syzkaller login: [ 66.271323] scp (236) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:43548' (ECDSA) to the list of known hosts. 2025/01/23 21:12:21 fuzzer started 2025/01/23 21:12:22 dialing manager at localhost:45511 [ 69.805683] cgroup: Unknown subsys name 'net' [ 69.900990] cgroup: Unknown subsys name 'cpuset' [ 69.927111] cgroup: Unknown subsys name 'rlimit' [ 75.231637] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 21:12:40 syscalls: 2217 2025/01/23 21:12:40 code coverage: enabled 2025/01/23 21:12:40 comparison tracing: enabled 2025/01/23 21:12:40 extra coverage: enabled 2025/01/23 21:12:40 setuid sandbox: enabled 2025/01/23 21:12:40 namespace sandbox: enabled 2025/01/23 21:12:40 Android sandbox: enabled 2025/01/23 21:12:40 fault injection: enabled 2025/01/23 21:12:40 leak checking: enabled 2025/01/23 21:12:40 net packet injection: enabled 2025/01/23 21:12:40 net device setup: enabled 2025/01/23 21:12:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 21:12:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 21:12:40 USB emulation: enabled 2025/01/23 21:12:40 hci packet injection: enabled 2025/01/23 21:12:40 wifi device emulation: enabled 2025/01/23 21:12:40 802.15.4 emulation: enabled 2025/01/23 21:12:40 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 21:12:42 starting 8 fuzzer processes 21:12:42 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x14440, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x42}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x5}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x6f}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r4, 0x206, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000) name_to_handle_at(r3, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@xfs_parent={0x1c, 0x82, {0x1000, 0x0, 0x4, 0xff}}, &(0x7f0000000980), 0x400) r5 = accept4$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000a40)={0x0, 0x2, 0x2, 0x5e, 0x0, [0x200, 0xfffffffa, 0xffff, 0x4]}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000ec0)={0x1, 0x1, {0x6, @struct={0x83, 0x3}, 0x0, 0x80, 0x586fd7ec, 0x2, 0x80000001, 0x100000001, 0x419, @usage=0x5, 0x7, 0x80, [0xfff, 0x4, 0xdd, 0x19, 0x7, 0x8]}, {0x7, @struct={0x2, 0x1}, 0x0, 0xfffffffffffffe01, 0x5, 0xae7, 0xfffffffffffffffd, 0x9, 0xe, @usage=0x2, 0x7, 0x800, [0x9, 0x0, 0xe3, 0x8, 0x5, 0xfffffffffffffffc]}, {0x3, @usage=0x1, 0x0, 0x5, 0x7fffffff, 0x71, 0x400, 0x1, 0xedbb5933a9dc509d, @usage=0x2, 0x5, 0x80000001, [0x3, 0x9, 0x9, 0x401, 0x8352]}, {0x4, 0x80, 0x3}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000012c0)={0x4, 0x4, {0x80000001, @struct={0x4, 0xcbfb}, r7, 0x8, 0x1, 0x1f, 0x5, 0x3, 0x1, @struct={0x8b6b, 0x101}, 0x9, 0x10000, [0x3, 0x2, 0x800, 0x2, 0x0, 0x7]}, {0xf0, @usage=0x3ff, 0x0, 0x5, 0x10000, 0x8, 0x4, 0x100000000, 0x80, @usage, 0x0, 0x7ff, [0x8000, 0x2b36b6f2, 0x3ff, 0x1, 0x0, 0xff]}, {0xfffffffffffffffa, @usage=0x1, r8, 0x0, 0xc2f7, 0x9, 0x7, 0xa3, 0x4, @usage=0x7, 0x20, 0x1000, [0x2, 0x81, 0x800000000000, 0xbe8, 0x0, 0x3]}, {0x9ad5d95, 0x80000000, 0xfff}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000016c0)) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001700)=""/181) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001800)={0x224, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x38, @dev={0xfe, 0x80, '\x00', 0x42}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xccfb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe9}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r3) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001c80)={&(0x7f0000001ac0), 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xf0, r9, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x61320b74}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x50000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xf0}}, 0x4040004) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x202040}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10154) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001dc0)={@remote, 0x3, 0x1, 0x0, 0x8, 0x5, 0x4}, 0x20) 21:12:42 executing program 1: chmod(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x42) chroot(&(0x7f0000000080)='./file0/../file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x4) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x76c8, 0x3}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x800) mount$9p_xen(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000340)={'trans=xen,', {[{@access_user}], [{@smackfshat={'smackfshat', 0x3d, '^\x8b'}}, {@permit_directio}, {@fowner_gt={'fowner>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x2}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@audit}, {@euid_lt={'euid<', 0xee01}}]}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000440)) sendto$packet(r2, &(0x7f0000000480)="0566bb869fe70769e5a60faef78adea06cfdf6bc50356b439ba200e4ab6027d205e858b86a25294a513d453ebad8862ec904000d832934e64c75", 0x3a, 0x10, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000540)=0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x4, &(0x7f0000000580)={[], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r4}}]}) syz_io_uring_setup(0x655a, &(0x7f0000000600)={0x0, 0xed1b, 0x10, 0x2, 0x2d4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x8010, 0xffffffffffffffff, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'}) syz_io_uring_submit(r5, r6, &(0x7f0000000780)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r7, 0x0, &(0x7f0000000740)="041549d7a17d6927e1194147b81b8096ca83155da00e4bcaaf2c28c73da9ced86ea6", 0x22, 0x40010002, 0x1}, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000800)={r2, 0x6, 0x7501, 0x10000}) ioctl$CDROMPLAYMSF(r9, 0x5303, &(0x7f0000000840)={0x81, 0xa0, 0x1, 0x9, 0x3, 0x2}) 21:12:42 executing program 2: sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd91}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c878) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x194, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x71}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x1, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x305}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}]}, 0x68}}, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x80) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x100010, r2, 0x8000000) r4 = signalfd(r2, &(0x7f0000000840)={[0x1]}, 0x8) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x281000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x16}, 0x20008000) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x39}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x412, 0x3, 0x6, 0x0, {0x9, 0x1873, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x1, 0x6}}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x643}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xb0}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x6000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'gre0\x00'}) execveat(r2, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d80)=[&(0x7f0000000d00)='@[\',/*&-.].\x00', &(0x7f0000000d40)='{#+\x00'], &(0x7f0000000f00)=[&(0x7f0000000dc0)='\x00', &(0x7f0000000e00)='gre0\x00', &(0x7f0000000e40)='wpan0\x00', &(0x7f0000000e80)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000ec0)=',@@\x81+\x00'], 0x1000) fcntl$getown(r4, 0x9) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000f40), &(0x7f0000000f80)={0x0, 0xfb, 0x6c, 0x2, 0x20, "4bfd6df667b18051226150195224d814", "f682f2a06a21ac21d9c4de62c1bed6a8358387807d6767a9a74871421a7beaaef37a33d411125cbb9efd7747bd03fe1faf92ce04fc77a8ac1eb4ed3c900f4d1d3739f986913bfa0e2b177b0dc245e1ef0b5ef46ea79322"}, 0x6c, 0x1) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000001000)=0x2) 21:12:42 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400240, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x40, 0x80000001, 0x4a, @empty, @remote, 0x80, 0x700, 0xb1c9}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000001900)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001ac0)={'erspan0\x00', &(0x7f0000001a00)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x5, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x67, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x59, 0x3, [{0x2, 0xb, "e228db0d4916308b7e"}, {0x6, 0x12, "6b9497ec0a76578838590e60f12e107a"}, {0x7, 0x11, "fdb81459d563d0a9ff206638d599ef"}, {0x7, 0xe, "354c155ac9c9b2ae7c2e240f"}, {0x1, 0x11, "5a61b25cba0f8ac0541e29756379ba"}, {0x0, 0x6, "4a7bdfaf"}]}, @rr={0x7, 0x7, 0x34, [@multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xf0, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001dc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "aee17d9af985f0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002dc0)={r6, 0x0, "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", "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"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000003dc0), 0x80800, 0x0) bind$802154_dgram(r0, &(0x7f0000003e00)={0x24, @short={0x2, 0x2}}, 0x14) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003e40), 0x400, 0x0) ioctl$SG_SCSI_RESET(r7, 0x2284, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000003e80)) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000005040), 0x113500, 0x0) fsetxattr(r8, &(0x7f0000005080)=@random={'security.', '.\x00'}, &(0x7f00000050c0)='/dev/rtc0\x00', 0xa, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000005140)={{0x1, 0x1, 0x18, r9, {0x7}}, './file0\x00'}) ioctl$RTC_PLL_SET(r10, 0x40207012, &(0x7f0000005180)={0x4, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x7}) 21:12:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@private=0xa010102, @local, 0x0, 0x2, [@rand_addr=0x64010102, @multicast1]}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) close_range(r3, r2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0xc110) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x101040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) ioctl$LOOP_CLR_FD(r4, 0x4c01) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x3b5200, 0x0) copy_file_range(r6, &(0x7f00000004c0)=0x2, 0xffffffffffffffff, &(0x7f0000000500)=0x9, 0x77d, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000580)=0x3f) [ 89.780311] audit: type=1400 audit(1737666762.757:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:12:42 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x9001, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff863}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xabf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9fa}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffc038}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3dc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff001}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x5895644a}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x80) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f8, 0x100, 0x4800, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000801}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x10c, 0x0, 0x325, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb827}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4e62}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x40}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x10000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40048c1}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x860}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000811}, 0x4001) recvmmsg$unix(r1, &(0x7f0000002680)=[{{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/24, 0x18}], 0x1, &(0x7f0000000a80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000ac0)=""/122, 