Warning: Permanently added '[localhost]:59591' (ECDSA) to the list of known hosts. 2025/01/22 20:51:52 fuzzer started 2025/01/22 20:51:52 dialing manager at localhost:38529 syzkaller login: [ 70.097287] cgroup: Unknown subsys name 'net' [ 70.432113] cgroup: Unknown subsys name 'cpuset' [ 70.469347] cgroup: Unknown subsys name 'rlimit' [ 77.055272] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.682217] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 20:52:10 syscalls: 2217 2025/01/22 20:52:10 code coverage: enabled 2025/01/22 20:52:10 comparison tracing: enabled 2025/01/22 20:52:10 extra coverage: enabled 2025/01/22 20:52:10 setuid sandbox: enabled 2025/01/22 20:52:10 namespace sandbox: enabled 2025/01/22 20:52:10 Android sandbox: enabled 2025/01/22 20:52:10 fault injection: enabled 2025/01/22 20:52:10 leak checking: enabled 2025/01/22 20:52:10 net packet injection: enabled 2025/01/22 20:52:10 net device setup: enabled 2025/01/22 20:52:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 20:52:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 20:52:10 USB emulation: enabled 2025/01/22 20:52:10 hci packet injection: enabled 2025/01/22 20:52:10 wifi device emulation: enabled 2025/01/22 20:52:10 802.15.4 emulation: enabled 2025/01/22 20:52:10 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/22 20:52:10 fetching corpus: 0, signal 0/3828 (executing program) 2025/01/22 20:52:10 fetching corpus: 0, signal 0/3828 (executing program) 2025/01/22 20:52:13 starting 8 fuzzer processes 20:52:13 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}}, 0x4040814) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe568}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7c000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf4}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x29d, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x86}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x3}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f7}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x94d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x26004854}, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040020) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbde}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x33}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000007c0)={{0x0, 0x3, 0x7fff, 0x1, 0x4}, 0x8b28, 0x6}) r2 = socket$inet(0x2, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000880)={0x3, 0x2, 0xb5, 0x7fff, 0x4, 0x565, 0x40, 0x1000, 0xff, 0x7, 0x5, 0x1000, 0x7, 0xd5}) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000008c0)={{0x2, 0x4e22, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x22, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'vlan1\x00'}) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000000a40)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x1, 0x0, &(0x7f0000000ac0)={r4, r5+10000000}) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, 0x3, 0x6, 0xb1f3dfd879137de3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r8, {0xff}}, '.\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000d80)={0x0, 0x3f, 0x0, [0x2, 0x10000, 0x8, 0x4c, 0x5], [0x8000, 0x7, 0x6, 0x8, 0xd24c, 0x1, 0x100000000, 0x81, 0x5d, 0xfffffffffffffffc, 0x4, 0x9, 0x2, 0x9, 0x9, 0x3, 0x3f, 0x1000, 0xfffffffffffff000, 0x8000, 0x7fffffff, 0x10001, 0x81, 0x5, 0x8e2e, 0x2, 0x8, 0x100000001, 0x8, 0x100000001, 0x8, 0x6, 0x5, 0x5, 0x4, 0x9, 0x3, 0x6, 0x2, 0x6, 0x1ff, 0x5, 0x3, 0x20, 0xff, 0x4, 0x3, 0x1, 0x2, 0x7, 0x9, 0x0, 0x80000001, 0x2ae, 0x7, 0x7fff, 0x4, 0x80000000, 0x5, 0x1, 0x4, 0xfffffffffffffffc, 0x6, 0x4, 0xffff, 0x4, 0x101, 0x6, 0x2, 0x3, 0x1, 0x3, 0x7fff, 0xffffffffffffff65, 0x10000, 0x1, 0xa216, 0xff, 0x7, 0x2, 0x4, 0x5, 0x5, 0x75, 0xbb3, 0x7f, 0x9, 0x67, 0x1, 0x8000, 0x0, 0x3, 0x1f, 0xffff, 0x0, 0x5, 0x40, 0x1ffa, 0x3, 0x8, 0x7, 0x6, 0x5, 0x2, 0x8, 0xffffffffffffff81, 0xffffffffffffffa3, 0x7, 0x7ff, 0x4, 0x2, 0x80000000, 0x1, 0xffffffffffffff73, 0x3, 0x5, 0x9, 0x800000000000000, 0x0, 0x130d, 0x7]}) 20:52:13 executing program 1: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)=""/178, &(0x7f00000000c0)=0xb2) r0 = memfd_secret(0x80000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/47) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="afadeab5047617c0410d857231f137a9aa05df4aafa8ccd46615f622e8cdc09bccbc3e8f8345184cbd9d07964cb23bf77feb796f15adfe08cc7f487d5f1ce3ea3b8b0caf061864c21ce48a7cc0d3f00cba9394a3964d30110fde50464fcebdf2940a583f83fe681efa0e2cd6ae806039c6ebbdebc25a7bad5846166b9f8eef5093225c8e890cc8459088fa9b64bb780ee5ba44b29631fe0b0bc43270bb5d39501df856aec0d17900bc", 0xa9}, {&(0x7f0000000200)="99d6b21c700356866512af13d554de3de6dc84418d3f9b93f5d779ed4275b98a280f0e1e1228703da55378173c1df5c1eeecc125ed346198b56f8cd23710bcd81ace59cd3897b0b41c7f9bc304720b006850c1d0ba11752728fcb16681e9b084a99475a0e8376c9526a4989496504c4dfe1da417bd22c9", 