Warning: Permanently added '[localhost]:64600' (ECDSA) to the list of known hosts. 2025/01/22 04:15:03 fuzzer started 2025/01/22 04:15:04 dialing manager at localhost:44689 syzkaller login: [ 70.865285] cgroup: Unknown subsys name 'net' [ 70.966600] cgroup: Unknown subsys name 'cpuset' [ 70.995103] cgroup: Unknown subsys name 'rlimit' [ 77.495424] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 04:15:22 syscalls: 2217 2025/01/22 04:15:22 code coverage: enabled 2025/01/22 04:15:22 comparison tracing: enabled 2025/01/22 04:15:22 extra coverage: enabled 2025/01/22 04:15:22 setuid sandbox: enabled 2025/01/22 04:15:22 namespace sandbox: enabled 2025/01/22 04:15:22 Android sandbox: enabled 2025/01/22 04:15:22 fault injection: enabled 2025/01/22 04:15:22 leak checking: enabled 2025/01/22 04:15:22 net packet injection: enabled 2025/01/22 04:15:22 net device setup: enabled 2025/01/22 04:15:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 04:15:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 04:15:22 USB emulation: enabled 2025/01/22 04:15:22 hci packet injection: enabled 2025/01/22 04:15:22 wifi device emulation: enabled 2025/01/22 04:15:22 802.15.4 emulation: enabled 2025/01/22 04:15:22 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/22 04:15:22 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/22 04:15:22 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/22 04:15:22 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/22 04:15:22 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/22 04:15:22 fetching corpus: 0, signal 0/10248 (executing program) 2025/01/22 04:15:22 fetching corpus: 0, signal 0/10248 (executing program) 2025/01/22 04:15:25 starting 8 fuzzer processes 04:15:25 executing program 0: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa09}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x10040035) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1f0, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x347fc0e3}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80, @loopback, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008004}, 0x890) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000420}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4048804) r1 = memfd_secret(0x80000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x40088) r2 = signalfd(r1, &(0x7f0000000680)={[0xffffffff]}, 0x8) ioctl$CDROM_GET_CAPABILITY(r2, 0x5331) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000001700)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001740)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = openat(r3, &(0x7f0000001880)='./file0\x00', 0x101001, 0x100) sync_file_range(r4, 0x2, 0x8000, 0x6) ioctl$FIONCLEX(r3, 0x5450) syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), r4) bind(r2, &(0x7f0000001900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0x3, @loopback, 0x58}}}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) 04:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x100000001, 0x80000) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f00000000c0)={0x3, 0x6, 0x3, 0x8, 0x0, 0x14}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x402400) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1dc0000, 0xe922, 0xc1, 0x2ee, 0x8000, 0xddc7]}, &(0x7f0000000240)=0x78) socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$cgroup_subtree(r1, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f00000002c0)=0x7fff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r2, 0x4, 0x2, 0x7}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x294, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf0000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x32a, @loopback, 0x7ff}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19db7df8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffff01, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @mcast2, 0xffffff37}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x60b77925}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x800}, 0x800) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f00000006c0)={0x4}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) syz_open_pts(r7, 0xa0800) r8 = dup2(0xffffffffffffffff, r5) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "acfad090eb68ef540868ca3f3a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a2685ba293"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) 04:15:25 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000200)="3c7a19ceeba83ad8e4d858c798a1c76ed9437f86ed64b7f84f1a15d541cd7b2fbd71e1a43a22bd982692b3efea9f6acbf7b2bd61196e6efd253a93f8c0192bdc58f07f67be9c9e1fb673b50c6d3c49dcbcec458e13eb101d021e8dcebd9930b79f240ede2c7733d5264912a01fb86c378859f808c56760b073e865c5afa200d207d0370bb4e3e15180983c2488", 0x8d}], 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0x3e4, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x7, 0x9, 0x1, 'queue0\x00', 0x7fff}) r4 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x1c, @unused=[0x4, 0x3, 0xfffffffffffffffa, 0x4], @subvolid=0xe7bb}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000001440)={0x0, 'veth1_to_bridge\x00', {0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) read$ptp(r5, &(0x7f00000014c0)=""/132, 0x84) r6 = creat(&(0x7f0000001580)='./file0\x00', 0x1) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000015c0)=0x63, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000001600)='net/connector\x00') r8 = openat$cgroup_devices(r0, &(0x7f0000001640)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000001680)={{0x1, 0x1, 0x18, r8, {0x8}}, './file0\x00'}) r9 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT_ANY(r9, 