0x7a}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/245, 0xf5}, {&(0x7f0000001c40)=""/63, 0x3f}, {&(0x7f0000001c80)=""/236, 0xec}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/115, 0x73}], 0x7, &(0x7f0000001ec0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001fc0)=""/167, 0xa7}, {&(0x7f0000002080)=""/73, 0x49}, {&(0x7f0000002100)=""/40, 0x28}, {&(0x7f0000002140)=""/158, 0x9e}, {&(0x7f0000002200)=""/154, 0x9a}, {&(0x7f00000022c0)=""/224, 0xe0}, {&(0x7f00000023c0)=""/162, 0xa2}, {&(0x7f0000002480)=""/125, 0x7d}, {&(0x7f0000002500)=""/74, 0x4a}], 0x9, &(0x7f0000002640)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x10140, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002780), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x1410400}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x24, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf14c23771e5f2bd}, 0x20048011) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002880)={r9, 0x80000000000000, 0x0, 0x20}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x4c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xab5}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4c055) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20000854) connect$netlink(r5, &(0x7f0000002b00)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) pipe2(&(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184800) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x8c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1e}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80c4}, 0x40800) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000002f00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x158, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}]}, 0x158}}, 0x40000814) 21:12:42 executing program 7: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x81000) listen(r0, 0x474) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x8, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb234, 0x3}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x76}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='macvtap0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x1, 0x10001, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x3f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdc, [@empty]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x2, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000004) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'sit0\x00', r3, 0x29, 0x8, 0xda, 0x7, 0x40, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7, 0x4, 0xf3f}}) getpeername$netlink(r2, &(0x7f0000000600), &(0x7f0000000640)=0xc) r4 = openat$cgroup_subtree(r2, &(0x7f0000000680), 0x2, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001a00)={0x53, 0xffffffffffffffff, 0xe7, 0x3f, @scatter={0x2, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/169, 0xa9}]}, &(0x7f00000008c0)="a45461ab3414507568647ef014222142507db38b982720b53e34c48358a238dd84409235e1b0d7bf9678724f7fcdec9c00f75b4e165aa88347c86ee98a63107d4514d9d90f2fd510c921afcc84e3f566170a8211f8352aea55884049904becc957d56ff7fe412126a3001cc688eaa8a18b56fa27b65add65a69f0ddf5ecd06188a02e7924a165227b6fe06239f298cfb9d6a0a9fb9f1b67f1dfe75a24d832aed5ca3be57a44c4d6473221e1c40db4aa84f868b75a51e0621e147761aad687841414ba8a29539146764c94862593f9b023b61e6d664d69cd98feffbdc2c6d2da6e2e40966169394", &(0x7f00000009c0)=""/4096, 0x0, 0x20, 0x2, &(0x7f00000019c0)}) r6 = socket$inet(0x2, 0x800, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000001a80)={{0x0, @remote, 0x4e24, 0x2, 'ovf\x00', 0x44, 0xfffffff8, 0x33}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4e20, 0x3, 0x8, 0x101, 0x2}}, 0x44) lsetxattr$security_evm(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), &(0x7f0000001b80)=@v1={0x2, "36b2ef7249d1e4256846"}, 0xb, 0x1) 21:12:42 executing program 6: sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c804}, 0x40000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x631}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xc5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000002c0), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4d4, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x800, 0x3f, 0x1c70, 0x7fff, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x1, 0x6, 0x3ff, 0x5, 0x1, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0xc, 0xb, 0x2, 0x6, 0xa, 0x18, 0x30, 0xb, 0x0, 0x2, 0x16, 0x60, 0x2d, 0x1, 0x6c, 0x48, 0x6f, 0x33, 0x12, 0x12, 0x16, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4c, 0x9, 0x4, 0xfff, 0x5, 0x3ff, 0x1]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf578, 0xfff7, 0x40, 0x1, 0xff, 0x20, 0x2]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x6c, 0x18, 0x16, 0x0, 0x9]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x8}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x3}, {0x6, 0x3}, {0x4}, {0x5, 0x3}, {}, {0x4, 0x4}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x4}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0xa}, {0x5, 0x1f}, {0x0, 0xa}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x1}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x6}, {0x2, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0x9}, {0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x4}, {0x6, 0x6}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x4}, {0x6, 0xa}, {0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x4, 0x9}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x2, 0x9, 0x6c, 0x50, 0x16, 0x48, 0x6, 0x5, 0x18, 0xb, 0x12, 0x2, 0x48, 0x6, 0x5, 0x0, 0x30, 0x12, 0x48]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x6}, {0x7, 0x5}, {}, {0x4, 0xa}, {0x2, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x7}, {0x5, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f9f, 0x1, 0x673, 