d1fc20ea1f6af1b9cc4da42e87246cf8b86fad48d0445a9ab3b1415e5b181de72b5977d7dc2a4d7347754e44029eae83fef77d422652f4df90bea5a4f66ed6ded2d560b4c5ac5b3c8789fee8de3b9653cb03ffc8b0f02941fdcf658ea17bc03c20dd3ad0e45418715a0d81785af1a6e529b04f0d8f3df1bd87d18c6a4cf1bce9747322d6b4c4f5753e58b50376d4fc28c885ac920fdce4fa08fc6b8fe5e5429a27a3e4153501edd2a9a14ab6b6fad976687249a0c2f3892910259a7f903ea01dc67a091c6003dbf75d3de739a20100335f4b569a415f7e5c484d822630f07cf7d1ef53375fd873ab10e11ba9eaa4aa406ed0c0bf0db1b1cdaf078b7634f85ec5b9c7a882bf84ab447051b9193a0264642c2628612fcc398559eb94d2665760cb7e11d1a49d33e90e30e36b8533cf98a3506bf60f4499ee50b882e62b7c44481d42c029582e0081ef4887faf86af075e981c35fca0aee4d0d12482c4c714725a24569c19ab8c9767cb57686edde86ad8a49c61a1957ad32267791f1b262aa0e36afc59818fb231df97c5e3aec747a50546d6612990d67b23f293b84249311b2f4c92945a1f6b24698729b9d79788bf971b137ca6c5902c64630b8231da957bf8762", 0x1000, 0xffffffff}, {&(0x7f0000002680)="818ff8baeac5825456878ef7af1a8800d7c7e7dcb80f6c59228a9c553da16791b4517aa04fd55ab3bb5e7ccb655982fe7f10ba18a349ca0dd5c0b628c79a5afdcc4301c6a78929af4d333985e7dc213549437259a4b7256f4d888b2c791d48df98f015dd64cc2943c93dfee3ef315b9fd7d55f46c3a2ba2a9a349e8c70730eff74bd05cf3d69211515069a640ab8de4daa9e58a8a547e5a2ae7f35fba8195ab677b471de3fde11f2b192de1263292ef7d4e106fc6ed9e4c19ef643a4207a9cc5d6f450112e0c2e2d08be6aef03adb82202305a4a59232acd1bd84668a339c82823626029647ef8c9f2f6911ff34468d8293ef539c81a4fec07aec071742054", 0xff, 0x3}, {&(0x7f0000002780)="37b11c38075604243f736ace80b5a45e38a52a0a4c846cee733e044e9ce305809519ec31678050469ed3209936bd3a77793fc8f1606a9e0efaccb5360b938e0cbb14ad97b34051d7bff57d5c81a2e46d0433ccae37157d441a086eeb44738d03027c0a8fe70a89c16aca06c8e092d435bc7d7b2816728f00137649c27a0a8632727aeaa8e65059207a9975a9b56494f730ca97d48a45a97b099866e4a0bc0dd16e0e03dd4b6e810105ef88de0bd1aabeefe3964fc5c721930d9a7c08b19ea0bf45dad1e29032f5d8fd82f05338982f70cd578537beebdf4c35b21a6d21d034dae6899825c79376b5", 0xe8}, {&(0x7f0000002880)="a9e7ba63abbf089ca9baefc508c5a2c412e069055f5bf398ebb2466393281e86ecaecfc9185c245081837960de49d10911c54b3f3771fec39629f762975f4ed8ceaadbbbe2e3ad19c2e13b4d99242f2fecaf43ab21f427b1cfc71eea5e8dcb1bf01b64dd12de50ad38d7418575176c6767c15bbb5aa5e62f0545f2cf55c8fc83f95d2407a6e424abf0531e1b806930672fe877dcf8f47ccb11ff928703da1e54513f483aa1d0aeeab41d46dc776f5cedbea77efed1597122cab152dbd93d45743241bc968f09c58bc9e09d", 0xcb, 0x4}, {&(0x7f0000002980)="b821", 0x2}], 0xa00000, &(0x7f0000008a40)={[{@utf8no}, {@uni_xlateno}, {@nonumtail}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{$'}}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_eq={'uid', 0x3d, r4}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsu#\x00'}}, {@euid_gt={'euid>', r8}}]})
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000008b40)={{r3}, 0x74fe7c3f, 0x40, 0x3})
symlink(&(0x7f0000008b80)='./file0\x00', &(0x7f0000008bc0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000008c00)={{0x1, 0x1, 0x18, <r9=>r5, {0x9}}, './file0\x00'})
ioctl$SCSI_IOCTL_DOORUNLOCK(r9, 0x5381)

02:04:12 executing program 2:
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '\'.\'\x96.}\xd6+{\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x18}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x44)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={<r3=>0x0, 0x3, 0x5})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000680)={0x10, 0x7, {0x8, @struct={0x0, 0x800}, 0x0, 0x7, 0x2e, 0x0, 0x7, 0x8, 0x400, @struct={0x9, 0x8001}, 0x3, 0x76a, [0x80, 0xa7, 0x40, 0x4, 0x800, 0x9]}, {0x20, @usage=0x100000001, r3, 0xfffffffffffff0db, 0x10001, 0x3, 0xd82d, 0x9, 0x494, @usage=0x1, 0x3ff, 0x9, [0x100, 0x3, 0x6, 0x9, 0xff, 0x10000]}, {0x6, @usage=0x6, 0x0, 0x100000000, 0x1f, 0xc00000000000, 0x3, 0x8, 0x28, @struct={0x3, 0x3}, 0x5, 0x8d5, [0x3380, 0x7fffffff, 0x7, 0x7, 0xfffffffffffff001, 0x2]}, {0x2, 0x1ff, 0x4}})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000a80)={0x0, @aes256, 0x0, @desc3})
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000ac0)=0x1)
r4 = epoll_create(0xcb0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000b00)={0x7, {0x9, 0x4d74, 0x3, 0x8, 0x7}})
r5 = dup3(r2, r0, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xb53}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x40}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400c3}, 0x4000800)
r6 = fork()
perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x8, 0xd5, 0x6, 0x8, 0x0, 0x80000001, 0x10000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xadef33d91d4effbb, @perf_bp={&(0x7f0000000c40), 0x4}, 0x5c041, 0x7fff, 0x3, 0x4, 0x1, 0x6a000000, 0x4, 0x0, 0x8, 0x0, 0xfff}, r6, 0xa, r0, 0x1)
ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000d00)={0x1, 0x1, 0x7, 0x2, @lba=0xfffff77a, 0x8})
r7 = syz_open_dev$vcsu(&(0x7f0000000d40), 0x6, 0x707101)
sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, 0x5, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000045}, 0x1)

02:04:12 executing program 3:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/198, 0xc6}, {&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/225, 0xe1}, {&(0x7f0000001300)=""/27, 0x1b}, {&(0x7f0000001340)=""/216, 0xd8}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/192, 0xc0}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, &(0x7f00000035c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003600)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003680)=""/91, 0x5b}, {&(0x7f0000003700)=""/207, 0xcf}, {&(0x7f0000003800)=""/6, 0x6}, {&(0x7f0000003840)=""/175, 0xaf}, {&(0x7f0000003900)=""/85, 0x55}], 0x5, &(0x7f0000003a00)=[@rights={{0x18, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x100, &(0x7f0000003b80))
ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000003bc0)={0x7fffffff, 0x2, 0x40, 0xffffffff, 0x9, 0x1})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000003c00)={0x1, 0xad, 0x2})
ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000003c40)=""/68)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r7, &(0x7f0000003cc0)="094c73c7f6df4e9fdf21cace77e6e1954f388345f8e3fdb8625ca6eb32537596e4322e22ea245da8e7be21bac84d363fb4d888df0b8cef54b85e69a20bb3e7e6feee0331b244f46e4cc6bf6702546f521b042ab2045bc4b65e3c95fac7e0969a4d9df614d28faf4f4a6496455c03389b6d12ecf50b411aee8c748e78f7c509bd076b9e810da861a71a561fb6c8fd066626f9d2220ca5b1aff35ba59bb722edc48fd3444997a00f040bedc5056abd70de575daf782b6376199a330d9857e435", 0xbf, 0x20000034, 0x0, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000003d80)={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8000}, {0xa, 0x4e24, 0x4, @local, 0x40}, 0x5, [0x7, 0x6, 0x1ff, 0x3, 0x10001, 0x4, 0x4f5e, 0x1ff]}, 0x5c)
fcntl$setlease(r2, 0x400, 0x1)
r9 = socket$inet6(0xa, 0xa, 0x4)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000003e00)={'TPROXY\x00'}, &(0x7f0000003e40)=0x1e)
r10 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
ioctl$sock_SIOCADDDLCI(r10, 0x8980, &(0x7f0000003e80)={'gre0\x00', 0x7})
ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000003ec0)=0x1)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000003f00))
r11 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x7)
syz_open_pts(r11, 0x800)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004140)={&(0x7f0000004080)={0x90, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xc8b}, @ETHTOOL_A_CHANNELS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1f}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800)

[   88.963937] audit: type=1400 audit(1737511452.504:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:04:12 executing program 4:
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x80000001, 0x1000)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000280)=""/128)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x1, 0xa, 0x0, 0x0, 0x0, {0xf, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000000)
sendmsg$nl_netfilter(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x47c, 0xc, 0xb, 0x3, 0x70bd27, 0x25dfdbfc, {0x3, 0x0, 0x5}, [@nested={0x8e, 0x7a, 0x0, 0x1, [@generic="d03d438150da5eac06b7eadc9a443d0a52e9dbf66eaff20149e815c7befc22f201003185487840d91b265fcd24e0d9684ca695a04fdab7ca0ede9dd9372596d759363b13e9dbed04864e8e90d7189157f1d67ad5d9959e9e1ae6fb52c8caf73d87e6fa5476b3dab3acf11d633eabff21ec08d77530dc93d994c7be899cf1401a197451b06cf86067fc31"]}, @typed={0x8, 0x47, 0x0, 0x0, @pid}, @nested={0x261, 0x5d, 0x0, 0x1, [@generic="6def4c7baba82ddef5a460cb5f3b869bc2c56ba8933ff20ac8a577050aab344524d1bf3dfe585bd18171326494e0d67270b112290a27a3750160f75ba605c7b840eb0b364ab567a4ea8044800b4ded64fe4f22b6ab451c62a48a4406ac2b3b20dab46a2b8d27c1c1ac509e6f6b54dbf5fc903a3d7562a1dc7d3c47f3f92a375ab7b63780427a8ce46860239aac7cc4a469", @generic="fc88f5dc630b11e95011e09f51fd584aaca260134e283bf53e7927bbea9d2a7f1269e9ca0c09db52bf13e623db5f88b98a6a277cdf1ff9066bd5636c8a65ba6ba9f2044f8a480ff88e2de7eb643971c0b678cdf57cef9608494cb6f215ac1245a6fd2a95e1c5aa02f00aa3f9fca4cba4392534694b12f5f11ddc2cd56fcd716bf952030a8d4ddb714218e0fe097e94797de85445672b4e28c50aca4b4bfc467bdf39a0f9823f16afc45582ca751a32d0026c160b9bd44bc581dee8a972992dca24b6cda7850fc283947106f3a458bb5b087f572e3946639b4eb54db8", @typed={0xe7, 0x0, 0x0, 0x0, @binary="678b72d22b5ff35b7edf8af72721debf7cf51e119d61b275be6a1800301179dbd9b23076825d0020e695b3c3edf971746868fa22e3e1f1e31be9e5e2642887e8fcf66303562edb35d2fb45df38bcfbdd9ca728aee1d7817bba8b9cadc5575fd222913530916a3e22b75087a59e6500da076ccbc1228ad04819edb3e1de58dd9a8e98da46ca2e3d69377d77006e7663481cd605f5c1c69c082c1f2088dfffeca99e0ffa90141acd92570129793b69e1b40609d6699bfbbeaf93f13a04b15f8cb624f6416577b267984a050684195c200b47c4129cec279142ce8b1dee14b87beda5cb6f"}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r1}]}, @nested={0x96, 0x1b, 0x0, 0x1, [@generic="428daf1d1e887d53d5b83ec43efee2843d89fd8322548c581f7d84c544ae5ffca897fc2a250f038074928428c7162fc6a414ab6602f7584e31ff1e9fa388d4d74e0d7f0addab91330298f33cd8eb6094906c509774d8c31c7fb0f407d302df641958c3f6476f050de8f20c4fe6369ecfcc473babac2cebb1b04e50ece70b1cbe7ad57cea7a0102091a4e", @typed={0x5, 0x72, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x16, 0x0, 0x0, @str='\x00'}, @nested={0x54, 0x68, 0x0, 0x1, [@generic="b4c14b626fe1eef43ba30dbb752761e7b6f44867d603dae9571189f80e95749ae74ac35f1015eabd0f40b8cbca6803f4690109a999cad2a1de240a2b0e2a765d221126571d3a9f1917464d897e37ef40"]}, @generic="11cd466ed0be6de8bd170bbd6a857d93460873fdb70e8b6a992def61a4e5fe62aeed21f92a72bbb3f8cd941342f827f62fbbbb8782ff1c2bbd30319eb1cd4dd3ed5c0b248813d03507bf4ee5dee6ff7eaeaa16c088ecea2f226cffe5fa3f2cea26e4a040178e162e0f47a01786c3ccbe805db8fccfed2dd0"]}, 0x47c}, 0x1, 0x0, 0x0, 0xc010}, 0x40080)
fork()
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r2=>r0, {0x4, 0x7fff}}, './file0\x00'})
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file1\x00'})
ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000c40))