0x77}, {&(0x7f0000000280)="5e4dd393d595398cb9a9eac84883d4ff95edeec83a1b350944075964b632e3b40716a50c0f144eb5600254fff2880e48fc46776943dbce5c174308f584a45aacc1ea6e1efdf9a3204d5c7f79ff8c2ef577b7b3ed80529c8a51700437d7a003d519296099950edd783405ae86fb67f1270d8869895280c8261df236132843459bd76af17b4b1061046074d2c43495ad93eab4d873accf7f5663edce94b58a77ffa19b098934c9bfb6da8179883e42978e1c60da11a91d17a5cd257d5c861994e384235a0e78e788141f342ccf94513eb659c4cbb6abb1c1e79534199dcd4a1b6c78e1", 0xe2}, {&(0x7f0000000380)="388ee8d1e2f7a091c7ee123893", 0xd}, {&(0x7f00000003c0)="2de3b2a7e1e03e43114a4c29a9256e5614a1f8d1aa422e34a63744268e39a5ae778c4e135792c0f02b5f879a9c0d647800a035dc2649cfc7e6267771141d7325b328be5f0faf3fb5f6ff25083d53fddb74cc0506c249e73f344d278128ff6540e6c763bb1919bd0982d247423554bb84cd04d781d05c7ea7ec4d02dee6a9a817f52ac1626f91ba35027f55e9296df4051253b833d885cbb6be9076ace74941c19ade1ef7f57e2b04b79315b1e5c3054a5b50df9029d98c8077e4f3acf9e21ff5d457ae066d", 0xc5}, {&(0x7f00000004c0)="c84f5fd3ace8d4ad0ed890b3b2e0c20e1c4b92ee8fe8", 0x16}, {&(0x7f0000000500)="45c2653d2d837e5522b8b71555732e4587730306377023325dcb7f4e36da10f31412295e229333869f67007a0924eced3cf2d1", 0x33}, {&(0x7f0000000540)="7ce865c26366c61b2f4501621ebedfa4c6e916c4175d9ef67ec845e51b4cef43750caafa4b9e0f1964e15061069738bff6efe2d8def3fdcef8ce489d5f47471cd5db9a97ba9e8d9f4ada92711dc3e51334", 0x51}], 0x8, 0xd8f, 0x4, 0x4) fcntl$setflags(r0, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x1f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c080}, 0x20040049) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xb164d1dfe704501d}, 0x80) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x30000, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x4) recvmmsg$unix(r4, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a80)=""/149, 0x95}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/73, 0x49}, {&(0x7f0000001d40)=""/63, 0x3f}], 0x2, &(0x7f0000001dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/148, 0x94}], 0x1, &(0x7f0000001fc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x3, 0x40000102, &(0x7f00000021c0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcefb}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x4c040) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x38, 0x0, 0x6463e3a619bc36e1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002400), 0x80, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000002440), &(0x7f0000002480)={'U-', 0xff}, 0x16, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x64, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1404d894}, 0x440c4) 20:52:13 executing program 2: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x21, @remote, 0x4e24, 0x3, 'lblc\x00', 0x23, 0x7, 0x25}, 0x2c) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x7, 0x0, 0x8, 0x0, 0xa72f, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x97, 0x0, @perf_config_ext={0x6, 0x7fff}, 0x40020, 0x7ff, 0x1f, 0x6, 0x3, 0x6d7a, 0x1f, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000500)={{0x0, 0x5, 0x2, 0xd82, 0x2, 0x0, 0x1, 0x4, 0x5a2e, 0xdea, 0x41b, 0x8, 0xffff, 0xc000000000000000, 0x7f}, 0x8, [0x0]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000580)={0x7f, 0x1f, 0x7, 0xfc00, 0x3, "302aff5f39ae18af"}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x81) r3 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x3, 0x16, 0x0, "3e20b9d648d493099a8b9a51faf1ffb08ea385f97f35a15cd374e195336e987aa468f4b631e9e3c4da6bc2ebf36e91dd51b6e0cf4fe0bcf05320dc75c73c0ebe", "f64f679f24335cf135ea8141fb4fd3744e518580d668b994f74c2d2bdadbbbe83418afa53cc13a2920fa43ff18fffbda4ce86ee561d3b81836357ed0650ab6c5", "1b6e17a3a33244c093f6c27949267d8c13b665b5dafc7fc38930ce1cb56380f5", [0x1f, 0x1]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) accept(r4, &(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000780)=0x80) write$P9_RGETLOCK(r3, &(0x7f00000007c0)={0x2f, 0x37, 0x2, {0x1, 0x9, 0x9, 0xffffffffffffffff, 0x11, '/proc/timer_list\x00'}}, 0x2f) fcntl$getflags(r2, 0xb) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000800)={r0, "eb6358de29c75e30395e7277185364dd"}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x22041000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000019c0)={0x1ff, 0x40, '\x00', 0x1, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000001a00)) 20:52:13 executing program 3: r0 = dup(0xffffffffffffffff) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xde4}}, './file0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000140)=0x5, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}]}, 0x40}}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x43}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40804}, 0x10) fsync(r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc0010}, 0x40000) r4 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000640)={0x6000200e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000680)={0x400, 0x0, 'client1\x00', 0x3, "bb35a62369d36be6", "789c7ec180c1d3fb2d202f2bc2c9d7fcb408070a481659f95c528f5b74ae94cf", 0xe0, 