0x0, 0x14, &(0x7f00000016c0)=""/24) 04:15:25 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0xdb}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0xa1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x90, 0x2, 0xff, "4041c8dacd5a827ecc39b639256c741a", "12ae9e82c0bd37a849c920c87f77def18a68d294387e769372e5e8eeabfcc3e14a4572534281f0bdf763a69ba5a5ba2ac94eab47eb2aba7d02ef6cf4b19d80c0824b696b56df93af70261bd3824a7a64ad1e5105a9513f53007372c293c078eead136d08d775752bd2c28b38b6aaabc3f9c272a3e0e4127ac1a1cf"}, 0x90, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x6) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x810, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/oops_count', 0x123080, 0x100) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) fcntl$setsig(r1, 0xa, 0x13) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000003c0)=0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x29}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000540)=0x80) r3 = syz_open_pts(r1, 0x8a01) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000580)=0x114) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/pci0000:00', 0x400, 0x40) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x240040c0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) [ 92.366014] audit: type=1400 audit(1737519325.701:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:15:25 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4022}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x29c, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c7baf7c301664577af186b2f9c391c9e538bee4340ae0616fdc48d999c114d5399b4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x13, 0x3, "7570ec822eb0d8ba7298ea60e6cb95"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37338246}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa945}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x57}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x64044885}, 0x4010) socketpair(0x26, 0x3, 0x8001, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x43}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xd4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000640)={@loopback, r4}, 0x14) r5 = eventfd2(0x800, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000680)=""/65) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)=@allocspi={0x17c, 0x16, 0x200, 0x70bd2d, 0x25dfdbff, {{{@in6=@empty, @in=@empty, 0x4e23, 0x2, 0x4e23, 0xfffd, 0x2, 0x0, 0x0, 0x2b, r4}, {@in=@remote, 0x4d2, 0xc831ce06eeec9e2c}, @in6=@empty, {0x9, 0x4, 0x9015, 0x1, 0x40, 0x2000, 0xfffffffffffffe00, 0xffffffff00000000}, {0x8, 0x5, 0x6, 0xabf}, {0x0, 0x5, 0x1000}, 0x70bd2d, 0x3505, 0xa, 0x1, 0x7, 0x4a}, 0x83a}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff7}, @lifetime_val={0x24, 0x9, {0x146, 0x7, 0x5, 0xd2}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2c, 0xa6d2}}, @replay_thresh={0x8, 0xb, 0x8}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd27, 0x70bd28, 0x70bd29, 0x70bd2a, 0x7, [0x8, 0x401, 0x400, 0x0, 0x8, 0x31f7, 0x4b51, 0x200, 0x1]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x28000000}, 0x8040) r6 = accept$inet6(r3, &(0x7f0000000940)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000980)=0x1c) openat$full(0xffffffffffffff9c, &(0x7f00000009c0), 0x20040, 0x0) readv(r6, &(0x7f0000002b80)=[{&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/119, 0x77}], 0x4) chmod(&(0x7f0000002bc0)='./file0\x00', 0xd0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002c00)={@remote, 0x80, 0x1, 0xff, 0x9, 0x4, 0x200}, 0x20) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002cc0)={{r5}, 0x0, 0x10, @inherit={0x50, &(0x7f0000002c40)={0x1, 0x1, 0x9, 0x7ff, {0x6, 0x2, 0x6, 0x100, 0x8}, [0xffffffffffffffff]}}, @subvolid=0x4}) setxattr$trusted_overlay_nlink(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00), &(0x7f0000003d40)={'U-', 0x5}, 0x16, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003dc0), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x58, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x44, 0xa8, @random="8caf54c33c9e9ee5ef8a73300689da159fdc328acf22cd6abf4f117f5febd03dcc2f0b68ad274961dabbd006212912e94acdd3b5262d719618b9975ceec5d3c2"}]}, 0x58}, 0x1, 0x0, 0x0, 0xea9d365355a33814}, 0x20000004) 04:15:25 executing program 5: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x1) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555f}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000440)) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000500)) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24001}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000007c0)=0x72, 0x4) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x785d1fe1cc89fffc}, 0x4000080) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000a40)={@desc={0x1, 0x0, @desc4}}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) 04:15:25 executing program 6: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) ftruncate(0xffffffffffffffff, 0x1) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000080)) r0 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x482003, 0x0) dup2(r0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe8, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:shadow_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80800}, 0x404c000) r3 = socket(0xb, 0x5, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000540)={r4, 0x3}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001540), 0x400, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x1fffc000) fsetxattr$security_evm(r6, &(0x7f0000001580), &(0x7f00000015c0)=@v2={0x5, 0x1, 0x6, 0xffffffff, 