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000c80)=""/33)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000cc0)={0x3, 0x0, 0x20})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x8000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e80), 0x703241, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000ec0)={0x1, 0xb4e7, 0x6, 0x5, 0x3})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000f00))

02:04:12 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x410, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4880)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x40}}, './file0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000200)={0xd})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>r2, @out_args}, './file0\x00'})
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000580)=0x1, 0x2)
recvmsg$unix(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/54, 0x36}, {&(0x7f0000000800)=""/2, 0x2}, {&(0x7f0000000840)=""/38, 0x26}, {&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x6, &(0x7f0000001a00)=[@rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0, <r8=>0x0}}}, @rights={{0x10}}], 0x58}, 0x0)
sendmsg$unix(r3, &(0x7f0000001b00)={&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000640)="8f99273108e1f1a8b9c76ed967a085a1a4", 0x11}], 0x1, &(0x7f0000001ac0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8}}}], 0x38, 0x20000000}, 0x4000000)
r9 = syz_open_procfs(r7, &(0x7f0000001b40)='net/ip_tables_targets\x00')
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000001b80)={{0x32, @multicast2, 0x4e21, 0x0, 'nq\x00', 0x20, 0x7ff, 0x3f}, {@multicast1, 0x4e23, 0x2000, 0x81, 0x40, 0x95c5}}, 0x44)
r10 = syz_open_dev$hiddev(&(0x7f0000001c40), 0x40, 0x40301)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000001c00)='nl80211\x00', 0x0, r10)
r11 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r4)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x30, r12, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xe000}, 0x4000)
r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001ec0), 0x80, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r13, 0xf503, 0x0)

02:04:12 executing program 6:
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
r0 = eventfd(0x1)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x7)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000000c0)=0x5)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000200)={0x2, 0x6, 0xca, &(0x7f0000000100)=""/202})
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0]})
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0))
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x17, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000)
recvmsg$unix(r1, &(0x7f0000000880)={&(0x7f0000000440), 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/57, 0x39}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/146, 0x92}], 0x5, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc8}, 0x203)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000008c0))
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000009c0)={0x464, 0x81, 0x0, 0x7})
r3 = accept4$packet(r2, &(0x7f0000000a00), &(0x7f0000000a40)=0x14, 0xc1000)
fchmod(r3, 0x8)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/module/video', 0x204000, 0x44)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
ioctl$CDROMVOLREAD(r4, 0x5313, &(0x7f0000000ac0))
r5 = inotify_init1(0x80800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000b00)="c3d23b341998d5206f20c92f43c24f9410c7d93038f5bc0c346a5497f5f99807e8a4ac5f60800df62a621e23d207ddc8f82d664026074a79e057d2c98f6737035c46dcae09f9116857b9cc4317731ee223df006a992ca7c483e1f3b59b9c", 0x5e, r5}, 0x68)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000c40)={0x400, 0x8c3eda4359aa68be, {0x0, 0x1, 0x15, 0x0, 0x1}, 0x81})

02:04:12 executing program 7:
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x0, 0x10}, 0x18)
getsockopt(r0, 0x8, 0x8, &(0x7f0000000080)=""/115, &(0x7f0000000100)=0x73)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4040001)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "fa3041a539cf454d93756f47347edad04e057dcadd0bbdf4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "6472edbedd4f13e1289937872181a7d5d92d14c0dd426122d2fdc11fca9d9f9d06e4d724ec5fd3e8e302fb1f4da3b34ca21d38d1ffd850be5de86ffd5edf019bb973af0803923051c7814378bb6553c01393081f83b844ea0b7737c8dc46890a83f03c8dd8e317506451a94f5b15f4a3093c7c796669445f097657d856d9181c63245a77d56e46b12f16e05596da8326f4b10ac17d013893744cd349ff414474"}, @TIPC_NLA_NODE_ID={0xf, 0x3, "bdc3bfa9111976466ac24b"}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe4fe}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa82b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfd17}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ba}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x18c}}, 0x80)
r4 = syz_open_dev$mouse(&(0x7f0000000640), 0x28, 0x10000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r5, 0x202, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x40, 0x26}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040804)
r6 = open(&(0x7f00000007c0)='./file0\x00', 0x40000, 0x4)
getpeername$netlink(r6, &(0x7f0000000800), &(0x7f0000000840)=0xc)
r7 = fcntl$dupfd(r6, 0x406, r6)
r8 = syz_io_uring_complete(0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/module/loop', 0x10800, 0x82)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r7)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r10, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4001)
r11 = syz_open_dev$sg(&(0x7f0000000b40), 0x6, 0x0)
pread64(r11, &(0x7f0000000b80)=""/162, 0xa2, 0x140ba10f)

