Warning: Permanently added '[localhost]:31054' (ECDSA) to the list of known hosts. 2025/01/23 21:29:15 fuzzer started 2025/01/23 21:29:15 dialing manager at localhost:45511 syzkaller login: [ 63.338224] cgroup: Unknown subsys name 'net' [ 63.438454] cgroup: Unknown subsys name 'cpuset' [ 63.465385] cgroup: Unknown subsys name 'rlimit' [ 69.328865] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.348441] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 21:29:32 syscalls: 2217 2025/01/23 21:29:32 code coverage: enabled 2025/01/23 21:29:32 comparison tracing: enabled 2025/01/23 21:29:32 extra coverage: enabled 2025/01/23 21:29:32 setuid sandbox: enabled 2025/01/23 21:29:32 namespace sandbox: enabled 2025/01/23 21:29:32 Android sandbox: enabled 2025/01/23 21:29:32 fault injection: enabled 2025/01/23 21:29:32 leak checking: enabled 2025/01/23 21:29:32 net packet injection: enabled 2025/01/23 21:29:32 net device setup: enabled 2025/01/23 21:29:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 21:29:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 21:29:32 USB emulation: enabled 2025/01/23 21:29:32 hci packet injection: enabled 2025/01/23 21:29:32 wifi device emulation: enabled 2025/01/23 21:29:32 802.15.4 emulation: enabled 2025/01/23 21:29:32 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 21:29:32 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 21:29:32 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 21:29:32 fetching corpus: 0, signal 0/6018 (executing program) 2025/01/23 21:29:32 fetching corpus: 0, signal 0/6018 (executing program) 2025/01/23 21:29:35 starting 8 fuzzer processes 21:29:35 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x72f57ab9, 0x3f}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x6c, 0x0, '\x00', [@enc_lim]}, 0x10) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0xadd) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) write$hidraw(r0, &(0x7f0000000080)="98b5243af50fc1d6f6324f5f30c513c2cb5562a1e2e90d77122c3aa00a575d13b1e5930d0aa00e3ea2a265a6eaa969012dfeb71bac6da8175c08d454fc52539223d12ddcd6a95aa573f81f", 0x4b) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x2e, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8000}]}, 0x18) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) clone(0xec888000, &(0x7f0000000180)="99e57832c9a538f7940a8fdd0c036eda891a2680009a64d43e", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="95f2f549612dade4b2d0ddf11dae071889d14608208f6c8f8bce410128d688230bc4394a9aebe2669e9de8d90b7b5d75aa5a20df394d628d8a3780c59d6a352949ca47794666ae4348a8d27232e249e77b5579f8f94ee0289f67a9ea829e559429e69badf60966fe0e566b34c672") r1 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x24000, 0xd) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x20) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000380)=0x5) r2 = syz_io_uring_complete(0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000640)={{}, {0x2}, 0x9, 0x0, 0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)="de5250f32068e50b9fe37f825a35db2e3ec6d73bc05c3b906ac9b067916a671eb87c252af9ffada146236da018bf1b3a43f8200eee53f1f9f3299bf371c11aeb81c211d4f55526ec8262193cf3715af9eddd614b2e346c8ec7760e21562650", 0x5f, 0x0, &(0x7f00000004c0)={0x2, 0xff, {0x0, 0xc, 0xf2, "426f4011db4560ef19f388a78bc20d93ebfe909f050d242801e6add8352b12ebde9f1929c2b6f39ccd28f6db2ee2c02bd306001549a913c827b8800fe976a72f125fc888880338e667f57ec790fd641ed53f4571d095668e81fd19aed2d3e3c336a42039a8e69827232d70f82d3105d32868eec87e6bba9bf5d60e0b6217fd8650c884967e0ade0f1c4c67b90bf13dac801c9f994fb38448688689a982b17d2816d126890fd7cb1a707de5876aadfbf4bce15df276a2548711b2d7996c4b34e09392158be62e5c42915ddc9ddad75dd12b5fd5a3a5ffa5926da5f2e6bfd8cc0b669e8574d148a72f3b69d4bb116a7c4de6f7"}, 0x4c, "cb2a8d99bca1c0917d1b839a12e10ff49988eff63437446cf43dfe45de1b9bf56be1efb3585de5bb5334aa5a9482944f6e51d5e6997db52649c0f3f728eb6fcad782095db3c51c2f0b97b3f6"}, 0x157}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) preadv2(r1, &(0x7f0000001ac0)=[{&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/155, 0x9b}, {&(0x7f0000001900)=""/254, 0xfe}, {&(0x7f0000001a00)=""/184, 0xb8}], 0x7, 0xfff, 0x9, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001b40)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x78}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40005) 21:29:35 executing program 1: sysfs$1(0x1, &(0x7f0000000000)=']{-*${,f@$:\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x361}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf86}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x20008041) keyctl$invalidate(0x15, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x48800) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x145141, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c080}, 0x44010) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x10000, @bearer=@l2={'ib', 0x3a, 'geneve0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r10, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_IE={0x10, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0xf7, 0x3d, 0x7}}, @ibss={0x6, 0x2, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) 21:29:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast]}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RTC_AIE_ON(r1, 