0x1e, "41a46a4836d57185cb6bef6f7dd95efa10bfa614685ae55a9b43ecb3f593"}, 0x27, 0x2) accept$inet(r5, &(0x7f0000001600)={0x2, 0x0, @multicast1}, &(0x7f0000001640)=0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2008200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x43}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000001780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x2, 0x0, 0xa, 0x400}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001800)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000001a80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x124, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x52c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd1b8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x20}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff9}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x124}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 04:15:25 executing program 7: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x4802, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf6, r1, 0x1, 0x7f, 0x6, @local}, 0x14) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = dup3(r0, r0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) connect(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x2, {0xa, 0x4e24, 0x9, @local, 0x8}}}, 0x80) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) r4 = syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0xe078, 0x3, &(0x7f0000000540)=[{&(0x7f0000000340)="239e406dc92217ed7773c91d1702cdeddec27f3296aed3e647e8cc81ca8ce063b2cfd4d86cc010f3ae1053bae0e204ab97dd327290637cb038d532895a1cc0968c947e8ca4d2c18b52a60a3a4bea35d2d0f306", 0x53, 0x5}, {&(0x7f00000003c0)="f3a12dac0dd36690e9fadbb8b52100a8d37ffee619e7ec651a041e47354c657717d98fb829b300d9092cdb947ac4a02a71af2d7fae49a85f87592c5df4b2bda67e309b063ca45c0e9dbc4d7166986134edb963892f48ad8713161b3e36f624b3f8d99977fd06e944e236fec5a5769f4fa71e8f30865143b2a4fac0508287c8abcc9769123dfa225a142f983da4c760", 0x8f, 0x35}, {&(0x7f0000000480)="139f13e9d4100c4774208715165dc8e64f0f2115695c599a02bf35f7cc82d6ace4712f8e8ce15dcf035d3631cadc885aeb47f0749c1cec535d2cb1e14d9a1ec67fd530eb1dd47d601b56b03f0082025dc81cb7c4990fcfd89f2c0069541f2403ef9263b88c54e888a658ca557931b09269ca4e28293b7be3cee97b7f88d92a87d6477f7e31983a455282ebdeb545865ef85fa1", 0x93, 0x3f}], 0xc04042, &(0x7f00000005c0)={[{'\x00'}], [{@fowner_gt={'fowner>', r3}}, {@seclabel}, {@uid_lt={'uid<', r3}}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, ')\x7f-#\\'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, 'wg2\x00'}}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"0ea0f86f276a31d3423fddc74aa7aea1", 0x0, 0x0, {0x9, 0x1}, {0x2d, 0x1}, 0x8000, [0x5, 0x5, 0x2, 0x7fffffff, 0x5a4a, 0x40, 0x80000000, 0x9, 0x8, 0x59, 0x401, 0x4, 0x0, 0x7, 0x40]}) r5 = openat2(r4, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x1c2, 0x19}, 0x18) write$P9_RATTACH(r0, &(0x7f0000000840)={0x14, 0x69, 0x1, {0x1, 0x2, 0x6}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, r5, {0x101}}, './file0\x00'}) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f00000008c0)={0x4, 0x1, 0x7, 0xff, 0x9, 0x20}) r7 = memfd_create(&(0x7f0000000900)=':/\x00', 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000940)={0x18, 0x80000000, 0x4, 0x3ff, 0x3, [{0x100260000, 0x6, 0x1, '\x00', 0xd07}, {0x9, 0x8, 0x6, '\x00', 0x100}, {0x1, 0x101, 0x80000001, '\x00', 0x2100}]}) ioctl$RTC_AIE_ON(r0, 0x7001) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r6) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffd47}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8841}, 0x480c5) [ 93.877524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.882578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.886575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.895703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.908930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.910521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.915872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.921426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.922039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.925384] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.927359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.929144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.937344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.941196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.952712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.956130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.959459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.961830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.981813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.990265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.991720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.995925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.001180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.003919] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.009934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.014992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.037892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.038834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.042925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.048536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.053118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.053464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.056784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.057317] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.061326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.062873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.064356] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.064963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.071112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.072537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.072895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.081926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.088881] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.089655] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.092230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.094064] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.105597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.117954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.020821] Bluetooth: hci2: command tx timeout [ 96.021023] Bluetooth: hci1: command tx timeout [ 96.083965] Bluetooth: hci0: command tx timeout [ 96.083994] Bluetooth: hci3: command tx timeout [ 96.147866] Bluetooth: hci7: command tx timeout [ 96.147983] Bluetooth: hci4: command tx timeout [ 96.148689] Bluetooth: hci6: command tx timeout [ 96.212786] Bluetooth: hci5: command tx timeout [ 98.068845] Bluetooth: hci1: command tx timeout [ 98.068955] Bluetooth: hci2: command tx timeout [ 98.131847] Bluetooth: hci3: command tx timeout [ 98.133458] Bluetooth: hci0: command tx timeout [ 98.195882] Bluetooth: hci7: command tx timeout [ 98.195972] Bluetooth: hci6: command tx timeout [ 98.196055] Bluetooth: hci4: command tx timeout [ 98.259870] Bluetooth: hci5: command tx timeout [ 100.116875] Bluetooth: hci2: command tx timeout [ 100.117578] Bluetooth: hci1: command tx timeout [ 100.179961] Bluetooth: hci0: command tx timeout [ 100.180174] Bluetooth: hci3: command tx timeout [ 100.245773] Bluetooth: hci4: command tx timeout [ 100.245863] Bluetooth: hci6: command tx timeout [ 100.245947] Bluetooth: hci7: command tx timeout [ 100.307783] Bluetooth: hci5: command tx timeout [ 102.164855] Bluetooth: hci1: command tx timeout [ 102.165483] Bluetooth: hci2: command tx timeout [ 102.228855] Bluetooth: hci3: command tx timeout [ 102.228968] Bluetooth: hci0: command tx timeout [ 102.291999] Bluetooth: hci7: command tx timeout [ 102.292037] Bluetooth: hci6: command tx timeout [ 102.292135] Bluetooth: hci4: command tx timeout [ 102.355884] Bluetooth: hci5: command tx timeout [ 155.968703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.973089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.975292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.981535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.985058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.987496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.015961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.018997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.020340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.022462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.031587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.033898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.077155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.085157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.087131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.099286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.105476] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.110208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.125421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.137689] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.140982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.144123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.145508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.177248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.177881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.183851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.184579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.186482] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.187555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.193052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.195371] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.198095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.234123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.239245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.247359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.249018] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.249379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.250991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.274639] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.280290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.281443] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.282480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.286187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.290291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.304002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.372356] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.383885] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.385413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.036933] Bluetooth: hci0: command tx timeout [ 158.100795] Bluetooth: hci1: command tx timeout [ 158.164837] Bluetooth: hci2: command tx timeout [ 158.228802] Bluetooth: hci6: command tx timeout [ 158.357619] Bluetooth: hci5: command tx timeout [ 158.357908] Bluetooth: hci3: command tx timeout [ 158.420829] Bluetooth: hci4: command tx timeout [ 158.484895] Bluetooth: hci7: command tx timeout [ 