[   90.257879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.261969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.263481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.268288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.271103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   90.272980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.522247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.524352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.526512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.527451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.530306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.534490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.537222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.541448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.542451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   90.546458] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   90.547185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.548812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.600364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.603546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.610289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.610398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.618121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.623670] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.639179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.639979] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   90.642216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.644048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.645196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.650146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.651377] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   90.652878] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.654434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.655927] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   90.657547] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.660200] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   90.660480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   90.663770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.672030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   90.676875] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   90.677895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.682626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   90.683941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   90.685577] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   90.686594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.688665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   90.692278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   90.697637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.353617] Bluetooth: hci0: command tx timeout
[   92.609091] Bluetooth: hci1: command tx timeout
[   92.610411] Bluetooth: hci2: command tx timeout
[   92.673810] Bluetooth: hci5: command tx timeout
[   92.737187] Bluetooth: hci7: command tx timeout
[   92.738098] Bluetooth: hci6: command tx timeout
[   92.738370] Bluetooth: hci4: command tx timeout
[   92.801284] Bluetooth: hci3: command tx timeout
[   94.401799] Bluetooth: hci0: command tx timeout
[   94.657738] Bluetooth: hci2: command tx timeout
[   94.657822] Bluetooth: hci1: command tx timeout
[   94.721838] Bluetooth: hci5: command tx timeout
[   94.784777] Bluetooth: hci4: command tx timeout
[   94.784863] Bluetooth: hci6: command tx timeout
[   94.784916] Bluetooth: hci7: command tx timeout
[   94.849757] Bluetooth: hci3: command tx timeout
[   96.450520] Bluetooth: hci0: command tx timeout
[   96.704866] Bluetooth: hci1: command tx timeout
[   96.705336] Bluetooth: hci2: command tx timeout
[   96.770775] Bluetooth: hci5: command tx timeout
[   96.834841] Bluetooth: hci7: command tx timeout
[   96.834981] Bluetooth: hci6: command tx timeout
[   96.835315] Bluetooth: hci4: command tx timeout
[   96.896802] Bluetooth: hci3: command tx timeout
[   98.496808] Bluetooth: hci0: command tx timeout
[   98.752852] Bluetooth: hci2: command tx timeout
[   98.752895] Bluetooth: hci1: command tx timeout
[   98.817753] Bluetooth: hci5: command tx timeout
[   98.880784] Bluetooth: hci7: command tx timeout
[   98.880810] Bluetooth: hci6: command tx timeout
[   98.881884] Bluetooth: hci4: command tx timeout
[   98.945747] Bluetooth: hci3: command tx timeout
[  152.545780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.553637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.556865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.574584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  152.581235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  152.589088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  152.623242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.627238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.631148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.637075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.640516] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  