0x7001) getsockname$packet(r0, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001b40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001b80)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0xc4, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000001d40)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001e80)={0x14, &(0x7f0000001d80)={0x0, 0x30, 0xaf, {0xaf, 0xd, "c3523eff98068f58a399588bb97b27d83daa89ffdb564dbd0642819b58e98c112b9dd771c3d8e927abf2f3aa877b6f1299fbc8ea5a35b7c641a6cacb736bb60e8e48c48f1c19d0e91731887919110b7e497ec0a0196fdc406c73b25496fa8eefa26dd4e864da4b0db681ae299ac17b4e82b548f6b9770b053c6918fb3b715058ad0fbb356fe132d88b29b6f88c42412a74b234cbf01f205f311c5e6749247c5315531f062beba7a24f0e4d890f"}}, &(0x7f0000001e40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002100)={0x44, &(0x7f0000001ec0)={0x20, 0x0, 0x47, "d6e473b018777b9aac681aaa3f4e58fccd994f7e3fe39a1fbdbb2945d9a74790954e0a1aaee3cedeeff0b532dcd090418544bb430905556e38c65b6886259a9c25e3e1bb161761"}, &(0x7f0000001f40)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000001f80)={0x0, 0x8, 0x1}, &(0x7f0000001fc0)={0x20, 0x80, 0x1c, {0x8, 0x3, 0xbb0e, 0x0, 0xfe83, 0x5, 0x353, 0x2, 0x9, 0x8, 0x9e, 0x675}}, &(0x7f0000002000)={0x20, 0x85, 0x4, 0xf7f}, &(0x7f0000002040)={0x20, 0x83, 0x2}, &(0x7f0000002080)={0x20, 0x87, 0x2, 0x79}, &(0x7f00000020c0)={0x20, 0x89, 0x2, 0xffff}}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0xab5e33115e470a5c, r1, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000021c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000002180)="f06a", 0x1000, 0x0, 0x1}, 0x7) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0xde75e24628edcbda, &(0x7f0000002200), &(0x7f0000002240)=0x4) ptrace(0x4208, 0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004801) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002400), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x40, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x8040) r7 = creat(&(0x7f0000002500)='./file0\x00', 0xa6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0x84, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffb5}, {0x6, 0x11, 0x20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) [ 83.073408] audit: type=1400 audit(1737667775.584:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:29:35 executing program 3: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/69) clone3(&(0x7f0000000500)={0x30000000, &(0x7f0000000300)=0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380), {0x20}, &(0x7f00000003c0)=""/171, 0xab, &(0x7f0000000480)=""/46, &(0x7f00000004c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8}, 0x58) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000880)={0x0, 0xc7, 0x1, 0x0, 0x8}) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000008c0)='memory.pressure\x00', 0x2, 0x0) fsetxattr(r1, &(0x7f0000000900)=@random={'btrfs.', '#\\\x00'}, &(0x7f0000000940)='+\x84+\x00', 0x4, 0x2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x240000c3) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000a80)={r0, 0x7, 0x5, 0x19b}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000b00)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000b40)={{r3}, r4, 0x0, @unused=[0x4b, 0x3, 0x91, 0x8], @devid}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x40, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x5) pipe2$9p(&(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d00), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4880) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x945}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7f}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8044) 21:29:35 executing program 4: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3b35}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7f}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000006) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3ff}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4010}, 0x8840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040005}, 0x48010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x814) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100600004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1404c0c0}, 0x20000000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}, 0x1, 0x0, 0x0, 0x22004005}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000000) 21:29:35 executing program 6: read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0xfe13, 0x1000, 0x1}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/drm', 0x444000, 0x20) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x204000, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000001c0)=0x100) prctl$PR_PAC_RESET_KEYS(0x36, 0x16) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000200)=0x7f) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) fstatfs(r0, &(0x7f0000000280)=""/4096) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000001280)) r4 = openat(r2, &(0x7f0000001400)='./file0\x00', 0x80800, 0x28) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000001440)={0xfffffff7, 