160.084815] Bluetooth: hci0: command tx timeout [ 160.148845] Bluetooth: hci1: command tx timeout [ 160.214916] Bluetooth: hci2: command tx timeout [ 160.277458] Bluetooth: hci6: command tx timeout [ 160.405140] Bluetooth: hci5: command tx timeout [ 160.406551] Bluetooth: hci3: command tx timeout [ 160.469835] Bluetooth: hci4: command tx timeout [ 160.534863] Bluetooth: hci7: command tx timeout [ 162.132824] Bluetooth: hci0: command tx timeout [ 162.195995] Bluetooth: hci1: command tx timeout [ 162.259807] Bluetooth: hci2: command tx timeout [ 162.324749] Bluetooth: hci6: command tx timeout [ 162.451832] Bluetooth: hci5: command tx timeout [ 162.452892] Bluetooth: hci3: command tx timeout [ 162.515909] Bluetooth: hci4: command tx timeout [ 162.579974] Bluetooth: hci7: command tx timeout [ 164.180816] Bluetooth: hci0: command tx timeout [ 164.243809] Bluetooth: hci1: command tx timeout [ 164.307857] Bluetooth: hci2: command tx timeout [ 164.371901] Bluetooth: hci6: command tx timeout [ 164.499894] Bluetooth: hci3: command tx timeout [ 164.499961] Bluetooth: hci5: command tx timeout [ 164.563958] Bluetooth: hci4: command tx timeout [ 164.627832] Bluetooth: hci7: command tx timeout [ 218.796848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.802500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.805566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.816908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.821246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.822930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.932665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.933985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.937232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.941664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.943549] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.947881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.980076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.002065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.008429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.012186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.038334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.062931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.120545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.143196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.149073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.185064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.195042] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.202435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.242169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.251883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.265314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.285969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.303223] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.309094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.320507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.335147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.345057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.368575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.387490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.389634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.413607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.448261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.459029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.508936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.517413] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.528473] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.994432] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.019180] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.031119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.079863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.083073] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.084154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.883959] Bluetooth: hci0: command tx timeout [ 221.012813] Bluetooth: hci1: command tx timeout [ 221.139971] Bluetooth: hci2: command tx timeout [ 221.269777] Bluetooth: hci3: command tx timeout [ 221.459793] Bluetooth: hci4: command tx timeout [ 221.460219] Bluetooth: hci5: command tx timeout [ 221.651830] Bluetooth: hci6: command tx timeout [ 222.164889] Bluetooth: hci7: command tx timeout [ 222.932773] Bluetooth: hci0: command tx timeout [ 223.059819] Bluetooth: hci1: command tx timeout [ 223.187777] Bluetooth: hci2: command tx timeout [ 223.315837] Bluetooth: hci3: command tx timeout [ 223.507860] Bluetooth: hci5: command tx timeout [ 223.507978] Bluetooth: hci4: command tx timeout [ 223.699856] Bluetooth: hci6: command tx timeout [ 224.212837] Bluetooth: hci7: command tx timeout [ 224.979948] Bluetooth: hci0: command tx timeout [ 225.107783] Bluetooth: hci1: command tx timeout [ 225.235760] Bluetooth: hci2: command tx timeout [ 225.363784] Bluetooth: hci3: command tx timeout [ 225.557851] Bluetooth: hci4: command tx timeout [ 225.558027] Bluetooth: hci5: command tx timeout [ 225.748756] Bluetooth: hci6: command tx timeout [ 226.260154] Bluetooth: hci7: command tx timeout [ 227.028419] Bluetooth: hci0: command tx timeout [ 227.155811] Bluetooth: hci1: command tx timeout [ 227.283895] Bluetooth: hci2: command tx timeout [ 227.412844] Bluetooth: hci3: command tx timeout [ 227.603983] Bluetooth: hci4: command tx timeout [ 227.604077] Bluetooth: hci5: command tx timeout [ 227.797577] Bluetooth: hci6: command tx timeout [ 228.308781] Bluetooth: hci7: command tx timeout [ 