0x1ff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000740)={@loopback, @remote, @multicast1}, &(0x7f0000000780)=0xc) 20:52:13 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x2b8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r1, 0xc67ec62ecb6fa21b, r0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000000c0)={0x7, 0x10, [0x800, 0x1b2, 0x0, 0x9], &(0x7f0000000080)=[0x0, 0x0]}) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x184, 0x2, 0x2, 0x1, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_MASK={0xd4, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x14, 0x4, @loopback}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000850}, 0x40031) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000380)=0x10) r4 = openat2(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x40, 0x22, 0x10}, 0x18) sendmsg$nl_netfilter(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x2, 0x4, 0x201, 0x70bd28, 0x25dfdbfd, {0xc, 0x0, 0x7}, [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}}, @typed={0x4, 0x93}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000885}, 0x20004050) fcntl$getflags(r1, 0x408) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000580)={0x1, 0x7ff, 0x7ff, 0x2, 0x10, "63e4355f2a6b7b2d"}) read(r1, &(0x7f00000005c0)=""/88, 0x58) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0xc) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x181001, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r5) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000880)={0x1f, 0x1, 0x400}) [ 91.099478] audit: type=1400 audit(1737579133.958:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:52:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1, 0x1, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @private1, 0x700, 0x80, 0x10000, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x8000, 0x7, 0x7, 0x7fff, {{0x15, 0x4, 0x2, 0x5, 0x54, 0x64, 0x0, 0x40, 0x29, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x3e, 0x3, [{0x1, 0x12, "a75e37d0dbc456519ba6aa8692a31c9b"}, {0x6, 0x6, "e49a414b"}, {0x0, 0xe, "6c253970750b4bdf4acbd8e7"}, {0x2, 0x12, "e5cb99bb8f3502f8ed2c269e943cd213"}]}, @noop]}}}}}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x94}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x408c004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x140, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30eb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf4d2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd588}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x23}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4e}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) setxattr$trusted_overlay_origin(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x400040, 0x0) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000700)={0xffff, 0x3, 0x10001}) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x0, 0x8000}}, './file0\x00'}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x400, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000007c0)=[r7, r8], 0x2) syz_io_uring_setup(0x65c7, &(0x7f0000000800)={0x0, 0xa3b0, 0x1, 0x2, 0xdd, 0x0, r6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000880)=0x0, &(0x7f00000008c0)) syz_io_uring_submit(r9, 0x0, &(0x7f0000000940)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd=r7, 0x100000001, &(0x7f0000000900), 0x0, 0x9}, 0xffffffff) ioctl$CDROMRESUME(r6, 0x5302) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48880}, 0x1) 20:52:14 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d8, 0x1, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0xa0, 0xb, 0x0, 0x1, [@CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}]}, @NFQA_PAYLOAD={0xc9, 0xa, "381ef3fc47b82e260b0d692e58ac78c9c93eb79de1ce19c00eab32ad295f5cd331c0c44841cd78f60d11313dcc6ebca1a95d620ef770548851776010665ef66998048cd44e7b3137ef0bf1587efb11dda43ed3d9ae43c7e6af7674c6aa800b9ef36ab8ce6332abaefa3cfd500a9c7da5956695d7df584de7d843c9101205a1b58f72bf7b6f0ae3db3230820a86e4974361290953c5d275d6fcf4a56af3586d97f648dacfd253228aa1a40f77361cf4044048f4c4e929e0d75f8e6c408daf85dab83040b0fb"}, @NFQA_PAYLOAD={0xe, 0xa, "3242b39563bd21a3358d"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0xc0a0}, 0x40c0000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1000, 0x4b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20008800) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x805) r3 = syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x200000) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x13c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3f8, 0x2, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004) r5 = inotify_init() ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000d40)={0x10000, 0x6, 0xfffffffffffffeff}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x10000, 0x0) inotify_rm_watch(r6, 0x0) r7 = syz_io_uring_complete(0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x17c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x19, 