0xb3, "a9f37202fa46253656de8aa9795f2d085f749a9fe0a22f8180e1ea760d6adb5bd1f7a768e4806a5543fad2f9bd503cc36aa3eca39932fbfe9b3f7e1e214942abc56376e20b1b679a650d9b23afd9f22366c7b2b9f709e5f0e073a2ab9188b36bbb249f81a7d66719f294c82c93aea3866e79f15d4978947974a4172856737a00efb273367b83eb072c046a0664c3a0cfa4eb2214c0a974e89e131eb19f68bf02ea9a3c919273c124f79a0ac507b676973af449"}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1, {0xd}}, './file0\x00'}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000001540)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001580)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001600)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 21:29:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}, @window={0x3, 0x2, 0x1f}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x1e, 0x0, 0x10d, &(0x7f0000000080)}) r2 = open(&(0x7f00000004c0)='./file0\x00', 0x10200, 0x12) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000500)) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x4000041) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000006c0)={'nat\x00', 0x0, 0x3, 0x2e, [0x20, 0xfffffffffffff2c7, 0x1000, 0x8001, 0x5, 0x5], 0x1, &(0x7f0000000640)=[{}], &(0x7f0000000680)=""/46}, &(0x7f0000000740)=0x78) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000780)=0x5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000800)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000840)=[@sack_perm, @sack_perm, @timestamp, @sack_perm, @mss={0x2, 0xfffffff8}], 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/meminfo\x00', 0x0, 0x0) accept4$inet(r4, 0x0, &(0x7f00000008c0), 0x80000) readahead(0xffffffffffffffff, 0x10001, 0x80000001) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000900)="284657727eb9241c57db37a2ac31ac787049ae3b60e195a87137e04b9972ff35dabcea3acc6ea7011604ca8be9781d9229a401252fc376a3e53267b7a6792b6a3ed39484bba966b61eebfc307b3f15087efcd2c89ef6db542d98a0595115c8380abca31ab2988193f49373c87baca58c63aa526def602be3019027fa06ab1930271f2e76a388278f39ee9b0fdc6fa0cf6f7e52ddc8baa89211a570e07aab73df22") sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000d80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a00)={0x334, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf9b}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "0e594564d2ff29bf88c4f33ba91a341739845eff637346017126ea44d7"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "4aeefdcd0be78ce3ec1578ae997b2f2fdb49dc53a1edf280724061a23113"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "54291941e57f17959874fa9f874f76da5b748d71a2461b2269b8403c61f6cef5a78b38"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "268fda46bacbff083fd895ae487a3b0a8923fbbf26477044a74f194465abdac05550f3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x264988df}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xda5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xea}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff3aa9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x21f9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd67}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x4000}, 0x20000100) r5 = fsmount(r4, 0x0, 0x9) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 21:29:35 executing program 7: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) r1 = open(&(0x7f0000000080)='./file0\x00', 0xf596c3eb93d0fca3, 0x40) read$char_usb(r1, &(0x7f00000000c0)=""/197, 0xc5) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0), &(0x7f0000000200)={'L+', 0x9}, 0x16, 0x3) faccessat(r1, &(0x7f0000000240)='./file0\x00', 0x10) readahead(r1, 0x28662f55, 0x1d) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x2, 0x9, 0x3}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000300)=@gcm_256={{0x304}, "665434fda9dd7522", "765c7842fb45fbe05a381e3ad62afe81983937d8eb1d4dd2fe7fffebd0ee854c", '}0W@', "d7d09699166adc78"}, 0x38) r3 = fcntl$dupfd(r1, 0x406, r2) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000340)={@empty, @remote}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000003c0)={0x2, 0xfffff001, 0x1, 0x5, 0x1, "3894d4ef77d5eca8a1f03fcf4972422dd376ab"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000500)=""/214, 0xd6, 0x40, &(0x7f0000000600)={0xa, 0x4e22, 0x80000001, @mcast1, 0x1}, 0x1c) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, 0x0, 0x7, 0x3, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x35c74584}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 84.390669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.392959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.396257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.398575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.401371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.406469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.409459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.419401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.425125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.437459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.443954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.446618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.651825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.688008