0x4, 0xb, 0xcf9b, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x30, 0x24, 0x12, 0x60, 0x1b, 0x6c, 0x16, 0x24, 0x1, 0x48, 0x1, 0x24, 0x3, 0x30, 0x60, 0xb, 0x2, 0x16, 0x1, 0x6, 0xc, 0x24, 0x2, 0x9, 0x12, 0x6c, 0x2, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x294, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x48, 0x5, 0x4, 0x1, 0x30, 0x48, 0x1, 0x48, 0x36, 0x30, 0x12, 0x36, 0xb, 0x2, 0x12, 0x6, 0x1, 0x6c, 0x4, 0xc, 0x18, 0x6c, 0x9, 0x36, 0x30]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x7}, {0x4, 0x7}, {0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x7}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x4}, {0x4, 0x9}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x9}, {0x6}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x7}, {0x4}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x8}, {0x2, 0xa}, {0x6, 0x6}, {0x7, 0x6}, {0x3, 0x9}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x3, 0x8, 0x3, 0x2, 0xee50, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x3, 0x60, 0x4, 0x0, 0x6, 0x16, 0x1b, 0x1, 0x6c, 0x6c, 0x6c, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xf9dc, 0x3, 0x9, 0xac0, 0x709d, 0x8, 0x3c49]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0x7f, 0xffff, 0x8, 0x5, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbcd, 0x1, 0x840, 0xc2, 0x9, 0x0, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x7}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0x5}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x7}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x5}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x2, 0x12, 0x48, 0x36, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x4, 0x2}, {0x1}, {0x7, 0xa}, {0x6, 0x7}, {0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x7}, {0x1, 0x1}, {0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x6}, {0x4, 0xa}, {0x5, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x8}, {0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x6, 0x4, 0x18, 0x6c, 0x12, 0x9, 0x4]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x13}, {0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x9}, {0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x4}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x3, 0x6}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x8, 0x9, 0x8, 0xb2, 0x3f, 0x5c8b]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x6c, 0x9, 0x6, 0xc, 0xc, 0x6c, 0x13, 0x36, 0x48, 0x48, 0x24, 0x60, 0x12, 0x30, 0x6c, 0x5, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6}, {0x5, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x9}, {0x1}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x7}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x4}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x2, 0x48, 0x60, 0x60, 0xc3, 0x6]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000010}, 0x801) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x40400, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x8fa9, 0x56}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000c00)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044881}, 0x44011) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x1054) r9 = signalfd(r3, &(0x7f0000001000)={[0x100]}, 0x8) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r0, 0x401, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x881}, 0x94) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) [ 91.265940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.269556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.274015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.277039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.280163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.280263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.286161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.291324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.293019] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.301954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.307942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.325399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.340824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.347971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.352372] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.383779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.397721] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.403298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.406369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.410255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.412955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.414718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.419674] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.421167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.424363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.426519] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.432708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.434013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.441114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.444950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.447074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.450196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.456033] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.471923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.474156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.478764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.487053] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.490999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.502529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.538975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.539206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.548840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.550699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.550964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.555342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.556569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.574163] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.579962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.342247] Bluetooth: hci1: command tx timeout [ 93.405511] Bluetooth: hci0: command tx timeout [ 93.469589] Bluetooth: hci3: command tx timeout [ 93.533588] Bluetooth: hci4: command tx timeout [ 93.534486] Bluetooth: hci2: command tx timeout [ 93.597526] Bluetooth: hci7: command tx timeout [ 93.661832] Bluetooth: hci5: command tx timeout [ 93.662501] Bluetooth: hci6: command tx timeout [ 95.390301] Bluetooth: hci1: command tx timeout [ 95.453560] Bluetooth: hci0: command tx timeout [ 95.518169] Bluetooth: hci3: command tx timeout [ 95.581672] Bluetooth: hci2: command tx timeout [ 95.582214] Bluetooth: hci4: command tx timeout [ 95.645619] Bluetooth: hci7: command tx timeout [ 95.708719] Bluetooth: hci6: command tx timeout [ 95.709229] Bluetooth: hci5: command tx timeout [ 97.438198] Bluetooth: hci1: command tx timeout [ 97.502602] Bluetooth: hci0: command tx timeout [ 97.565533] Bluetooth: hci3: command tx timeout [ 97.629677] Bluetooth: hci4: command tx timeout [ 97.630184] Bluetooth: hci2: command tx timeout [ 97.693804] Bluetooth: hci7: command tx timeout [ 97.756644] Bluetooth: hci5: command tx timeout [ 97.757143] Bluetooth: hci6: command tx timeout [ 99.485993] Bluetooth: hci1: command tx timeout [ 99.549526] Bluetooth: hci0: command tx timeout [ 99.613625] Bluetooth: hci3: command tx timeout [ 99.677694] Bluetooth: hci4: command tx timeout [ 99.678246] Bluetooth: hci2: command tx timeout [ 99.742462] Bluetooth: hci7: command tx timeout [ 99.805599] Bluetooth: hci6: command tx timeout [ 99.806084] Bluetooth: hci5: command tx timeout [ 150.739130] syz-executor.1 (280) used greatest stack depth: 24016 bytes left [ 153.193056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.197762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.201787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.202832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.206907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.211328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.213032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.215987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.216913] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.220818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.224519] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.227539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.254976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.258630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.259580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.267177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.268599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.273146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.274584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.277265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.280081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.285403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.297010] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.299958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.347017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.349888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.355820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.357861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.359820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.360795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.376683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.377599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.383848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.384937] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.390315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.390378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.399007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.407571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.414583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.418181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.419575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.425475] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.430040] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.433009] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.437641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.439270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.445718] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.447755] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.292543] Bluetooth: hci1: command tx timeout [ 155.292614] Bluetooth: hci0: command tx timeout [ 155.356691] Bluetooth: hci3: command tx timeout [ 155.356861] Bluetooth: hci2: command tx timeout [ 155.484726] Bluetooth: hci7: command tx timeout [ 155.486115] Bluetooth: hci6: command tx timeout [ 155.487085] Bluetooth: hci4: command tx timeout [ 155.487195] Bluetooth: hci5: command tx timeout [ 157.341205] Bluetooth: hci1: command tx timeout [ 157.341229] Bluetooth: hci0: command tx timeout [ 157.405522] Bluetooth: hci2: command tx timeout [ 157.405785] Bluetooth: hci3: command tx timeout [ 157.533504] Bluetooth: hci5: command tx timeout [ 157.533787] Bluetooth: hci4: command tx timeout [ 157.534025] Bluetooth: hci6: command tx timeout [ 157.534922] Bluetooth: hci7: command tx timeout [ 159.389516] Bluetooth: hci1: command tx timeout [ 159.390302] Bluetooth: hci0: command tx timeout [ 159.453369] Bluetooth: hci3: command tx timeout [ 159.454182] Bluetooth: hci2: command tx timeout [ 159.581729] Bluetooth: hci6: command tx timeout [ 159.582384] Bluetooth: hci4: command tx timeout [ 159.583257] Bluetooth: hci5: command tx timeout [ 159.583348] Bluetooth: hci7: command tx timeout [ 161.436820] Bluetooth: hci0: command tx timeout [ 161.436863] Bluetooth: hci1: command tx timeout [ 161.500684] Bluetooth: hci3: command tx timeout [ 161.502166] Bluetooth: hci2: command tx timeout [ 161.628593] Bluetooth: hci5: command tx timeout [ 161.629118] Bluetooth: hci7: command tx timeout [ 161.629800] Bluetooth: hci4: command tx timeout [ 161.630276] Bluetooth: hci6: command tx timeout [ 215.537245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.553018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.554475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.560043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.562173] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.563533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.780651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.781810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.782920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.788457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.789927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.790846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.850793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.852308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.854862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.865005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.867129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.868356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.924074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.943348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.945712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.950728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.952083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.953011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.008737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.011920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.022670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.044888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.061798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.073733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.155890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.197040] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.201085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.247456] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.264842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.265841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.297588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.301976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.319214] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.323075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.329875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.331472] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.332506] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.349689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.375701] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.426651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.497926] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.499930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.628477] Bluetooth: hci0: command tx timeout [ 217.820651] Bluetooth: hci1: command tx timeout [ 217.884844] Bluetooth: hci2: command tx timeout [ 218.012493] Bluetooth: hci3: command tx timeout [ 218.140520] Bluetooth: hci4: command tx timeout [ 218.332612] Bluetooth: hci5: command tx timeout [ 218.462495] Bluetooth: hci6: command tx timeout [ 218.654497] Bluetooth: hci7: command tx timeout [ 219.677238] Bluetooth: hci0: command tx timeout [ 219.869703] Bluetooth: hci1: command tx timeout [ 219.932492] Bluetooth: hci2: command tx timeout [ 220.061506] Bluetooth: hci3: command tx timeout [ 220.189769] Bluetooth: hci4: command tx timeout [ 220.381453] Bluetooth: hci5: command tx timeout [ 220.509520] Bluetooth: hci6: command tx timeout [ 220.700596] Bluetooth: hci7: command tx timeout [ 221.724554] Bluetooth: hci0: command tx timeout [ 221.917723] Bluetooth: hci1: command tx timeout [ 221.981513] Bluetooth: hci2: command tx timeout [ 222.108469] Bluetooth: hci3: command tx timeout [ 222.236768] Bluetooth: hci4: command tx timeout [ 222.429644] Bluetooth: hci5: command tx timeout [ 222.556451] Bluetooth: hci6: command tx timeout [ 222.748475] Bluetooth: hci7: command tx timeout [ 223.773562] Bluetooth: hci0: command tx timeout [ 223.964471] Bluetooth: hci1: command tx timeout [ 224.028442] Bluetooth: hci2: command tx timeout [ 224.157476] Bluetooth: hci3: command tx timeout [ 224.284591] Bluetooth: hci4: command tx timeout [ 224.476778] Bluetooth: hci5: command tx timeout [ 224.604654] Bluetooth: hci6: command tx timeout [ 224.798496] Bluetooth: hci7: command tx timeout [ 275.885015] [ 275.885253] ====================================================== [ 275.885767] WARNING: possible circular locking dependency detected [ 275.886282] 6.13.0-next-20250123 #1 Not tainted [ 275.886676] ------------------------------------------------------ [ 275.887183] kworker/u8:0/11 is trying to acquire lock: [ 275.888127] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.890291] [ 275.890291] but task is already holding lock: [ 275.891523] ffff888025a78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 275.893834] [ 275.893834] which lock