Warning: Permanently added '[localhost]:4062' (ECDSA) to the list of known hosts. 2025/01/24 01:28:53 fuzzer started 2025/01/24 01:28:54 dialing manager at localhost:45511 syzkaller login: [ 74.096317] cgroup: Unknown subsys name 'net' [ 74.220871] cgroup: Unknown subsys name 'cpuset' [ 74.271968] cgroup: Unknown subsys name 'rlimit' [ 79.076802] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 01:29:10 syscalls: 2217 2025/01/24 01:29:10 code coverage: enabled 2025/01/24 01:29:10 comparison tracing: enabled 2025/01/24 01:29:10 extra coverage: enabled 2025/01/24 01:29:10 setuid sandbox: enabled 2025/01/24 01:29:10 namespace sandbox: enabled 2025/01/24 01:29:10 Android sandbox: enabled 2025/01/24 01:29:10 fault injection: enabled 2025/01/24 01:29:10 leak checking: enabled 2025/01/24 01:29:10 net packet injection: enabled 2025/01/24 01:29:10 net device setup: enabled 2025/01/24 01:29:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 01:29:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 01:29:10 USB emulation: enabled 2025/01/24 01:29:10 hci packet injection: enabled 2025/01/24 01:29:10 wifi device emulation: enabled 2025/01/24 01:29:10 802.15.4 emulation: enabled 2025/01/24 01:29:10 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 01:29:10 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 01:29:10 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 01:29:10 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 01:29:10 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/24 01:29:10 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/24 01:29:14 starting 8 fuzzer processes 01:29:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x180) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r0, 0x3) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x343000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0xc0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x2101}, {r2, 0x4092}, {r0, 0x48}, {r3, 0x4}, {r0, 0x2004}, {r0, 0x3}], 0x6, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000001c0)={0x8, 'team0\x00', {'bond_slave_0\x00'}, 0x434}) sendfile(r1, r0, &(0x7f0000000200)=0x1, 0x80000000) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x78}, @void, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc0, 0xc5, "766d60255f36affc26c5777b9885f463ffb8d61f2b7295432324d52301cadfa7e71f7d12425336b6f49e1f059b0be64273ac1317ce724c202c587d33d3643568ed8e2e40fe02d93ae50759e7203f5e7cef168219a4ba66612fe404efadbd758fb13e73be12295e13d96c9e9bc734bfbfff2f2b7125336517d79cbf180d95c8d56c7a793f1a1c3deb820edefc601621be819b606605909d3c6e45789d19b7e52b1192c3da4b2f02879cb2c9f4d6f2e215c8b87df9ef3f989b94ba6767"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40014}, 0x42000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000400)) r4 = syz_open_dev$vcsa(&(0x7f0000000440), 0x4, 0x200b00) ioctl$FIONCLEX(r4, 0x5450) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000480)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TCSBRKP(r2, 0x5425, 0x100000000) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000004, 0x11, r2, 0x677ad000) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000640)={0x7fff, 0xfffffffffffffffd, 0x10000000000, 0x0, 0x200, 0x4}) 01:29:14 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2081, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = epoll_create1(0x80000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11f5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc41}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/block/loop4', 0x14800, 0x40) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x8801) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x100, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe46d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000007c0)={{r7}, 0x8, &(0x7f0000000780)=[0x8000, 0x0, 0x400, 0x6, 0xffffffff, 0x5, 0x100000000, 0x2], 0x7ec6, 0x0, [0x3f, 0x8, 0x3, 0x3e823d94]}) r8 = signalfd4(r4, &(0x7f0000000840)={[0x9429]}, 0x8, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x98, r3, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xcca, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x959b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x153}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1c00009d, {0x7, 0x0, 0x400, 0x3}}}, @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "5d6eb7cd067c1f8ceef22a468f43751d9a87d6f5f003d08b47e18c534e82788285468370736ec1a1"}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x4a080}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x47}]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x20048840) 01:29:14 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)={0x7ff, {{0x2, 0x4e23, @remote}}, 0x1, 0x5, [{{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @local}}]}, 0x310) r0 = syz_io_uring_complete(0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x6, @broadcast}, 0x4c, {0x2, 0x4e23, @local}, 'sit0\x00'}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x285}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x77bd6ac0}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff838}]}, 0x64}}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000540)={'sit0\x00', {0x2, 0x0, @private}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0xe78e}}, './file0\x00'}) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x0, 0x64cef46a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8804) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x100) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x26}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x8000) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000800)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c084}, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt(r6, 