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.716946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.722186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.724008] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.731384] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.737345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.743265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.747173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.751901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.754874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.756971] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.765898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.770312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.772741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.773203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.774950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.778078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.783400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.789371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.791265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.795909] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.801747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.804861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.813194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.816351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.821873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.829042] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.846167] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.849239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.853325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.854123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.876984] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.899901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.918198] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.920728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.472009] Bluetooth: hci1: command tx timeout [ 86.472030] Bluetooth: hci0: command tx timeout [ 86.854611] Bluetooth: hci3: command tx timeout [ 86.918596] Bluetooth: hci4: command tx timeout [ 86.919761] Bluetooth: hci5: command tx timeout [ 86.919801] Bluetooth: hci2: command tx timeout [ 86.982659] Bluetooth: hci7: command tx timeout [ 87.046572] Bluetooth: hci6: command tx timeout [ 88.519691] Bluetooth: hci0: command tx timeout [ 88.520212] Bluetooth: hci1: command tx timeout [ 88.904125] Bluetooth: hci3: command tx timeout [ 88.966675] Bluetooth: hci2: command tx timeout [ 88.968028] Bluetooth: hci5: command tx timeout [ 88.968083] Bluetooth: hci4: command tx timeout [ 89.030660] Bluetooth: hci7: command tx timeout [ 89.094830] Bluetooth: hci6: command tx timeout [ 90.567677] Bluetooth: hci1: command tx timeout [ 90.568600] Bluetooth: hci0: command tx timeout [ 90.950737] Bluetooth: hci3: command tx timeout [ 91.014644] Bluetooth: hci4: command tx timeout [ 91.015246] Bluetooth: hci2: command tx timeout [ 91.016206] Bluetooth: hci5: command tx timeout [ 91.080567] Bluetooth: hci7: command tx timeout [ 91.142663] Bluetooth: hci6: command tx timeout [ 92.615592] Bluetooth: hci0: command tx timeout [ 92.616467] Bluetooth: hci1: command tx timeout [ 92.999114] Bluetooth: hci3: command tx timeout [ 93.062783] Bluetooth: hci5: command tx timeout [ 93.063187] Bluetooth: hci2: command tx timeout [ 93.063688] Bluetooth: hci4: command tx timeout [ 93.126735] Bluetooth: hci7: command tx timeout [ 93.190862] Bluetooth: hci6: command tx timeout [ 146.901057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.904032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.906097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.911839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.916263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.918864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.029932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.034254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.043215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.046601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.047373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.051080] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.053309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.055060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.061052] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.062719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.064930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.069752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.074938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.078447] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.083938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.096060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.102894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.120073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.123156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.125010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.132685