280.873609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.880298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.882916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.896397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.901835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.904370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.129315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.135193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.141480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.151420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.154208] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.157123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.203670] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.208594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.210911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.217246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.222115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.224207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.270240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.281926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.285033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.287716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.289075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.302859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.320100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.322052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.327398] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.332047] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.332658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.337253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.341228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.345135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.355001] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.360426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.367783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.369796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.413311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.430508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.446075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.481350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.488054] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.490316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.573996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.579066] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.584114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.600134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.603500] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.607292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.964916] Bluetooth: hci0: command tx timeout [ 283.219963] Bluetooth: hci1: command tx timeout [ 283.283829] Bluetooth: hci2: command tx timeout [ 283.411833] Bluetooth: hci4: command tx timeout [ 283.475843] Bluetooth: hci6: command tx timeout [ 283.475882] Bluetooth: hci3: command tx timeout [ 283.539822] Bluetooth: hci5: command tx timeout [ 283.732893] Bluetooth: hci7: command tx timeout [ 285.011902] Bluetooth: hci0: command tx timeout [ 285.268817] Bluetooth: hci1: command tx timeout [ 285.332807] Bluetooth: hci2: command tx timeout [ 285.459815] Bluetooth: hci4: command tx timeout [ 285.524910] Bluetooth: hci3: command tx timeout [ 285.525119] Bluetooth: hci6: command tx timeout [ 285.589742] Bluetooth: hci5: command tx timeout [ 285.779983] Bluetooth: hci7: command tx timeout [ 287.060791] Bluetooth: hci0: command tx timeout [ 287.315797] Bluetooth: hci1: command tx timeout [ 287.380900] Bluetooth: hci2: command tx timeout [ 287.509036] Bluetooth: hci4: command tx timeout [ 287.572969] Bluetooth: hci3: command tx timeout [ 287.573291] Bluetooth: hci6: command tx timeout [ 287.637712] Bluetooth: hci5: command tx timeout [ 287.828759] Bluetooth: hci7: command tx timeout [ 289.107903] Bluetooth: hci0: command tx timeout [ 289.363776] Bluetooth: hci1: command tx timeout [ 289.427762] Bluetooth: hci2: command tx timeout [ 289.556858] Bluetooth: hci4: command tx timeout [ 289.620332] Bluetooth: hci3: command tx timeout [ 289.620418] Bluetooth: hci6: command tx timeout [ 289.683749] Bluetooth: hci5: command tx timeout [ 289.876812] Bluetooth: hci7: command tx timeout [ 339.046988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.047118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.316006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.316096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.602187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.602275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.848740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.848824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.722542] [ 340.722809] ====================================================== [ 340.723422] WARNING: possible circular locking dependency detected [ 340.724023] 6.13.0-next-20250121 #1 Not tainted [ 340.724489] ------------------------------------------------------ [ 340.725835] kworker/u8:0/11 is trying to acquire lock: [ 340.727873] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.731969] [ 340.731969] but task is already holding lock: [ 340.734251] ffff888030070768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 340.735245] [ 340.735245] which lock already depends on the new lock. [ 340.735245] [ 340.736002] [ 340.736002] the existing dependency chain (in reverse order) is: [ 340.736732] [ 