152.644099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.787995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.792596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.793485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.801900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.805571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.808331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.817999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.824376] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.827424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.843045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.865009] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  152.874058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.108405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  153.109054] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  153.111982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  153.114109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.115977] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.117479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  153.126569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.131590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  153.133965] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.135635] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  153.137877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  153.140080] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  153.149064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  153.151037] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.163179] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  153.173504] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  153.177287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  153.181959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  153.190993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  153.206851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  153.211543] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  153.215902] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  153.216447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.256918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  154.624919] Bluetooth: hci0: command tx timeout
[  154.688844] Bluetooth: hci1: command tx timeout
[  154.880831] Bluetooth: hci3: command tx timeout
[  154.944892] Bluetooth: hci2: command tx timeout
[  155.264993] Bluetooth: hci5: command tx timeout
[  155.266445] Bluetooth: hci4: command tx timeout
[  155.266805] Bluetooth: hci7: command tx timeout
[  155.329850] Bluetooth: hci6: command tx timeout
[  156.673853] Bluetooth: hci0: command tx timeout
[  156.739750] Bluetooth: hci1: command tx timeout
[  156.928779] Bluetooth: hci3: command tx timeout
[  156.993742] Bluetooth: hci2: command tx timeout
[  157.313800] Bluetooth: hci7: command tx timeout
[  157.313942] Bluetooth: hci4: command tx timeout
[  157.314043] Bluetooth: hci5: command tx timeout
[  157.377823] Bluetooth: hci6: command tx timeout
[  158.720789] Bluetooth: hci0: command tx timeout
[  158.784852] Bluetooth: hci1: command tx timeout
[  158.977855] Bluetooth: hci3: command tx timeout
[  159.040815] Bluetooth: hci2: command tx timeout
[  159.360977] Bluetooth: hci7: command tx timeout
[  159.361141] Bluetooth: hci5: command tx timeout
[  159.361237] Bluetooth: hci4: command tx timeout
[  159.424842] Bluetooth: hci6: command tx timeout
[  160.768866] Bluetooth: hci0: command tx timeout
[  160.833037] Bluetooth: hci1: command tx timeout
[  161.024951] Bluetooth: hci3: command tx timeout
[  161.088976] Bluetooth: hci2: command tx timeout
[  161.408843] Bluetooth: hci4: command tx timeout
[  161.408997] Bluetooth: hci5: command tx timeout
[  161.409082] Bluetooth: hci7: command tx timeout
[  161.473494] Bluetooth: hci6: command tx timeout
[  214.926109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  214.928505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  214.937527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  214.942086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  214.944108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  214.945374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.194854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.198192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.199540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.200600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.213883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.215141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.217357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.220504] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.222004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.222022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.229076] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.241517] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.282989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  215.289125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  215.307408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  215.314456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  215.323635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  215.327765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  215.335325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.344136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  215.355395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  215.374078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  