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.136647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.145914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.147882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.165175] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.167702] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.169568] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.170798] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.175756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.177027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.178760] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.180720] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.182436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.183654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.188178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.190080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.192349] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.193418] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.194624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.195634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.200725] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.202358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.998817] Bluetooth: hci0: command tx timeout [ 149.127589] Bluetooth: hci3: command tx timeout [ 149.254628] Bluetooth: hci4: command tx timeout [ 149.254699] Bluetooth: hci2: command tx timeout [ 149.255996] Bluetooth: hci1: command tx timeout [ 149.318566] Bluetooth: hci5: command tx timeout [ 149.319666] Bluetooth: hci7: command tx timeout [ 149.320203] Bluetooth: hci6: command tx timeout [ 151.048522] Bluetooth: hci0: command tx timeout [ 151.175023] Bluetooth: hci3: command tx timeout [ 151.303353] Bluetooth: hci1: command tx timeout [ 151.304425] Bluetooth: hci2: command tx timeout [ 151.305454] Bluetooth: hci4: command tx timeout [ 151.366672] Bluetooth: hci6: command tx timeout [ 151.367620] Bluetooth: hci7: command tx timeout [ 151.368438] Bluetooth: hci5: command tx timeout [ 153.095560] Bluetooth: hci0: command tx timeout [ 153.223693] Bluetooth: hci3: command tx timeout [ 153.352520] Bluetooth: hci2: command tx timeout [ 153.353024] Bluetooth: hci4: command tx timeout [ 153.353441] Bluetooth: hci1: command tx timeout [ 153.414558] Bluetooth: hci7: command tx timeout [ 153.415592] Bluetooth: hci5: command tx timeout [ 153.416005] Bluetooth: hci6: command tx timeout [ 155.142581] Bluetooth: hci0: command tx timeout [ 155.270543] Bluetooth: hci3: command tx timeout [ 155.398731] Bluetooth: hci1: command tx timeout [ 155.399237] Bluetooth: hci4: command tx timeout [ 155.399263] Bluetooth: hci2: command tx timeout [ 155.462648] Bluetooth: hci6: command tx timeout [ 155.462740] Bluetooth: hci5: command tx timeout [ 155.463098] Bluetooth: hci7: command tx timeout [ 205.313631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.314372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.629727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.630391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.991090] [ 206.991332] ====================================================== [ 206.991844] WARNING: possible circular locking dependency detected [ 206.992351] 6.13.0-next-20250123 #1 Not tainted [ 206.992746] ------------------------------------------------------ [ 206.993538] kworker/u8:1/64 is trying to acquire lock: [ 206.994852] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 206.996860] [ 206.996860] but task is already holding lock: [ 206.998537] ffff8880268e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.000510] [ 207.000510] which lock already depends on the new lock. [ 207.000510] [ 207.001807] [ 207.001807] the existing dependency chain (in reverse order) is: [ 207.002417] [ 207.002417] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 207.002995] __mutex_lock+0x13d/0xb50 [ 207.003401] wiphy_register+0x1b2e/0x25d0 [ 207.003835] ieee80211_register_hw+0x23a4/0x3d60 [ 207.004307] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 207.004805] init_mac80211_hwsim+0x389/0x870 [ 207.005270] do_one_initcall+0xf9/0x640 [ 207.005692] kernel_init_freeable+0x53d/0x7a0 [ 207.006149] kernel_init+0x1e/0x2d0 [ 207.006523] ret_from_fork+0x48/0x80 [ 207.006907] ret_from_fork_asm+0x1a/0x30 [ 207.007341] [ 207.007341] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 207.007882] __lock_acquire+0x29fd/0x4580 [ 207.008318] lock_acquire+0x19b/0x520 [ 207.008717] __mutex_lock+0x13d/0xb50 [ 207.009127] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.009676] unregister_netdevice_queue+0x224/0x2e0 [ 207.010166] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.010673] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.011166] ieee80211_unregister_hw+0x55/0x3a0 [ 207.011633] hwsim_exit_net+0x3a0/0x730 [ 207.012045] ops_exit_list+0xb3/0x180 [ 207.012449] cleanup_net+0x546/0xad0 [ 207.012844] process_one_work+0x8ee/0x1a10 [ 207.013293] worker_thread+0x674/0xe70 [ 207.013705] kthread+0x3ab/0x720 [ 207.014073] ret_from_fork+0x48/0x80 [ 207.014445] ret_from_fork_asm+0x1a/0x30 [ 207.014879] [ 207.014879] other info that might help us debug this: [ 207.014879] [ 