0x5, "23e7be76f6ccb60e59a4cc71d39e2cf84ab1503f26"}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "3022d3330f51de7f50db2c48818aa73d071a32140ba32fe3658c1ec7d318d130557d43b589fd57fa243307d8ebdf135418a1bdad547d6597255663f1ec97dea12eb680ec71052538e7e05034f8bc7433d42e7245557baf5134a6ed56daac447f03913010a3807c910b59407ae3074fff5224bc3ee6f9bd5058b478978ef5ae07dd99a5607f57b2846f4c99d32e57dc812bbf960ad3518da59380c8b173ce86cbe06e77c5135cbb531acde977b98853497ba5ffc1b4601b4fadea02dfb508"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x17c}}, 0x4004) 20:52:14 executing program 7: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf8, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48020}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001880)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$P9_ROPEN(r3, &(0x7f00000018c0)={0x18, 0x71, 0x2, {{0x80, 0x3, 0x1}, 0x1}}, 0x18) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x110, 0x0, 0xe6e698a72215e62, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40001}, 0x84) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001b40), 0x400, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001b80)={@broadcast, @multicast2, 0x0}, &(0x7f0000001bc0)=0xc) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000001c00)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x2, 0x900, 0x0, 0x41000000, r6}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0x80000) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001f80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x88028021}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x204, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "41df5d8c9b2d53558a3404dffacbc4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f8e4745100"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY={0xa8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "8a58ddec7dc1ead635a6ac"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "de851c33c3a7b839e530fa5368"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "efe2eca98e0bf5ee1c3d04236a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "68fff9d6acfdc1ad787e3902c8"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7008d7746330a183243072e726"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @key_params=[@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0xf, 0x4, "ab2d2256cf4097e91ddad2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d9bc"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "0d4375bf2b7db1bc15197991d87e50d9"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]]}, 0x204}, 0x1, 0x0, 0x0, 0x8}, 0x20008000) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000002040)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={0x0}}, 0x4000000) r8 = openat2(r3, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x4000, 0x9d, 0x8}, 0x18) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f00000023c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002180)={0x1e4, r9, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) pwritev2(r7, &(0x7f0000002480)=[{&(0x7f0000002400)="7267237612d7d94a855279da5fe5f927562ecaea455f8995977759d1285dc87c305413382f6fc1fe36507b388c59000f2996f0835c8b66a9c94f98229681673487130af9dc2cb8f61a2bdf9d2612fc5023275d640437e1127866c645ea", 0x5d}], 0x1, 0xcd2, 0x81, 0x4) [ 92.713015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.717157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.724189] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.735359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.741071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.749040] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.827298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.828789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.832808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.844249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.845385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.848075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.849382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.849948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.851499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.852971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.858055] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.858943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.869678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.870172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.884779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.885316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.889343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.893446] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.898896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.901894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.902104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.909628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.911090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