already depends on the new lock. [ 275.893834] [ 275.895562] [ 275.895562] the existing dependency chain (in reverse order) is: [ 275.896166] [ 275.896166] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 275.896732] __mutex_lock+0x13d/0xb50 [ 275.897146] wiphy_register+0x1b2e/0x25d0 [ 275.897577] ieee80211_register_hw+0x23a4/0x3d60 [ 275.898046] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 275.898538] init_mac80211_hwsim+0x389/0x870 [ 275.898992] do_one_initcall+0xf9/0x640 [ 275.899412] kernel_init_freeable+0x53d/0x7a0 [ 275.899868] kernel_init+0x1e/0x2d0 [ 275.900241] ret_from_fork+0x48/0x80 [ 275.900614] ret_from_fork_asm+0x1a/0x30 [ 275.901047] [ 275.901047] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 275.901573] __lock_acquire+0x29fd/0x4580 [ 275.901995] lock_acquire+0x19b/0x520 [ 275.902386] __mutex_lock+0x13d/0xb50 [ 275.902781] unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.903317] unregister_netdevice_queue+0x224/0x2e0 [ 275.903797] _cfg80211_unregister_wdev+0x57b/0x700 [ 275.904282] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 275.904761] ieee80211_unregister_hw+0x55/0x3a0 [ 275.905224] hwsim_exit_net+0x3a0/0x730 [ 275.905631] ops_exit_list+0xb3/0x180 [ 275.906017] cleanup_net+0x546/0xad0 [ 275.906404] process_one_work+0x8ee/0x1a10 [ 275.906842] worker_thread+0x674/0xe70 [ 275.907254] kthread+0x3ab/0x720 [ 275.907621] ret_from_fork+0x48/0x80 [ 275.907993] ret_from_fork_asm+0x1a/0x30 [ 275.908418] [ 275.908418] other info that might help us debug this: [ 275.908418] [ 275.909074] Possible unsafe locking scenario: [ 275.909074] [ 275.909568] CPU0 CPU1 [ 275.909954] ---- ---- [ 275.910339] lock(&rdev->wiphy.mtx); [ 275.910680] lock(rtnl_mutex); [ 275.911170] lock(&rdev->wiphy.mtx); [ 275.911707] lock(rtnl_mutex); [ 275.912011] [ 275.912011] *** DEADLOCK *** [ 275.912011] [ 275.912507] 4 locks held by kworker/u8:0/11: [ 275.912896] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 275.913774] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 275.914618] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 275.915399] #3: ffff888025a78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 275.916275] [ 275.916275] stack backtrace: [ 275.916646] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250123 #1 [ 275.916683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.916706] Workqueue: netns cleanup_net [ 275.916748] Call Trace: [ 275.916758] [ 275.916769] dump_stack_lvl+0xca/0x120 [ 275.916827] print_circular_bug+0x47b/0x750 [ 275.916883] check_noncircular+0x2e9/0x3c0 [ 275.916925] ? __pfx_check_noncircular+0x10/0x10 [ 275.916966] ? hlock_class+0x4e/0x130 [ 275.916997] ? mark_lock+0xac/0xed0 [ 275.917038] ? srso_return_thunk+0x5/0x5f [ 275.917098] ? lockdep_lock+0xba/0x1b0 [ 275.917155] ? __pfx_lockdep_lock+0x10/0x10 [ 275.917217] __lock_acquire+0x29fd/0x4580 [ 275.917271] ? __pfx___lock_acquire+0x10/0x10 [ 275.917314] ? lock_release+0x20f/0x6f0 [ 275.917359] ? __pfx_lock_release+0x10/0x10 [ 275.917407] lock_acquire+0x19b/0x520 [ 275.917450] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.917499] ? __pfx_lock_acquire+0x10/0x10 [ 275.917544] ? srso_return_thunk+0x5/0x5f [ 275.917600] ? lock_release+0x20f/0x6f0 [ 275.917644] ? srso_return_thunk+0x5/0x5f [ 275.917700] ? lock_is_held_type+0x9e/0x120 [ 275.917755] ? srso_return_thunk+0x5/0x5f [ 275.917815] __mutex_lock+0x13d/0xb50 [ 275.917868] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.917914] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.917961] ? srso_return_thunk+0x5/0x5f [ 275.918017] ? synchronize_rcu_expedited+0x38a/0x420 [ 275.918061] ? __pfx___mutex_lock+0x10/0x10 [ 275.918116] ? __pfx_autoremove_wake_function+0x10/0x10 [ 275.918170] ? srso_return_thunk+0x5/0x5f [ 275.918226] ? kasan_quarantine_put+0x84/0x1e0 [ 275.918287] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 275.918322] ? srso_return_thunk+0x5/0x5f [ 275.918383] unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.918429] ? __virt_addr_valid+0x2e8/0x5d0 [ 275.918482] ? __pfx_lock_release+0x10/0x10 [ 275.918527] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.918574] ? find_held_lock+0x2c/0x110 [ 275.918632] ? srso_return_thunk+0x5/0x5f [ 275.918690] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 275.918751] ? srso_return_thunk+0x5/0x5f [ 275.918807] ? lock_release+0x20f/0x6f0 [ 275.918851] ? __pfx_lock_release+0x10/0x10 [ 275.918894] ? srso_return_thunk+0x5/0x5f [ 275.918950] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.918997] ? srso_return_thunk+0x5/0x5f [ 275.919058] unregister_netdevice_queue+0x224/0x2e0 [ 275.919103] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.919147] ? up_write+0x195/0x520 [ 275.919202] _cfg80211_unregister_wdev+0x57b/0x700 [ 275.919255] ? srso_return_thunk+0x5/0x5f [ 275.919315] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 275.919354] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 275.919394] ? srso_return_thunk+0x5/0x5f [ 275.919450] ? srso_return_thunk+0x5/0x5f [ 275.919506] ? synchronize_rcu+0x1ff/0x260 [ 275.919548] ieee80211_unregister_hw+0x55/0x3a0 [ 275.919594] hwsim_exit_net+0x3a0/0x730 [ 275.919636] ? __pfx_hwsim_exit_net+0x10/0x10 [ 275.919678] ? srso_return_thunk+0x5/0x5f [ 275.919734] ? netdev_run_todo+0x788/0x1040 [ 275.919782] ? srso_return_thunk+0x5/0x5f [ 275.919839] ? __pfx_hwsim_exit_net+0x10/0x10 [ 275.919883] ops_exit_list+0xb3/0x180 [ 275.919926] cleanup_net+0x546/0xad0 [ 275.919972] ? __pfx_cleanup_net+0x10/0x10 [ 275.920026] process_one_work+0x8ee/0x1a10 [ 275.920092] ? __pfx_lock_acquire+0x10/0x10 [ 275.920136] ? __pfx_process_one_work+0x10/0x10 [ 275.920195] ? srso_return_thunk+0x5/0x5f [ 275.920251] ? move_linked_works+0x172/0x270 [ 275.920295] ? srso_return_thunk+0x5/0x5f [ 275.920351] ? assign_work+0x196/0x240 [ 275.920409] worker_thread+0x674/0xe70 [ 275.920467] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.920519] ? __pfx_worker_thread+0x10/0x10 [ 275.920579] kthread+0x3ab/0x720 [ 275.920631] ? __pfx_kthread+0x10/0x10 [ 275.920683] ? srso_return_thunk+0x5/0x5f [ 275.920739] ? finish_task_switch.isra.0+0x206/0x840 [ 275.920790] ? __pfx_kthread+0x10/0x10 [ 275.920844] ret_from_fork+0x48/0x80 [ 275.920883] ? __pfx_kthread+0x10/0x10 [ 275.920935] ret_from_fork_asm+0x1a/0x30 [ 275.921002] [ 277.610567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.617855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.620338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.626113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.631149] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.633120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.733202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.735331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.738528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.741744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.743926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.746248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.929354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.939764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.942589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.944093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.947650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.955764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.958654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.958819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.963744] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.963762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.964061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.971633] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.973342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.976310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.985943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.005714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.017912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.023221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.023795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.027633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.029512] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.032766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.035715] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.037216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.040012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.054184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.057730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.061298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.068669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.076653] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.080657] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.110759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.112139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.125357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.132593] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.134995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.644432] Bluetooth: hci0: command tx timeout [ 279.773429] Bluetooth: hci1: command tx timeout [ 280.092465] Bluetooth: hci3: command tx timeout [ 280.092481] Bluetooth: hci2: command tx timeout [ 280.092905] Bluetooth: hci6: command tx timeout [ 280.156455] Bluetooth: hci7: command tx timeout [ 280.156517] Bluetooth: hci4: command tx timeout [ 280.220432] Bluetooth: hci5: command tx timeout [ 281.692489] Bluetooth: hci0: command tx timeout [ 281.820520] Bluetooth: hci1: command tx timeout [ 282.141493] Bluetooth: hci6: command tx timeout [ 282.141552] Bluetooth: hci2: command tx timeout [ 282.141969] Bluetooth: hci3: command tx timeout [ 282.205434] Bluetooth: hci4: command tx timeout [ 282.205885] Bluetooth: hci7: command tx timeout [ 282.269442] Bluetooth: hci5: command tx timeout [ 283.741477] Bluetooth: hci0: command tx timeout [ 283.868498] Bluetooth: hci1: command tx timeout [ 284.188614] Bluetooth: hci2: command tx timeout [ 284.189114] Bluetooth: hci6: command tx timeout [ 284.189358] Bluetooth: hci3: command tx timeout [ 284.253448] Bluetooth: hci4: command tx timeout [ 284.253920] Bluetooth: hci7: command tx timeout [ 284.316923] Bluetooth: hci5: command tx timeout [ 285.788529] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 21:15:49 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283ea10 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec98 R8 =0000000000000001 R9 =ffffed10012bbd84 R10=0000000000000000 R11=3038383866666666 R12=000000000000006b R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283ea65 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb610997430 CR3=0000000016426000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416cbda400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888011dad988 RBX=ffff888011d78cb8 RCX=ffffffff81429a4a RDX=ffff888011c2e6f8 RSI=0000000000000001 RDI=ffff888011d7c488 RBP=ffff888011d7c488 RSP=ffff88800bf6fda0 R8 =0000000000000000 R9 =ffffed1001e56100 R10=ffff88800f2b0807 R11=0000000000000001 R12=ffff888011db2630 R13=ffff888011d78cb8 R14=ffff88800bf60000 R15=0000000000000086 RIP=ffffffff81aeebf0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e7de711e70 CR3=00000000131da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2038343a35313a3132203332206e614a XMM01=617420646570706f7453203a5d315b64 XMM02=6c6c694b20465220657661532f64616f XMM03=65747379732072656c6c616b7a797320 XMM04=2032343a32313a3132203332206e614a XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000