215.394444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.402361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  215.403066] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  215.409741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  215.413623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  215.415809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  215.417328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  215.426130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.427761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  215.429479] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  215.430386] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  215.430802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  215.433211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.444990] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.472940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  215.476320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.478283] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  215.481201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.484077] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  215.498246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.026088] Bluetooth: hci0: command tx timeout
[  217.280817] Bluetooth: hci2: command tx timeout
[  217.281207] Bluetooth: hci1: command tx timeout
[  217.409854] Bluetooth: hci3: command tx timeout
[  217.473798] Bluetooth: hci7: command tx timeout
[  217.538708] Bluetooth: hci4: command tx timeout
[  217.601278] Bluetooth: hci5: command tx timeout
[  217.601786] Bluetooth: hci6: command tx timeout
[  219.072771] Bluetooth: hci0: command tx timeout
[  219.328824] Bluetooth: hci2: command tx timeout
[  219.328920] Bluetooth: hci1: command tx timeout
[  219.457831] Bluetooth: hci3: command tx timeout
[  219.523776] Bluetooth: hci7: command tx timeout
[  219.585822] Bluetooth: hci4: command tx timeout
[  219.648747] Bluetooth: hci5: command tx timeout
[  219.648830] Bluetooth: hci6: command tx timeout
[  221.121756] Bluetooth: hci0: command tx timeout
[  221.377985] Bluetooth: hci2: command tx timeout
[  221.378224] Bluetooth: hci1: command tx timeout
[  221.504709] Bluetooth: hci3: command tx timeout
[  221.570705] Bluetooth: hci7: command tx timeout
[  221.633780] Bluetooth: hci4: command tx timeout
[  221.697726] Bluetooth: hci5: command tx timeout
[  221.697813] Bluetooth: hci6: command tx timeout
[  223.169785] Bluetooth: hci0: command tx timeout
[  223.425784] Bluetooth: hci2: command tx timeout
[  223.425878] Bluetooth: hci1: command tx timeout
[  223.553721] Bluetooth: hci3: command tx timeout
[  223.617752] Bluetooth: hci7: command tx timeout
[  223.682442] Bluetooth: hci4: command tx timeout
[  223.744732] Bluetooth: hci6: command tx timeout
[  223.744817] Bluetooth: hci5: command tx timeout
[  274.409888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.410008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.615124] 
[  275.615442] ======================================================
[  275.616256] WARNING: possible circular locking dependency detected
[  275.617069] 6.13.0-next-20250121 #1 Not tainted
[  275.617708] ------------------------------------------------------
[  275.620586] kworker/u8:0/11 is trying to acquire lock:
[  275.621886] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  275.624197] 
[  275.624197] but task is already holding lock:
[  275.625548] ffff888026f58768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  275.626887] 
[  275.626887] which lock already depends on the new lock.
[  275.626887] 
[  275.627945] 
[  275.627945] the existing dependency chain (in reverse order) is:
[  275.628907] 
[  275.628907] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  275.629821]        __mutex_lock+0x13d/0xb50
[  275.630461]        wiphy_register+0x1b2e/0x25d0
[  275.631135]        ieee80211_register_hw+0x23a4/0x3d60
[  275.631878]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  275.632659]        init_mac80211_hwsim+0x389/0x870
[  275.633375]        do_one_initcall+0xf9/0x640
[  275.634044]        kernel_init_freeable+0x53d/0x7a0
[  275.634768]        kernel_init+0x1e/0x2d0
[  275.635359]        ret_from_fork+0x48/0x80
[  275.635953]        ret_from_fork_asm+0x1a/0x30
[  275.636624] 
[  275.636624] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  275.637473]        __lock_acquire+0x29fd/0x4580
[  275.638144]        lock_acquire+0x19b/0x520
[  275.638764]        __mutex_lock+0x13d/0xb50
[  275.639395]        unregister_netdevice_many_notify+0x1612/0x1c80
[  275.640249]        unregister_netdevice_queue+0x224/0x2e0
[  275.641015]        _cfg80211_unregister_wdev+0x57b/0x700
[  275.641817]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  275.642593]        ieee80211_unregister_hw+0x55/0x3a0
[  275.643320]        hwsim_exit_net+0x3a0/0x730
[  275.643958]        ops_exit_list+0xb3/0x180
[  275.644582]        cleanup_net+0x546/0xad0
[  275.645199]        process_one_work+0x8ee/0x1a10
[  275.645896]        worker_thread+0x674/0xe70
[  275.646550]        kthread+0x3ab/0x720
[  275.647135]        ret_from_fork+0x48/0x80
[  275.647729]        ret_from_fork_asm+0x1a/0x30
[  275.648396] 
[  275.648396] other info that might help us debug this:
[  275.648396] 
[  275.649420]  Possible unsafe locking scenario:
[  275.649420] 
[  275.650212]        CPU0                    CPU1
[  275.650826]        ----                    ----
[  275.651438]   lock(&rdev->wiphy.mtx);