0x3f, 0x5, &(0x7f0000000ac0)="a38a9959307398c2c0f8781ea14d53aeaf8835b835ba40bed82849cb2565fb4a62f02d24ef", 0x25) r7 = accept$unix(r0, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000bc0)={0x6, 'veth1_to_bond\x00', {0x17cd4aab}, 0xd3}) 01:29:14 executing program 3: write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xcc6, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x81, 0xc386, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8000, 0x0, 0xff}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x31, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r0, 0x29, 0x1f, 0x0, 0x81, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x8000, 0x80, 0x8000, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, 0x0, 0xe16f5849b9affb76, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = syz_open_dev$mouse(&(0x7f00000006c0), 0x0, 0x2102) r5 = accept4$bt_l2cap(r1, &(0x7f0000000700)={0x1f, 0x0, @none}, &(0x7f0000000740)=0xe, 0x40800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = syz_open_dev$vcsn(&(0x7f0000000780), 0x10000, 0x2000) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, r2}, {0x1f, 0x6, 0x2, 0x9, 0x1, 0x6, 0x0, 0x100000001}, {0x1, 0x0, 0xa1, 0x3}, 0x4, 0x6e6bbb, 0x3, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d5, 0x17}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0xd9, 0x16c, 0xdc1, 0x6}}, 0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, 0x0, 0x505, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x24050}, 0x4000000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1fc, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "53a6a0e30786873c75267e2834d5f5a27615f4c2772538944ecf0b86ca9dee4b7e167f0aa91fec4a8e7c5c241eacf5aa39814a51f3da9627c61090b9fb97fb52e149716f3ee911b13cb57d9fd4da028b0e3ab41ca3b29ec069afb0347232ca3d375b7d7b11aa0920be24e712f57db190c2a309ce9b8f4f59f4a8347cd2cdd4af5fdaaa24fdee12118b7a4a82fd3263c16efd53116cb429a2e4a477ec396d41"}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '][}\x12\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'trusted.overlay.origin\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ':\'{(\\&[)\xb5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@[\xea\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) mkdirat(r1, &(0x7f0000000cc0)='./file0/../file0\x00', 0x120) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000dc0)={{r6}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000d40)={0x1, 0x2, 0x2, 0x7, {0x2a, 0x4, 0x4, 0xaacc, 0x6}, [0x400, 0x6]}}, @devid}) [ 93.951619] audit: type=1400 audit(1737682154.236:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:29:14 executing program 4: sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0xfffffffffffffffd, 0x20000080) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendto$inet6(r0, &(0x7f0000000140)="222c1aa9391b6d5a54a2f3b54028c2819108fbce843a6c9325f42f8cb7c272e8ff33c9cf34094331424a5acecf24c84328f36714fb3411fa9e113f", 0x3b, 0x804, &(0x7f0000000180)={0xa, 0x4e23, 0x20, @empty, 0x9}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x80000c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x800) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x4001, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fffffff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "75b4aef0dc9dd7a4d28cd09a0851e788d5587a2226e89e2b0249fccf515d66fd"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x20000084) clone3(&(0x7f0000000800)={0x10000800, &(0x7f00000005c0)=0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x0, {0x3c}, &(0x7f0000000680)=""/82, 0x52, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58) sendmsg$AUDIT_SET(r0, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x810800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x1, r4, 0x0, 0x495d, 0x10001, 0x6, 0x0, 0x800}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4044010}, 0x800) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000940)=0xfffffffc, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) pidfd_getfd(r5, r6, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) getsockname(0xffffffffffffffff, &(0x7f0000000b40)=@can={0x1d, 0x0}, &(0x7f0000000bc0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 01:29:14 executing program 5: keyctl$session_to_parent(0x12) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0xf1c, 0xdf, &(0x7f0000000000)="207c367a35b15bd039fab74b9c8eea101b7423fe1a4b25da8609d03d1005346fa285b96a1a9d066d06a1d1055482a2ff4b397e6768158cc2519193449f0fcc4d41a7e6ac1d42787609257fdcb4dddd299deacc4f0aeaba63fafda323d7afd1ff902780b3ed0000eff602902e657bf05b74a6a5f9ca6feca9dd8b6e2456cdf365c02ca178de960dc9b681b92808b467b8375ebe74827c998e20e9ceed1bc5d27abd4a44afa1feccf5892f3f68f85e164dbd99d8d956f547b93a7cac03ecc3aa74d4957b69c6cd6d2a1c868dfad535b8aab150f9f39a01aafe992d521ff65274"}, {0xfffffc01, 0x46, &(0x7f0000000100)="03b3088c8dd5258447dbb846b92939bed6c0a31f226690a0324ec0d4299a27d733779128a42391fa1d75f77cb73dd829756158cdb4d703ec604520be0613a081710d961031b1", 0x1, 0x1}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x1c, 0x0, 0x100, 0x70bd2d, 0x1, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000035c0)={0x7, 0x79, 0x1}, 0x7) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41010}, 0x4040021) r1 = openat$cgroup_procs(r0, &(0x7f0000003700)='cgroup.threads\x00', 0x2, 0x0) ftruncate(r1, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r0, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000003740)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003780), 