.913250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.914586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.916744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.918748] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.919155] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.919901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.920374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.921126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.927460] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.927497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.936471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.940380] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.946599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.951941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.953777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.958140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.010050] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.012729] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.013693] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.844175] Bluetooth: hci0: command tx timeout [ 94.907669] Bluetooth: hci1: command tx timeout [ 95.037582] Bluetooth: hci5: command tx timeout [ 95.037762] Bluetooth: hci3: command tx timeout [ 95.037923] Bluetooth: hci4: command tx timeout [ 95.038052] Bluetooth: hci2: command tx timeout [ 95.099659] Bluetooth: hci7: command tx timeout [ 95.099955] Bluetooth: hci6: command tx timeout [ 96.890826] Bluetooth: hci0: command tx timeout [ 96.955596] Bluetooth: hci1: command tx timeout [ 97.082694] Bluetooth: hci2: command tx timeout [ 97.083298] Bluetooth: hci4: command tx timeout [ 97.083329] Bluetooth: hci3: command tx timeout [ 97.083416] Bluetooth: hci5: command tx timeout [ 97.146695] Bluetooth: hci6: command tx timeout [ 97.147007] Bluetooth: hci7: command tx timeout [ 98.938875] Bluetooth: hci0: command tx timeout [ 99.002685] Bluetooth: hci1: command tx timeout [ 99.130765] Bluetooth: hci2: command tx timeout [ 99.130794] Bluetooth: hci4: command tx timeout [ 99.130886] Bluetooth: hci3: command tx timeout [ 99.132195] Bluetooth: hci5: command tx timeout [ 99.195680] Bluetooth: hci7: command tx timeout [ 99.195767] Bluetooth: hci6: command tx timeout [ 100.987924] Bluetooth: hci0: command tx timeout [ 101.050632] Bluetooth: hci1: command tx timeout [ 101.179746] Bluetooth: hci5: command tx timeout [ 101.179784] Bluetooth: hci3: command tx timeout [ 101.179890] Bluetooth: hci2: command tx timeout [ 101.179985] Bluetooth: hci4: command tx timeout [ 101.242749] Bluetooth: hci6: command tx timeout [ 101.242904] Bluetooth: hci7: command tx timeout [ 155.284282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.288731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.289919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.298768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.302670] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.305468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.534923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.540009] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.544080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.573178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.575495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.579047] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.587756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.589589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.593108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.595794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.596260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.601734] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.605166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.606254] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.607853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.609262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.615698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.616837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.707321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.713058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.717923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.735400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.742815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.744452] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.746498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.747637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.748601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.789763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.799941] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.804014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.832928] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.848926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.850432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.868716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.890355] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.892161] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.956088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.986498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.991729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.033224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.048808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.050355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.370707] Bluetooth: hci0: command tx timeout [ 157.692606] Bluetooth: hci3: command tx timeout [ 157.692642] Bluetooth: hci2: command tx timeout [ 157.754696] Bluetooth: hci1: command tx timeout [ 157.818636] Bluetooth: hci4: command tx timeout [ 157.882719] Bluetooth: hci5: command tx timeout [ 158.010736] Bluetooth: hci7: command tx timeout [ 158.074732] Bluetooth: hci6: command tx timeout [ 159.418580] Bluetooth: hci0: command tx timeout [ 159.739247] Bluetooth: hci3: command tx timeout [ 159.740749] Bluetooth: hci2: command tx timeout [ 159.802822] Bluetooth: hci1: command tx timeout [ 159.866757] Bluetooth: hci4: command tx timeout [ 159.930650] Bluetooth: hci5: command tx timeout [ 160.058905] Bluetooth: hci7: command tx timeout [ 160.123237] Bluetooth: hci6: command tx timeout [ 161.466604] Bluetooth: hci0: command tx timeout [ 161.786583] Bluetooth: hci3: command tx timeout [ 161.786651] Bluetooth: hci2: command tx timeout [ 161.850589] Bluetooth: hci1: command tx timeout [ 161.914885] Bluetooth: hci4: command tx timeout [ 161.978960] Bluetooth: hci5: command tx timeout [ 162.108613] Bluetooth: hci7: command tx timeout [ 162.170721] Bluetooth: hci6: command tx timeout [ 163.514628] Bluetooth: hci0: command tx timeout [ 163.834679] Bluetooth: hci3: command tx timeout [ 163.837536] Bluetooth: hci2: command tx timeout [ 163.898681] Bluetooth: hci1: command tx timeout [ 163.962755] Bluetooth: hci4: command tx timeout [ 164.027696] Bluetooth: hci5: command tx timeout [ 164.154842] Bluetooth: hci7: command tx timeout [ 164.219641] Bluetooth: hci6: command tx timeout [ 215.524917] [ 215.525167] ====================================================== [ 215.525778] WARNING: possible circular locking dependency detected [ 215.526379] 6.13.0-next-20250122 #1 Not tainted [ 215.526830] ------------------------------------------------------ [ 215.527934] kworker/u8:0/11 is trying to acquire lock: [ 215.529083] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.531151] [ 215.531151] but task is already holding lock: [ 215.532817] ffff888033a08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.534857] [ 215.534857] which lock already depends on the new lock. [ 215.534857] [ 215.536362] [ 215.536362] the existing dependency chain (in reverse order) is: [ 215.537061] [ 215.537061] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 215.537731] __mutex_lock+0x13d/0xb50 [ 215.538191] wiphy_register+0x1b2e/0x25d0 [ 215.538683] ieee80211_register_hw+0x23a4/0x3d60 [ 215.539219] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 215.539807] init_mac80211_hwsim+0x389/0x870 [ 215.540329] do_one_initcall+0xf9/0x640 [ 215.540816] kernel_init_freeable+0x53d/0x7a0 [ 215.541345] kernel_init+0x1e/0x2d0 [ 215.541781] ret_from_fork+0x48/0x80 [ 215.542208] ret_from_fork_asm+0x1a/0x30 [ 215.542688] [ 215.542688] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 215.543299] __lock_acquire+0x29fd/0x4580 [ 215.543782] lock_acquire+0x19b/0x520 [ 215.544229] __mutex_lock+0x13d/0xb50 [ 215.544690] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.545308] unregister_netdevice_queue+0x224/0x2e0 [ 215.545872] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.546427] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.546986] ieee80211_unregister_hw+0x55/0x3a0 [ 215.547508] hwsim_exit_net+0x3a0/0x730 [ 215.547969] ops_exit_list+0xb3/0x180 [ 215.548415] cleanup_net+0x546/0xad0 [ 215.548854] process_one_work+0x8ee/0x1a10 [ 215.549357] worker_thread+0x674/0xe70 [ 215.549837] kthread+0x3ab/0x720 [ 215.550257] ret_from_fork+0x48/0x80 [ 215.550682] ret_from_fork_asm+0x1a/0x30 [ 215.551166] [ 215.551166] other info that might help us debug this: [ 215.551166] [ 215.551908] Possible unsafe locking scenario: [ 215.551908] [ 215.552471] CPU0 CPU1 [ 215.552919] ---- ---- [ 215.553363] lock(&rdev->wiphy.mtx); [ 215.553774] lock(rtnl_mutex); [ 215.554347] lock(&rdev->wiphy.mtx); [ 215.554960] lock(rtnl_mutex); [ 215.555314] [ 215.555314] *** DEADLOCK *** [ 215.555314] [ 215.555876] 4 locks held by kworker/u8:0/11: [ 215.556309] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 215.557311] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 215.558291] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 215.559199] #3: ffff888033a08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.560218] [ 215.560218] stack