207.015529] Possible unsafe locking scenario: [ 207.015529] [ 207.016026] CPU0 CPU1 [ 207.016417] ---- ---- [ 207.016807] lock(&rdev->wiphy.mtx); [ 207.017154] lock(rtnl_mutex); [ 207.017654] lock(&rdev->wiphy.mtx); [ 207.018187] lock(rtnl_mutex); [ 207.018513] [ 207.018513] *** DEADLOCK *** [ 207.018513] [ 207.019016] 4 locks held by kworker/u8:1/64: [ 207.019398] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 207.020297] #1: ffff88800be37d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 207.021154] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 207.021975] #3: ffff8880268e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.022890] [ 207.022890] stack backtrace: [ 207.023286] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250123 #1 [ 207.023323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 207.023346] Workqueue: netns cleanup_net [ 207.023388] Call Trace: [ 207.023397] [ 207.023409] dump_stack_lvl+0xca/0x120 [ 207.023467] print_circular_bug+0x47b/0x750 [ 207.023514] check_noncircular+0x2e9/0x3c0 [ 207.023556] ? __pfx_check_noncircular+0x10/0x10 [ 207.023598] ? hlock_class+0x4e/0x130 [ 207.023629] ? mark_lock+0xac/0xed0 [ 207.023669] ? srso_return_thunk+0x5/0x5f [ 207.023725] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 207.023771] ? lockdep_lock+0xba/0x1b0 [ 207.023830] ? __pfx_lockdep_lock+0x10/0x10 [ 207.023892] __lock_acquire+0x29fd/0x4580 [ 207.023945] ? __pfx___lock_acquire+0x10/0x10 [ 207.023989] ? lock_release+0x20f/0x6f0 [ 207.024033] ? __pfx_lock_release+0x10/0x10 [ 207.024081] lock_acquire+0x19b/0x520 [ 207.024124] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.024174] ? __pfx_lock_acquire+0x10/0x10 [ 207.024218] ? srso_return_thunk+0x5/0x5f [ 207.024275] ? lock_release+0x20f/0x6f0 [ 207.024318] ? srso_return_thunk+0x5/0x5f [ 207.024374] ? lock_is_held_type+0x9e/0x120 [ 207.024430] ? srso_return_thunk+0x5/0x5f [ 207.024490] __mutex_lock+0x13d/0xb50 [ 207.024543] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.024589] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.024636] ? srso_return_thunk+0x5/0x5f [ 207.024692] ? synchronize_rcu_expedited+0x38a/0x420 [ 207.024736] ? __pfx___mutex_lock+0x10/0x10 [ 207.024791] ? __pfx_autoremove_wake_function+0x10/0x10 [ 207.024845] ? srso_return_thunk+0x5/0x5f [ 207.024901] ? kasan_quarantine_put+0x84/0x1e0 [ 207.024962] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 207.024998] ? srso_return_thunk+0x5/0x5f [ 207.025058] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.025104] ? __virt_addr_valid+0x2e8/0x5d0 [ 207.025157] ? __pfx_lock_release+0x10/0x10 [ 207.025202] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 207.025249] ? find_held_lock+0x2c/0x110 [ 207.025307] ? srso_return_thunk+0x5/0x5f [ 207.025365] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 207.025426] ? srso_return_thunk+0x5/0x5f [ 207.025482] ? lock_release+0x20f/0x6f0 [ 207.025527] ? __pfx_lock_release+0x10/0x10 [ 207.025570] ? srso_return_thunk+0x5/0x5f [ 207.025626] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.025673] ? srso_return_thunk+0x5/0x5f [ 207.025735] unregister_netdevice_queue+0x224/0x2e0 [ 207.025779] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 207.025823] ? up_write+0x195/0x520 [ 207.025879] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.025931] ? srso_return_thunk+0x5/0x5f [ 207.025991] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.026031] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 207.026070] ? srso_return_thunk+0x5/0x5f [ 207.026126] ? srso_return_thunk+0x5/0x5f [ 207.026182] ? synchronize_rcu+0x1ff/0x260 [ 207.026225] ieee80211_unregister_hw+0x55/0x3a0 [ 207.026271] hwsim_exit_net+0x3a0/0x730 [ 207.026313] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.026355] ? srso_return_thunk+0x5/0x5f [ 207.026411] ? netdev_run_todo+0x788/0x1040 [ 207.026459] ? srso_return_thunk+0x5/0x5f [ 207.026524] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.026568] ops_exit_list+0xb3/0x180 [ 207.026611] cleanup_net+0x546/0xad0 [ 207.026657] ? __pfx_cleanup_net+0x10/0x10 [ 207.026711] process_one_work+0x8ee/0x1a10 [ 207.026776] ? __pfx_lock_acquire+0x10/0x10 [ 207.026821] ? __pfx_process_one_work+0x10/0x10 [ 207.026880] ? srso_return_thunk+0x5/0x5f [ 207.026936] ? move_linked_works+0x172/0x270 [ 207.026981] ? srso_return_thunk+0x5/0x5f [ 207.027037] ? assign_work+0x196/0x240 [ 207.027094] worker_thread+0x674/0xe70 [ 207.027152] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.027204] ? srso_return_thunk+0x5/0x5f [ 207.027260] ? __pfx_worker_thread+0x10/0x10 [ 207.027320] kthread+0x3ab/0x720 [ 207.027371] ? __pfx_kthread+0x10/0x10 [ 207.027423] ? srso_return_thunk+0x5/0x5f [ 207.027480] ? finish_task_switch.isra.0+0x206/0x840 [ 207.027531] ? __pfx_kthread+0x10/0x10 [ 207.027585] ret_from_fork+0x48/0x80 [ 207.027616] ? __pfx_kthread+0x10/0x10 [ 207.027669] ret_from_fork_asm+0x1a/0x30 [ 207.027735] [ 