340.736732] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 340.737403] __mutex_lock+0x13d/0xb50 [ 340.737868] wiphy_register+0x1b2e/0x25d0 [ 340.738379] ieee80211_register_hw+0x23a4/0x3d60 [ 340.738927] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 340.739523] init_mac80211_hwsim+0x389/0x870 [ 340.740049] do_one_initcall+0xf9/0x640 [ 340.740576] kernel_init_freeable+0x53d/0x7a0 [ 340.741114] kernel_init+0x1e/0x2d0 [ 340.741572] ret_from_fork+0x48/0x80 [ 340.742011] ret_from_fork_asm+0x1a/0x30 [ 340.742545] [ 340.742545] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 340.743208] __lock_acquire+0x29fd/0x4580 [ 340.743726] lock_acquire+0x19b/0x520 [ 340.744186] __mutex_lock+0x13d/0xb50 [ 340.744691] unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.745311] unregister_netdevice_queue+0x224/0x2e0 [ 340.745861] _cfg80211_unregister_wdev+0x57b/0x700 [ 340.746427] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 340.747003] ieee80211_unregister_hw+0x55/0x3a0 [ 340.747546] hwsim_exit_net+0x3a0/0x730 [ 340.748021] ops_exit_list+0xb3/0x180 [ 340.748492] cleanup_net+0x546/0xad0 [ 340.748951] process_one_work+0x8ee/0x1a10 [ 340.749471] worker_thread+0x674/0xe70 [ 340.749952] kthread+0x3ab/0x720 [ 340.750381] ret_from_fork+0x48/0x80 [ 340.750813] ret_from_fork_asm+0x1a/0x30 [ 340.751318] [ 340.751318] other info that might help us debug this: [ 340.751318] [ 340.752064] Possible unsafe locking scenario: [ 340.752064] [ 340.752636] CPU0 CPU1 [ 340.753081] ---- ---- [ 340.753537] lock(&rdev->wiphy.mtx); [ 340.753934] lock(rtnl_mutex); [ 340.754509] lock(&rdev->wiphy.mtx); [ 340.755127] lock(rtnl_mutex); [ 340.755486] [ 340.755486] *** DEADLOCK *** [ 340.755486] [ 340.756045] 4 locks held by kworker/u8:0/11: [ 340.756497] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 340.757506] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 340.758484] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 340.759400] #3: ffff888030070768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 340.760419] [ 340.760419] stack backtrace: [ 340.760851] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250121 #1 [ 340.761599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 340.762353] Workqueue: netns cleanup_net [ 340.762804] Call Trace: [ 340.763121] [ 340.763377] dump_stack_lvl+0xca/0x120 [ 340.763854] print_circular_bug+0x47b/0x750 [ 340.764319] check_noncircular+0x2e9/0x3c0 [ 340.764768] ? __pfx_check_noncircular+0x10/0x10 [ 340.765287] ? hlock_class+0x4e/0x130 [ 340.765691] ? mark_lock+0xac/0xed0 [ 340.766092] ? srso_return_thunk+0x5/0x5f [ 340.766555] ? lockdep_lock+0xba/0x1b0 [ 340.767020] ? __pfx_lockdep_lock+0x10/0x10 [ 340.767514] __lock_acquire+0x29fd/0x4580 [ 340.768005] ? __pfx___lock_acquire+0x10/0x10 [ 340.768502] ? lock_release+0x20f/0x6f0 [ 340.768956] ? __pfx_lock_release+0x10/0x10 [ 340.769436] lock_acquire+0x19b/0x520 [ 340.769870] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.770507] ? __pfx_lock_acquire+0x10/0x10 [ 340.771009] ? srso_return_thunk+0x5/0x5f [ 340.771494] ? lock_release+0x20f/0x6f0 [ 340.771913] ? srso_return_thunk+0x5/0x5f [ 340.772342] ? lock_is_held_type+0x9e/0x120 [ 340.772789] ? srso_return_thunk+0x5/0x5f [ 340.773209] __mutex_lock+0x13d/0xb50 [ 340.773585] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.774134] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.774700] ? srso_return_thunk+0x5/0x5f [ 340.775138] ? synchronize_rcu_expedited+0x38a/0x420 [ 340.775639] ? __pfx___mutex_lock+0x10/0x10 [ 340.776084] ? __pfx_autoremove_wake_function+0x10/0x10 [ 340.776619] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 340.777075] unregister_netdevice_many_notify+0x1612/0x1c80 [ 340.777629] ? __virt_addr_valid+0x2e8/0x5d0 [ 340.778082] ? __pfx_lock_release+0x10/0x10 [ 340.778510] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 340.779094] ? find_held_lock+0x2c/0x110 [ 340.779520] ? srso_return_thunk+0x5/0x5f [ 340.779947] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 340.780446] ? srso_return_thunk+0x5/0x5f [ 340.780857] ? lock_release+0x20f/0x6f0 [ 340.781267] ? __pfx_lock_release+0x10/0x10 [ 340.781705] ? srso_return_thunk+0x5/0x5f [ 340.782136] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 340.782659] ? srso_return_thunk+0x5/0x5f [ 340.783108] unregister_netdevice_queue+0x224/0x2e0 [ 340.783599] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 340.784105] ? up_write+0x195/0x520 [ 340.784482] _cfg80211_unregister_wdev+0x57b/0x700 [ 340.784992] ? srso_return_thunk+0x5/0x5f [ 340.785429] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 340.785932] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 340.786475] ? srso_return_thunk+0x5/0x5f [ 340.786910] ? srso_return_thunk+0x5/0x5f [ 340.787351] ? synchronize_rcu+0x1ff/0x260 [ 340.787780] ieee80211_unregister_hw+0x55/0x3a0 [ 340.788255] hwsim_exit_net+0x3a0/0x730 [ 340.788662] ? __pfx_hwsim_exit_net+0x10/0x10 [ 340.789106] ? srso_return_thunk+0x5/0x5f [ 340.789544] ? netdev_run_todo+0x788/0x1040 [ 340.789982] ? __pfx_hwsim_exit_net+0x10/0x10 [ 340.790448] ops_exit_list+0xb3/0x180 [ 340.790854] cleanup_net+0x546/0xad0 [ 340.791265] ? __pfx_cleanup_net+0x10/0x10 [ 340.791728] process_one_work+0x8ee/0x1a10 [ 340.792220] ? __pfx_process_one_work+0x10/0x10 [ 340.792711] ? srso_return_thunk+0x5/0x5f [ 340.793169] ? srso_return_thunk+0x5/0x5f [ 340.793593] ? move_linked_works+0x172/0x270 [ 340.794043] ? srso_return_thunk+0x5/0x5f [ 340.794483] ? assign_work+0x196/0x240 [ 340.794891] worker_thread+0x674/0xe70 [ 340.795322] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 340.795871] ? __pfx_worker_thread+0x10/0x10 [ 340.796341] kthread+0x3ab/0x720 [ 