0x404a00, 0x0) ioctl$VT_RELDISP(r3, 0x5605) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000003900)={0x1f, 0x20, &(0x7f00000038c0)="15fdcefd137f9860adfe92c9791a864a00cacf5efac95bc6c20daf2a314f45dd"}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003980)={0xd0, 0x0, 0x304, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48080}, 0x20004040) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x340}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c011}, 0x11) 01:29:14 executing program 6: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x82) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8447, 0x6a}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x12}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x4000c8c0) r2 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x55}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x11400}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb0, 0x27, 0x2, 0x70bd27, 0x25dfdbfd, {0x1}, [@generic="c7d1f69044fcefdb1f4b89af93c1b75730ba9f61f6068d47e8cfa26627eae0b1f7eed25b4722e861327f87817dcd46983ff43db29ed2fd1645d6a33cccf15e82169adbaa10e28d984626f9204f01d18e7d232895d8bf5c8b4a91ac59d163208a302dc93fb27e7dd88551a535eaa23243e001cdf1121523cdcf5c99ea638a20a63ccf45d4a9c1d95730639a89e09a3d49c8c2125c4d5cadf954a2844c"]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x44801) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0xffffffffffffffff, 0xee01, 0xee01}, 0xc) write$P9_RREADDIR(r2, &(0x7f0000000780)={0x6e, 0x29, 0x2, {0x200, [{{0x10, 0x4, 0x8}, 0x539, 0x2, 0xd, './file0/file0'}, {{0x80, 0x3, 0x5}, 0x1, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x2}, 0xffffffff, 0x5, 0x7, './file0'}]}}, 0x6e) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x5) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000940), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x3f, 0x4f0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x80, 0x0, 0x49b7}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2dc, r5, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x241}}, {0x8}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000850) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x18, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000044}, 0x4008054) fremovexattr(r2, &(0x7f0000000f00)=@random={'os2.', '\x00'}) 01:29:14 executing program 7: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x10000000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x17, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001280), &(0x7f00000012c0)=0x14) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001380)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001480)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'syztnl0\x00', &(0x7f00000014c0)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x7f, 0x6, {{0x21, 0x4, 0x0, 0x2e, 0x84, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, {[@cipso={0x86, 0x44, 0x3, [{0x7, 0xa, "ec362d2d4b578e8e"}, {0x0, 0x12, "46f03903f6954a440810ba40e23ccb9a"}, {0x1, 0x4, '-`'}, {0x2, 0xc, "638380819fd04df8b05d"}, {0x7, 0x6, "4bbc97a4"}, {0x1, 0xc, "a8d193ea5381b2145c7b"}]}, @cipso={0x86, 0x16, 0x0, [{0x1, 0xd, "f982c2ac5c902ab8d2a674"}, {0x2, 0x3, "9d"}]}, @timestamp_addr={0x44, 0x14, 0xd0, 0x1, 0x9, [{@multicast1, 0x9bb2}, {@empty, 0x80000000}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001680)={@multicast2, @initdev, 0x0}, &(0x7f00000016c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001780)={'ip6gre0\x00', &(0x7f0000001700)={'syztnl2\x00', 0x0, 0x2f, 0xdb, 0x4, 0x9, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0x1, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001980)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x17c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20001000}, 0x94) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040881) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/module/snd_intel_dspcfg', 0x0, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r8, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 95.378611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.382673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.385732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.393291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.398939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.402228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.430494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.439925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.449217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.455259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.458849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.473843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.474578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.481897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.487722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.488693] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.489549] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.495684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.502641] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.507885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.512224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.516835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.521511] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.541460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.546843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.547273