208.787797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.790008] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.792100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.796050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.800273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.802155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.847363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.853074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.854992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.856767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.860031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.863169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.864705] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.866949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.869086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.892962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.899704] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.902033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.920388] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.937852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.944794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.945935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.953736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.955040] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.963586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.965063] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.970071] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.971498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.973218] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.974215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.987100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.005286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.008701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.014631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.024793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.033383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.083359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.086905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.089838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.095284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.106581] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.108170] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.114069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.114186] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.120141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.132725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.137543] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.139680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.824206] Bluetooth: hci0: command tx timeout [ 210.951089] Bluetooth: hci1: command tx timeout [ 211.014666] Bluetooth: hci3: command tx timeout [ 211.014692] Bluetooth: hci2: command tx timeout [ 211.078551] Bluetooth: hci5: command tx timeout [ 211.142517] Bluetooth: hci4: command tx timeout [ 211.206626] Bluetooth: hci7: command tx timeout [ 211.206660] Bluetooth: hci6: command tx timeout [ 212.870519] Bluetooth: hci0: command tx timeout [ 213.000497] Bluetooth: hci1: command tx timeout [ 213.062539] Bluetooth: hci2: command tx timeout [ 213.062728] Bluetooth: hci3: command tx timeout [ 213.126504] Bluetooth: hci5: command tx timeout [ 213.190537] Bluetooth: hci4: command tx timeout [ 213.254561] Bluetooth: hci7: command tx timeout [ 213.255039] Bluetooth: hci6: command tx timeout [ 214.918631] Bluetooth: hci0: command tx timeout [ 215.046512] Bluetooth: hci1: command tx timeout [ 215.110491] Bluetooth: hci2: command tx timeout [ 215.110554] Bluetooth: hci3: command tx timeout [ 215.174528] Bluetooth: hci5: command tx timeout [ 215.238944] Bluetooth: hci4: command tx timeout [ 215.303543] Bluetooth: hci6: command tx timeout [ 215.304335] Bluetooth: hci7: command tx timeout [ 216.966672] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 21:31:39 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800be36d20 R8 =0000000000000000 R9 =ffffed1001dc6046 R10=0000000000000020 R11=3a6b636f6c206762 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005627ace76ff8 CR3=000000000ead4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000417d07e100000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800be29bc0 RCX=ffffffff81429a4a RDX=ffff88800be29bc0 RSI=ffffffff814299d3 RDI=ffff88806c1fd9e0 RBP=ffff88806c1fd9e0 RSP=ffff88800c1b7da8 R8 =0000000000000000 R9 =ffffed1001e32c00 R10=ffff88800f196007 R11=0000000000000001 R12=ffff88806c1fdff9 R13=ffffffff8861c798 R14=ffff88800be29bc0 R15=0000000000000086 RIP=ffffffff84ab2f40 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fad14cf7090 CR3=000000000ead4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0000de000000000c0000d0140 XMM02=000000c000131f20000000c000131ef0 XMM03=000000c0000874a0000000c000131f50 XMM04=000000c000131ef0000000c000131ec0 XMM05=000000c000131f50000000c000131f20 XMM06=000000c000131f80000000c0000874a0 XMM07=000000c000146000000000c000131fb0 XMM08=000000c0000ec7e0000000c0000ec7b0 XMM09=000000c0000ec840000000c0000ec810 XMM10=000000c0000ec8a0000000c0000ec870 XMM11=000000c0000ec900000000c0000ec8d0 XMM12=000000c0000ec930000000c0000865a0 XMM13=000000c0000ec990000000c0000ec960 XMM14=000000c0000ec9f0000000c0000ec9c0 XMM15=000000c0000f4b00000000c0000eca20