[  275.651990]                                lock(rtnl_mutex);
[  275.652778]                                lock(&rdev->wiphy.mtx);
[  275.653634]   lock(rtnl_mutex);
[  275.654121] 
[  275.654121]  *** DEADLOCK ***
[  275.654121] 
[  275.654898] 4 locks held by kworker/u8:0/11:
[  275.655498]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  275.656888]  #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  275.658235]  #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  275.659492]  #3: ffff888026f58768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  275.660901] 
[  275.660901] stack backtrace:
[  275.661496] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250121 #1
[  275.662486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  275.663265] Workqueue: netns cleanup_net
[  275.663685] Call Trace:
[  275.663939]  <TASK>
[  275.664168]  dump_stack_lvl+0xca/0x120
[  275.664593]  print_circular_bug+0x47b/0x750
[  275.665030]  check_noncircular+0x2e9/0x3c0
[  275.665459]  ? lock_repin_lock+0x207/0x320
[  275.665916]  ? __pfx_check_noncircular+0x10/0x10
[  275.666396]  ? hlock_class+0x4e/0x130
[  275.666779]  ? mark_lock+0xac/0xed0
[  275.667157]  ? __pfx_lock_repin_lock+0x10/0x10
[  275.667642]  ? lockdep_lock+0xba/0x1b0
[  275.668056]  ? __pfx_lockdep_lock+0x10/0x10
[  275.668504]  __lock_acquire+0x29fd/0x4580
[  275.668938]  ? __pfx___lock_acquire+0x10/0x10
[  275.669394]  ? lock_release+0x20f/0x6f0
[  275.669816]  ? __pfx_lock_release+0x10/0x10
[  275.670261]  lock_acquire+0x19b/0x520
[  275.670656]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  275.671246]  ? __pfx_lock_acquire+0x10/0x10
[  275.671686]  ? srso_return_thunk+0x5/0x5f
[  275.672124]  ? lock_release+0x20f/0x6f0
[  275.672532]  ? srso_return_thunk+0x5/0x5f
[  275.672970]  ? lock_is_held_type+0x9e/0x120
[  275.673421]  ? srso_return_thunk+0x5/0x5f
[  275.673869]  __mutex_lock+0x13d/0xb50
[  275.674274]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  275.674853]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  275.675439]  ? srso_return_thunk+0x5/0x5f
[  275.675878]  ? synchronize_rcu_expedited+0x38a/0x420
[  275.676386]  ? __pfx___mutex_lock+0x10/0x10
[  275.676832]  ? __pfx_autoremove_wake_function+0x10/0x10
[  275.677379]  ? srso_return_thunk+0x5/0x5f
[  275.677827]  ? kasan_quarantine_put+0x84/0x1e0
[  275.678312]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  275.678770]  ? srso_return_thunk+0x5/0x5f
[  275.679213]  unregister_netdevice_many_notify+0x1612/0x1c80
[  275.679773]  ? __virt_addr_valid+0x2e8/0x5d0
[  275.680232]  ? __pfx_lock_release+0x10/0x10
[  275.680677]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  275.681271]  ? find_held_lock+0x2c/0x110
[  275.681710]  ? srso_return_thunk+0x5/0x5f
[  275.682152]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  275.682664]  ? srso_return_thunk+0x5/0x5f
[  275.683104]  ? lock_release+0x20f/0x6f0
[  275.683513]  ? __pfx_lock_release+0x10/0x10
[  275.683948]  ? srso_return_thunk+0x5/0x5f
[  275.684384]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  275.684909]  ? srso_return_thunk+0x5/0x5f
[  275.685356]  unregister_netdevice_queue+0x224/0x2e0
[  275.685890]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  275.686433]  ? up_write+0x195/0x520
[  275.686826]  _cfg80211_unregister_wdev+0x57b/0x700
[  275.687331]  ? srso_return_thunk+0x5/0x5f
[  275.687775]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  275.688276]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  275.688822]  ? srso_return_thunk+0x5/0x5f
[  275.689260]  ? srso_return_thunk+0x5/0x5f
[  275.689705]  ? synchronize_rcu+0x1ff/0x260
[  275.690144]  ieee80211_unregister_hw+0x55/0x3a0
[  275.690621]  hwsim_exit_net+0x3a0/0x730
[  275.691030]  ? __pfx_hwsim_exit_net+0x10/0x10
[  275.691487]  ? srso_return_thunk+0x5/0x5f
[  275.691928]  ? netdev_run_todo+0x788/0x1040
[  275.692374]  ? srso_return_thunk+0x5/0x5f
[  275.692814]  ? __pfx_hwsim_exit_net+0x10/0x10
[  275.693275]  ops_exit_list+0xb3/0x180
[  275.693681]  cleanup_net+0x546/0xad0
[  275.694070]  ? __pfx_cleanup_net+0x10/0x10
[  275.694515]  process_one_work+0x8ee/0x1a10
[  275.694971]  ? __pfx_lock_acquire+0x10/0x10
[  275.695415]  ? __pfx_process_one_work+0x10/0x10
[  275.695904]  ? srso_return_thunk+0x5/0x5f
[  275.696345]  ? move_linked_works+0x172/0x270
[  275.696800]  ? srso_return_thunk+0x5/0x5f
[  275.697239]  ? assign_work+0x196/0x240
[  275.697662]  worker_thread+0x674/0xe70
[  275.698077]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  275.698604]  ? __pfx_worker_thread+0x10/0x10
[  275.699073]  kthread+0x3ab/0x720
[  275.699440]  ? __pfx_kthread+0x10/0x10
[  275.699852]  ? srso_return_thunk+0x5/0x5f
[  275.700296]  ? finish_task_switch.isra.0+0x206/0x840
[  275.700817]  ? __pfx_kthread+0x10/0x10
[  275.701228]  ret_from_fork+0x48/0x80
[  275.701605]  ? __pfx_kthread+0x10/0x10
[  275.702014]  ret_from_fork_asm+0x1a/0x30
[  275.702456]  </TASK>