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.550790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.555306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.556660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.561270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.586796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.599641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.602323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.603887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.606147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.608230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.611393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.613698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.619625] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.625289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.635147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.635773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.650441] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.656927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.658543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.681276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.705850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.708366] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.520593] Bluetooth: hci0: command tx timeout [ 97.584231] Bluetooth: hci2: command tx timeout [ 97.585347] Bluetooth: hci1: command tx timeout [ 97.647144] Bluetooth: hci3: command tx timeout [ 97.710731] Bluetooth: hci4: command tx timeout [ 97.712191] Bluetooth: hci7: command tx timeout [ 97.712566] Bluetooth: hci5: command tx timeout [ 97.775522] Bluetooth: hci6: command tx timeout [ 99.567487] Bluetooth: hci0: command tx timeout [ 99.630598] Bluetooth: hci1: command tx timeout [ 99.631754] Bluetooth: hci2: command tx timeout [ 99.696459] Bluetooth: hci3: command tx timeout [ 99.758628] Bluetooth: hci4: command tx timeout [ 99.759615] Bluetooth: hci5: command tx timeout [ 99.759701] Bluetooth: hci7: command tx timeout [ 99.823977] Bluetooth: hci6: command tx timeout [ 101.615515] Bluetooth: hci0: command tx timeout [ 101.679088] Bluetooth: hci2: command tx timeout [ 101.679227] Bluetooth: hci1: command tx timeout [ 101.744255] Bluetooth: hci3: command tx timeout [ 101.806604] Bluetooth: hci7: command tx timeout [ 101.807906] Bluetooth: hci5: command tx timeout [ 101.808238] Bluetooth: hci4: command tx timeout [ 101.871506] Bluetooth: hci6: command tx timeout [ 103.664457] Bluetooth: hci0: command tx timeout [ 103.726496] Bluetooth: hci2: command tx timeout [ 103.727685] Bluetooth: hci1: command tx timeout [ 103.791578] Bluetooth: hci3: command tx timeout [ 103.854503] Bluetooth: hci4: command tx timeout [ 103.855935] Bluetooth: hci5: command tx timeout [ 103.855988] Bluetooth: hci7: command tx timeout [ 103.918499] Bluetooth: hci6: command tx timeout [ 157.967200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.972044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.977569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.987009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.994250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.997470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.089600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.094866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.098995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.105801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.108743] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.113787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.156186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.159809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.163343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.179062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.185633] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.203879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.216786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.223770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.230998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.257831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.263851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.266585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.309590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.318749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.327075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.367864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.371782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.378653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.408483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.412074] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.414738] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.417014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.420013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.428165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.432878] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.435946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.436821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.454134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.480721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.489118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.492077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.506284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.508997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.512028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.541048] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.549883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.047820] Bluetooth: hci0: command tx timeout [ 160.174555] Bluetooth: hci1: command tx timeout [ 160.303599] Bluetooth: hci2: command tx timeout [ 160.367545] Bluetooth: hci3: command tx timeout [ 160.494710] Bluetooth: hci7: command tx timeout [ 160.559541] Bluetooth: hci4: command tx timeout [ 160.623932] Bluetooth: hci6: command tx timeout [ 160.686735] Bluetooth: hci5: command tx timeout [ 162.094562] Bluetooth: hci0: command tx timeout [ 162.222482] Bluetooth: hci1: command tx timeout [ 162.350548] Bluetooth: hci2: command tx timeout [ 162.414487] Bluetooth: hci3: command tx timeout [ 162.544446] Bluetooth: hci7: command tx timeout [ 162.606512] Bluetooth: hci4: command tx timeout [ 162.670593] Bluetooth: hci6: command tx timeout [ 162.735586] Bluetooth: hci5: command tx timeout [ 164.142528] Bluetooth: hci0: command tx timeout [ 164.270450] Bluetooth: hci1: command tx timeout [ 164.398644] Bluetooth: hci2: command tx timeout [ 164.462592] Bluetooth: hci3: command tx timeout [ 164.591642] Bluetooth: hci7: command tx timeout [ 164.654488] Bluetooth: hci4: command tx timeout [ 164.720153] Bluetooth: hci6: command tx timeout [ 164.782483] Bluetooth: hci5: command tx timeout [ 166.190452] Bluetooth: hci0: command tx timeout [ 166.318474] Bluetooth: hci1: command tx timeout [ 166.446519] Bluetooth: hci2: command tx timeout [ 166.510654] Bluetooth: hci3: command tx timeout [ 166.639497] Bluetooth: hci7: command tx timeout [ 166.702442] Bluetooth: hci4: command tx timeout [ 166.766449] Bluetooth: hci6: command tx timeout [ 166.830510] Bluetooth: hci5: command tx timeout [ 220.093496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.097821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.102910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.110349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.113926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.116346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.218656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.222113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.225307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.228091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.241259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.248349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.255899] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.258968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.262999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.283211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.302685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.307984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.310352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.314553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.318503] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.319177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.323213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.328458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.329999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.333599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.335931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.341324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.346742] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.350741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.461193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.468077] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.470156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.473745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.474842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.476518] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.479865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.482844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.485956] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.490188] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.518914] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.525772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.526916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.527974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.547948] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.559760] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.568257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.618643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.190651] Bluetooth: hci0: command tx timeout [ 222.318559] Bluetooth: hci1: command tx timeout [ 222.382599] Bluetooth: hci4: command tx timeout [ 222.382648] Bluetooth: hci2: command tx timeout [ 222.446757] Bluetooth: hci3: command tx timeout [ 222.702518] Bluetooth: hci6: command tx timeout [ 222.703487] Bluetooth: hci5: command tx timeout [ 222.766570] Bluetooth: hci7: command tx timeout [ 224.238542] Bluetooth: hci0: command tx timeout [ 224.368411] Bluetooth: hci1: command tx timeout [ 224.430608] Bluetooth: hci4: command tx timeout [ 224.431704] Bluetooth: hci2: command tx timeout [ 224.494637] Bluetooth: hci3: command tx timeout [ 224.750876] Bluetooth: hci5: command tx timeout [ 224.751864] Bluetooth: hci6: command tx timeout [ 224.817558] Bluetooth: hci7: command tx timeout [ 226.286451] Bluetooth: hci0: command tx timeout [ 226.415443] Bluetooth: hci1: command tx timeout [ 226.478599] Bluetooth: hci2: command tx timeout [ 