backtrace: [ 215.560650] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250122 #1 [ 215.561408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 215.562189] Workqueue: netns cleanup_net [ 215.562615] Call Trace: [ 215.562866] [ 215.563090] dump_stack_lvl+0xca/0x120 [ 215.563508] print_circular_bug+0x47b/0x750 [ 215.563945] check_noncircular+0x2e9/0x3c0 [ 215.564374] ? __pfx_check_noncircular+0x10/0x10 [ 215.564848] ? hlock_class+0x4e/0x130 [ 215.565224] ? mark_lock+0xac/0xed0 [ 215.565602] ? srso_return_thunk+0x5/0x5f [ 215.566032] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 215.566495] ? lockdep_lock+0xba/0x1b0 [ 215.566906] ? __pfx_lockdep_lock+0x10/0x10 [ 215.567356] __lock_acquire+0x29fd/0x4580 [ 215.567785] ? __pfx___lock_acquire+0x10/0x10 [ 215.568235] ? lock_release+0x20f/0x6f0 [ 215.568643] ? __pfx_lock_release+0x10/0x10 [ 215.569077] lock_acquire+0x19b/0x520 [ 215.569473] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.570048] ? __pfx_lock_acquire+0x10/0x10 [ 215.570480] ? srso_return_thunk+0x5/0x5f [ 215.570906] ? lock_release+0x20f/0x6f0 [ 215.571309] ? srso_return_thunk+0x5/0x5f [ 215.571739] ? lock_is_held_type+0x9e/0x120 [ 215.572180] ? srso_return_thunk+0x5/0x5f [ 215.572614] __mutex_lock+0x13d/0xb50 [ 215.573013] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.573603] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.574176] ? srso_return_thunk+0x5/0x5f [ 215.574606] ? synchronize_rcu_expedited+0x38a/0x420 [ 215.575105] ? __pfx___mutex_lock+0x10/0x10 [ 215.575550] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.576083] ? srso_return_thunk+0x5/0x5f [ 215.576518] ? kasan_quarantine_put+0x84/0x1e0 [ 215.576998] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 215.577452] ? srso_return_thunk+0x5/0x5f [ 215.577888] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.578442] ? __virt_addr_valid+0x2e8/0x5d0 [ 215.578893] ? __pfx_lock_release+0x10/0x10 [ 215.579327] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.579918] ? find_held_lock+0x2c/0x110 [ 215.580346] ? srso_return_thunk+0x5/0x5f [ 215.580778] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 215.581280] ? srso_return_thunk+0x5/0x5f [ 215.581722] ? lock_release+0x20f/0x6f0 [ 215.582127] ? __pfx_lock_release+0x10/0x10 [ 215.582562] ? srso_return_thunk+0x5/0x5f [ 215.582992] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.583510] ? srso_return_thunk+0x5/0x5f [ 215.583951] unregister_netdevice_queue+0x224/0x2e0 [ 215.584446] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.584984] ? up_write+0x195/0x520 [ 215.585369] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.585876] ? srso_return_thunk+0x5/0x5f [ 215.586313] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.586811] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 215.587357] ? srso_return_thunk+0x5/0x5f [ 215.587790] ? srso_return_thunk+0x5/0x5f [ 215.588220] ? synchronize_rcu+0x1ff/0x260 [ 215.588646] ieee80211_unregister_hw+0x55/0x3a0 [ 215.589111] hwsim_exit_net+0x3a0/0x730 [ 215.589525] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.589976] ? srso_return_thunk+0x5/0x5f [ 215.590409] ? netdev_run_todo+0x788/0x1040 [ 215.590850] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.591301] ops_exit_list+0xb3/0x180 [ 215.591694] cleanup_net+0x546/0xad0 [ 215.592079] ? __pfx_cleanup_net+0x10/0x10 [ 215.592519] process_one_work+0x8ee/0x1a10 [ 215.592973] ? __pfx_lock_acquire+0x10/0x10 [ 215.593408] ? __pfx_process_one_work+0x10/0x10 [ 215.593896] ? srso_return_thunk+0x5/0x5f [ 215.594333] ? move_linked_works+0x172/0x270 [ 215.594778] ? srso_return_thunk+0x5/0x5f [ 215.595211] ? assign_work+0x196/0x240 [ 215.595624] worker_thread+0x674/0xe70 [ 215.596038] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.596564] ? __pfx_worker_thread+0x10/0x10 [ 215.597025] kthread+0x3ab/0x720 [ 215.597388] ? __pfx_kthread+0x10/0x10 [ 215.597803] ? srso_return_thunk+0x5/0x5f [ 215.598236] ? finish_task_switch.isra.0+0x206/0x840 [ 215.598747] ? __pfx_kthread+0x10/0x10 [ 215.599156] ret_from_fork+0x48/0x80 [ 215.599524] ? __pfx_kthread+0x10/0x10 [ 215.599933] ret_from_fork_asm+0x1a/0x30 [ 215.600371] [ 217.290323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.290902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.291363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.293381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.294656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.295139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.349178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.349846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.356185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.356239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.356699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.357849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.363702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.365200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.365792