[  277.067286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.069111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.072285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.076947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.081468] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  277.085802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  277.259946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  277.262266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  277.263887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  277.266366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  277.268240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  277.269566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  277.516915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.518450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.521403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.525410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  277.528133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  277.529572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.529840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  277.533092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  277.535918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.536952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  277.543075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  277.546111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  277.584096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  277.585214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.586410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.592240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  277.594036] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  277.595322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  277.641183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  277.643176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  277.644209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  277.647060] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  277.651831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  277.653112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  277.670194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  277.685394] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  277.693059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  277.709194] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  277.726260] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  277.734022] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  277.741824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  277.774808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  277.775997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  277.781015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  277.791891] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  277.793897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  279.168687] Bluetooth: hci0: command tx timeout
[  279.296865] Bluetooth: hci1: command tx timeout
[  279.616730] Bluetooth: hci3: command tx timeout
[  279.617297] Bluetooth: hci2: command tx timeout
[  279.680736] Bluetooth: hci5: command tx timeout
[  279.680780] Bluetooth: hci4: command tx timeout
[  279.809739] Bluetooth: hci6: command tx timeout
[  279.936709] Bluetooth: hci7: command tx timeout
[  281.216736] Bluetooth: hci0: command tx timeout
[  281.344728] Bluetooth: hci1: command tx timeout
[  281.665006] Bluetooth: hci3: command tx timeout
[  281.665176] Bluetooth: hci2: command tx timeout
[  281.728708] Bluetooth: hci4: command tx timeout
[  281.728739] Bluetooth: hci5: command tx timeout
[  281.857700] Bluetooth: hci6: command tx timeout
[  281.984768] Bluetooth: hci7: command tx timeout
[  283.264721] Bluetooth: hci0: command tx timeout
[  283.392816] Bluetooth: hci1: command tx timeout
[  283.713363] Bluetooth: hci2: command tx timeout
[  283.713434] Bluetooth: hci3: command tx timeout
[  283.776787] Bluetooth: hci4: command tx timeout
[  283.777100] Bluetooth: hci5: command tx timeout
[  283.906768] Bluetooth: hci6: command tx timeout
[  284.032993] Bluetooth: hci7: command tx timeout
[  285.312693] Bluetooth: hci0: command tx timeout
[  285.440697] Bluetooth: hci1: command tx timeout

VM DIAGNOSIS:
02:07:19  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88800f363400 RCX=ffffffff81429a4a RDX=ffffed1001e6c681
RSI=0000000000000008 RDI=ffff88800f363400 RBP=0000000000200000 RSP=ffff88800fbd7db0
R8 =0000000000000000 R9 =ffffed1001e6c680 R10=ffff88800f363407 R11=ffff88800f9684b8
R12=ffff88802bdd7ff9 R13=ffff88800eaa9378 R14=ffff88800f968000 R15=0000000000000086
RIP=ffffffff81abc45f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f894de52600 CR3=000000000f2d6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000c0002b6280000000c0002eea80
XMM02=000000c0002b6230000000c0002eeb10 XMM03=000000c0002eec00000000c0002b62d0
XMM04=000000c000144090000000c000144060 XMM05=000000c0001440f0000000c0001440c0
XMM06=000000c000144150000000c000144120 XMM07=000000c000143760000000c0000874d0
XMM08=000000c0001444b0000000c000144480 XMM09=000000c000144510000000c0001444e0
XMM10=000000c000144540000000c000087530 XMM11=000000c0001445a0000000c000144570
XMM12=000000c000144600000000c0001445d0 XMM13=000000c000144660000000c000144630
XMM14=000000c0001446c0000000c000144690 XMM15=000000c0000e5080000000c0001446f0
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283eba5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8
R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000020 R11=3a6b636f6c206762
R12=0000000000000020 R13=0000000000000001 R14=ffff888008fea013 R15=ffff8880095deeb8
RIP=ffffffff8283ebfd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056132c7f1680 CR3=000000000f2d6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000003fb34a91be3e7660
XMM02=0000000000000000413a36e000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000