226.478882] Bluetooth: hci4: command tx timeout [ 226.542515] Bluetooth: hci3: command tx timeout [ 226.798619] Bluetooth: hci5: command tx timeout [ 226.799716] Bluetooth: hci6: command tx timeout [ 226.862894] Bluetooth: hci7: command tx timeout [ 228.341428] Bluetooth: hci0: command tx timeout [ 228.463458] Bluetooth: hci1: command tx timeout [ 228.526507] Bluetooth: hci2: command tx timeout [ 228.527735] Bluetooth: hci4: command tx timeout [ 228.590609] Bluetooth: hci3: command tx timeout [ 228.846476] Bluetooth: hci6: command tx timeout [ 228.847482] Bluetooth: hci5: command tx timeout [ 228.912033] Bluetooth: hci7: command tx timeout [ 282.555060] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.557069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.559799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.569994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.576026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.578979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.810840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.815883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.820560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.837804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.842920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.845330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.850040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.854568] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.856856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.859298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.865733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.872218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.878892] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.886870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.898688] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.904285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.907076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.907562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.913327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.915222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.915501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.917007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.919202] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.921627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.939793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.941321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.948785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.953188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.961616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.964130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.967194] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.969086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.977034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.978873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.982538] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.987845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.288180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.301755] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.307202] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.323252] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.327639] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.329864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.654529] Bluetooth: hci0: command tx timeout [ 284.910538] Bluetooth: hci3: command tx timeout [ 284.975433] Bluetooth: hci1: command tx timeout [ 285.038487] Bluetooth: hci6: command tx timeout [ 285.038538] Bluetooth: hci2: command tx timeout [ 285.039195] Bluetooth: hci5: command tx timeout [ 285.230475] Bluetooth: hci4: command tx timeout [ 285.423716] Bluetooth: hci7: command tx timeout [ 286.702558] Bluetooth: hci0: command tx timeout [ 286.959405] Bluetooth: hci3: command tx timeout [ 287.022463] Bluetooth: hci1: command tx timeout [ 287.086576] Bluetooth: hci2: command tx timeout [ 287.087779] Bluetooth: hci5: command tx timeout [ 287.088666] Bluetooth: hci6: command tx timeout [ 287.278634] Bluetooth: hci4: command tx timeout [ 287.470459] Bluetooth: hci7: command tx timeout [ 288.752384] Bluetooth: hci0: command tx timeout [ 289.006423] Bluetooth: hci3: command tx timeout [ 289.072296] Bluetooth: hci1: command tx timeout [ 289.134541] Bluetooth: hci2: command tx timeout [ 289.135046] Bluetooth: hci5: command tx timeout [ 289.135074] Bluetooth: hci6: command tx timeout [ 289.327442] Bluetooth: hci4: command tx timeout [ 289.519475] Bluetooth: hci7: command tx timeout [ 290.798617] Bluetooth: hci0: command tx timeout [ 291.057515] Bluetooth: hci3: command tx timeout [ 291.118561] Bluetooth: hci1: command tx timeout [ 291.182546] Bluetooth: hci6: command tx timeout [ 291.182742] Bluetooth: hci2: command tx timeout [ 291.183017] Bluetooth: hci5: command tx timeout [ 291.374710] Bluetooth: hci4: command tx timeout [ 291.566426] Bluetooth: hci7: command tx timeout [ 342.543758] [ 342.544227] ====================================================== [ 342.545518] WARNING: possible circular locking dependency detected [ 342.546814] 6.13.0-next-20250123 #1 Not tainted [ 342.550558] ------------------------------------------------------ [ 342.553952] kworker/u8:1/65 is trying to acquire lock: [ 342.555056] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.557160] [ 342.557160] but task is already holding lock: [ 342.558393] ffff8880380a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 