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.366076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.372002] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.372303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.416712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.421304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.421659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.421944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.422879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.423310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.423981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.424528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.425043] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.425864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.426152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.427780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.489356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.494324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.495380] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.503720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.504342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.507803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.535668] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.560770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.570374] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.570980] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.589907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.591249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.591944] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.592306] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.614000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.633990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.639697] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.645337] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.323652] Bluetooth: hci0: command tx timeout [ 219.387529] Bluetooth: hci2: command tx timeout [ 219.450702] Bluetooth: hci3: command tx timeout [ 219.450769] Bluetooth: hci4: command tx timeout [ 219.450832] Bluetooth: hci1: command tx timeout [ 219.579596] Bluetooth: hci5: command tx timeout [ 219.642628] Bluetooth: hci6: command tx timeout [ 219.773525] Bluetooth: hci7: command tx timeout [ 221.372412] Bluetooth: hci0: command tx timeout [ 221.434594] Bluetooth: hci2: command tx timeout [ 221.498604] Bluetooth: hci1: command tx timeout [ 221.498678] Bluetooth: hci4: command tx timeout [ 221.498717] Bluetooth: hci3: command tx timeout [ 221.626723] Bluetooth: hci5: command tx timeout [ 221.691560] Bluetooth: hci6: command tx timeout [ 221.819623] Bluetooth: hci7: command tx timeout [ 223.418606] Bluetooth: hci0: command tx timeout [ 223.483657] Bluetooth: hci2: command tx timeout [ 223.548619] Bluetooth: hci1: command tx timeout [ 223.549935] Bluetooth: hci3: command tx timeout [ 223.550012] Bluetooth: hci4: command tx timeout [ 223.674576] Bluetooth: hci5: command tx timeout [ 223.740552] Bluetooth: hci6: command tx timeout [ 223.866571] Bluetooth: hci7: command tx timeout [ 225.466568] Bluetooth: hci0: command tx timeout [ 225.530567] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 20:54:18 Registers: info registers vcpu 0 RAX=ffff888010b9c140 RBX=ffffffff8861e798 RCX=ffffffff81429a4a RDX=ffffffff882cb540 RSI=0000000000000001 RDI=ffff88806c296e60 RBP=ffff88806c296e60 RSP=ffff88800f0b7da0 R8 =0000000000000000 R9 =ffffed1001d55200 R10=ffff88800eaa9007 R11=0000000000000001 R12=ffff888010b9bd20 R13=ffffffff8861e798 R14=ffff88800f0a8000 R15=0000000000000086 RIP=ffffffff81aee810 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b98cdb49a8 CR3=000000000bae2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000148330000000c000148300 XMM02=000000c000148300000000c0001482d0 XMM03=000000c0000e8dc0000000c000148330 XMM04=000000c0001483c0000000c000148390 XMM05=000000c000148420000000c0001483f0 XMM06=000000c000148480000000c000148450 XMM07=000000c00014b080000000c0001484b0 XMM08=000000c0000ee990000000c0000ee960 XMM09=000000c0000ee9f0000000c0000ee9c0 XMM10=000000c0000eea50000000c0000eea20 XMM11=000000c0000eeab0000000c0000eea80 XMM12=000000c00008e5d0000000c0000eeae0 XMM13=000000c0000eeb40000000c0000eeb10 XMM14=000000c0000eeba0000000c0000eeb70 XMM15=000000c0000eec00000000c0000eebd0 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000020 R11=6f6c206863696877 R12=0000000000000020 R13=0000000000000001 R14=ffff888008fea02a R15=ffff8880095deeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb38d0cc30 CR3=000000000d032000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=0000000100000000000055b3cd88aad0 XMM05=000055b3cd867db0000055b3cd85ed60 XMM06=00000000000000000000000300000004 XMM07=00000000000000000000000000000000 XMM08=0000000000000031000055b3cd8a4100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000