340.796707] ? __pfx_kthread+0x10/0x10 [ 340.797124] ? srso_return_thunk+0x5/0x5f [ 340.797568] ? finish_task_switch.isra.0+0x206/0x840 [ 340.798102] ? __pfx_kthread+0x10/0x10 [ 340.798531] ret_from_fork+0x48/0x80 [ 340.798907] ? __pfx_kthread+0x10/0x10 [ 340.799336] ret_from_fork_asm+0x1a/0x30 [ 340.799767] [ 342.947835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.952638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.957521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.964923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.970240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.974748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.009745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.015301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.020336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.026351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.035359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.037292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.265609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.268583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.273471] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.280312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.283031] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.284382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.328795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.332738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.333822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.338845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.346143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.348698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.403167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.403846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.405284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.415946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.416540] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.420840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.424905] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.426090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.453929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.472424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.482543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.483623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.522604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.531770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.536181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.538065] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.539705] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.544159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.632870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.637533] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.638337] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.646126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.649510] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.650020] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.043890] Bluetooth: hci0: command tx timeout [ 345.107811] Bluetooth: hci1: command tx timeout [ 345.299749] Bluetooth: hci2: command tx timeout [ 345.363807] Bluetooth: hci3: command tx timeout [ 345.491718] Bluetooth: hci5: command tx timeout [ 345.619874] Bluetooth: hci6: command tx timeout [ 345.684752] Bluetooth: hci7: command tx timeout [ 345.684770] Bluetooth: hci4: command tx timeout [ 347.091720] Bluetooth: hci0: command tx timeout [ 347.156836] Bluetooth: hci1: command tx timeout [ 347.350179] Bluetooth: hci2: command tx timeout [ 347.411707] Bluetooth: hci3: command tx timeout [ 347.539787] Bluetooth: hci5: command tx timeout [ 347.668828] Bluetooth: hci6: command tx timeout [ 347.731742] Bluetooth: hci4: command tx timeout [ 347.731763] Bluetooth: hci7: command tx timeout [ 349.139825] Bluetooth: hci0: command tx timeout [ 349.203825] Bluetooth: hci1: command tx timeout [ 349.396110] Bluetooth: hci2: command tx timeout [ 349.459739] Bluetooth: hci3: command tx timeout [ 349.588256] Bluetooth: hci5: command tx timeout [ 349.717726] Bluetooth: hci6: command tx timeout [ 349.781723] Bluetooth: hci7: command tx timeout [ 349.781746] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 04:19:34 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eba5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000030 R11=6666666666666666 R12=0000000000000030 R13=0000000000000001 R14=ffff888008fea060 R15=ffff8880095dee28 RIP=ffffffff8283ebfd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563571bbefc0 CR3=0000000024b06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffff0000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000000000000030336c6c696b6672 XMM04=202020093a62694c6d560a426b203820 XMM05=00000000000000000000000000000000 XMM06=202020092020202020090a426b203820 XMM07=00000000000000000000000000000000 XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8150243e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36250 RBP=ffff8880341b3780 RSP=ffff888027c3f5b8 R8 =0000000000000000 R9 =fffffbfff0c80afa R10=ffffffff864057d7 R11=ffff888014dc3c38 R12=00000000ffffffff R13=0000000000000012 R14=ffff88807ffdc680 R15=0000000000000000 RIP=ffffffff815a2e24 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f856690d000 CR3=000000000eb70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd0000000000000 XMM02=00000000000000004142e62680000000 XMM03=000000c00032e1e0000000c0003023c0 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0