342.560447] [ 342.560447] which lock already depends on the new lock. [ 342.560447] [ 342.562062] [ 342.562062] the existing dependency chain (in reverse order) is: [ 342.563584] [ 342.563584] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 342.564980] __mutex_lock+0x13d/0xb50 [ 342.565978] wiphy_register+0x1b2e/0x25d0 [ 342.567036] ieee80211_register_hw+0x23a4/0x3d60 [ 342.568189] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 342.569394] init_mac80211_hwsim+0x389/0x870 [ 342.570527] do_one_initcall+0xf9/0x640 [ 342.571558] kernel_init_freeable+0x53d/0x7a0 [ 342.572702] kernel_init+0x1e/0x2d0 [ 342.573596] ret_from_fork+0x48/0x80 [ 342.574521] ret_from_fork_asm+0x1a/0x30 [ 342.575563] [ 342.575563] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 342.576861] __lock_acquire+0x29fd/0x4580 [ 342.577895] lock_acquire+0x19b/0x520 [ 342.578871] __mutex_lock+0x13d/0xb50 [ 342.579868] unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.581189] unregister_netdevice_queue+0x224/0x2e0 [ 342.582384] _cfg80211_unregister_wdev+0x57b/0x700 [ 342.583559] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 342.584729] ieee80211_unregister_hw+0x55/0x3a0 [ 342.585845] hwsim_exit_net+0x3a0/0x730 [ 342.586836] ops_exit_list+0xb3/0x180 [ 342.587796] cleanup_net+0x546/0xad0 [ 342.588720] process_one_work+0x8ee/0x1a10 [ 342.589789] worker_thread+0x674/0xe70 [ 342.590814] kthread+0x3ab/0x720 [ 342.591719] ret_from_fork+0x48/0x80 [ 342.592644] ret_from_fork_asm+0x1a/0x30 [ 342.593668] [ 342.593668] other info that might help us debug this: [ 342.593668] [ 342.595245] Possible unsafe locking scenario: [ 342.595245] [ 342.596429] CPU0 CPU1 [ 342.597354] ---- ---- [ 342.598312] lock(&rdev->wiphy.mtx); [ 342.599134] lock(rtnl_mutex); [ 342.600347] lock(&rdev->wiphy.mtx); [ 342.601646] lock(rtnl_mutex); [ 342.602403] [ 342.602403] *** DEADLOCK *** [ 342.602403] [ 342.603322] 4 locks held by kworker/u8:1/65: [ 342.603829] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 342.605121] #1: ffff88800efc7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 342.606504] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 342.607559] #3: ffff8880380a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 342.608508] [ 342.608508] stack backtrace: [ 342.608907] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250123 #1 [ 342.608947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 342.608973] Workqueue: netns cleanup_net [ 342.609019] Call Trace: [ 342.609032] [ 342.609046] dump_stack_lvl+0xca/0x120 [ 342.609111] print_circular_bug+0x47b/0x750 [ 342.609162] check_noncircular+0x2e9/0x3c0 [ 342.609209] ? __pfx_check_noncircular+0x10/0x10 [ 342.609256] ? hlock_class+0x4e/0x130 [ 342.609288] ? srso_return_thunk+0x5/0x5f [ 342.609351] ? mark_lock+0xac/0xed0 [ 342.609398] ? lockdep_lock+0xba/0x1b0 [ 342.609461] ? __pfx_lockdep_lock+0x10/0x10 [ 342.609529] __lock_acquire+0x29fd/0x4580 [ 342.609587] ? __pfx___lock_acquire+0x10/0x10 [ 342.609634] ? lock_release+0x20f/0x6f0 [ 342.609682] ? __pfx_lock_release+0x10/0x10 [ 342.609729] ? srso_return_thunk+0x5/0x5f [ 342.609795] lock_acquire+0x19b/0x520 [ 342.609842] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.609897] ? __pfx_lock_acquire+0x10/0x10 [ 342.609948] ? srso_return_thunk+0x5/0x5f [ 342.610012] ? lock_is_held_type+0x9e/0x120 [ 342.610075] ? srso_return_thunk+0x5/0x5f [ 342.610140] __mutex_lock+0x13d/0xb50 [ 342.610213] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.610263] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.610314] ? srso_return_thunk+0x5/0x5f [ 342.610375] ? synchronize_rcu_expedited+0x38a/0x420 [ 342.610423] ? __pfx___mutex_lock+0x10/0x10 [ 342.610483] ? srso_return_thunk+0x5/0x5f [ 342.610546] ? srso_return_thunk+0x5/0x5f [ 342.610606] ? kasan_quarantine_put+0x84/0x1e0 [ 342.610673] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 342.610711] ? srso_return_thunk+0x5/0x5f [ 342.610777] unregister_netdevice_many_notify+0x1612/0x1c80 [ 342.610828] ? __virt_addr_valid+0x2e8/0x5d0 [ 342.610886] ? __pfx_lock_release+0x10/0x10 [ 342.610934] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 342.610987] ? find_held_lock+0x2c/0x110 [ 342.611050] ? srso_return_thunk+0x5/0x5f [ 342.611113] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 342.611179] ? srso_return_thunk+0x5/0x5f [ 342.611240] ? lock_release+0x20f/0x6f0 [ 342.611288] ? __pfx_lock_release+0x10/0x10 [ 342.611335] ? srso_return_thunk+0x5/0x5f [ 342.611396] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 342.611448] ? srso_return_thunk+0x5/0x5f [ 342.611515] unregister_netdevice_queue+0x224/0x2e0 [ 342.611563] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 342.611612] ? up_write+0x195/0x520 [ 342.611672] _cfg80211_unregister_wdev+0x57b/0x700 [ 342.611730] ? srso_return_thunk+0x5/0x5f [ 342.611796] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 342.611839] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 342.611882] ? srso_return_thunk+0x5/0x5f [ 342.611942] ? srso_return_thunk+0x5/0x5f [ 342.612003] ? synchronize_rcu+0x1ff/0x260 [ 342.612050] ieee80211_unregister_hw+0x55/0x3a0 [ 342.612101] hwsim_exit_net+0x3a0/0x730 [ 342.612148] ? __pfx_hwsim_exit_net+0x10/0x10 [ 342.612193] ? srso_return_thunk+0x5/0x5f [ 342.612254] ? netdev_run_todo+0x788/0x1040 [ 342.612309] ? __pfx_hwsim_exit_net+0x10/0x10 [ 342.612356] ops_exit_list+0xb3/0x180 [ 342.612404] cleanup_net+0x546/0xad0 [ 342.612454] ? __pfx_cleanup_net+0x10/0x10 [ 342.612513] process_one_work+0x8ee/0x1a10 [ 342.612584] ? __pfx_lock_acquire+0x10/0x10 [ 342.612633] ? __pfx_process_one_work+0x10/0x10 [ 342.612697] ? srso_return_thunk+0x5/0x5f [ 342.612758] ? move_linked_works+0x172/0x270 [ 342.612807] ? srso_return_thunk+0x5/0x5f [ 342.612868] ? assign_work+0x196/0x240 [ 342.612931] worker_thread+0x674/0xe70 [ 342.612996] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 342.613056] ? srso_return_thunk+0x5/0x5f [ 342.613117] ? __pfx_worker_thread+0x10/0x10 [ 342.613182] kthread+0x3ab/0x720 [ 342.613240] ? __pfx_kthread+0x10/0x10 [ 342.613297] ? srso_return_thunk+0x5/0x5f [ 342.613358] ? finish_task_switch.isra.0+0x206/0x840 [ 342.613414] ? __pfx_kthread+0x10/0x10 [ 342.613473] ret_from_fork+0x48/0x80 [ 342.613508] ? __pfx_kthread+0x10/0x10 [ 342.613566] ret_from_fork_asm+0x1a/0x30 [ 342.613639] [ 344.375723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.378610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.384602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.387599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.389112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.390760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.510028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.512614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.517313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.521079] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.524192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.526207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.634436] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.637708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.650608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.660837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.667745] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.671730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.714907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.725698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.727616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.743080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.752918] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.754660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.773755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.778741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.790852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.790862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.808519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.817720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.834487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.847808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.852520] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.852905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.866900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.868594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.872822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.876614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.878035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.880663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.898495] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.901175] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.902859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.969818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.012704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.062704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.089626] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.103470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.414573] Bluetooth: hci0: command tx timeout [ 346.542400] Bluetooth: hci1: command tx timeout [ 346.734368] Bluetooth: hci2: command tx timeout [ 346.798444] Bluetooth: hci3: command tx timeout [ 346.928741] Bluetooth: hci4: command tx timeout [ 346.928794] Bluetooth: hci5: command tx timeout [ 346.990523] Bluetooth: hci6: command tx timeout [ 347.246471] Bluetooth: hci7: command tx timeout [ 348.463549] Bluetooth: hci0: command tx timeout [ 348.590417] Bluetooth: hci1: command tx timeout [ 348.783366] Bluetooth: hci2: command tx timeout [ 348.846497] Bluetooth: hci3: command tx timeout [ 348.974425] Bluetooth: hci5: command tx timeout [ 348.974449] Bluetooth: hci4: command tx timeout [ 349.040364] Bluetooth: hci6: command tx timeout [ 349.294531] Bluetooth: hci7: command tx timeout [ 350.510796] Bluetooth: hci0: command tx timeout [ 350.638382] Bluetooth: hci1: command tx timeout [ 350.832348] Bluetooth: hci2: command tx timeout [ 350.894508] Bluetooth: hci3: command tx timeout [ 351.022408] Bluetooth: hci4: command tx timeout [ 351.022488] Bluetooth: hci5: command tx timeout [ 351.087671] Bluetooth: hci6: command tx timeout [ 351.343493] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:33:23 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800efc6d20 R8 =0000000000000000 R9 =ffffed100174c046 R10=0000000000000065 R11=6465746e69612e36 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4c6c23c558 CR3=0000000018d08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414dcb4c00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000002f619 RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000001 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055953b6c2250 CR3=0000000015e48000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2032323a33333a3130203432206e614a XMM01=617420646570706f7453203a5d315b64 XMM02=6c6c694b20465220657661532f64616f XMM03=65747379732072656c6c616b7a797320 XMM04=2034313a39323a3130203432206e614a XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000