Warning: Permanently added '[localhost]:63115' (ECDSA) to the list of known hosts. 2025/01/25 23:05:08 fuzzer started 2025/01/25 23:05:08 dialing manager at localhost:40883 syzkaller login: [ 63.171323] cgroup: Unknown subsys name 'net' [ 63.269262] cgroup: Unknown subsys name 'cpuset' [ 63.299776] cgroup: Unknown subsys name 'rlimit' [ 69.338384] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 23:05:26 syscalls: 249 2025/01/25 23:05:26 code coverage: enabled 2025/01/25 23:05:26 comparison tracing: enabled 2025/01/25 23:05:26 extra coverage: enabled 2025/01/25 23:05:26 setuid sandbox: enabled 2025/01/25 23:05:26 namespace sandbox: enabled 2025/01/25 23:05:26 Android sandbox: enabled 2025/01/25 23:05:26 fault injection: enabled 2025/01/25 23:05:26 leak checking: enabled 2025/01/25 23:05:26 net packet injection: enabled 2025/01/25 23:05:26 net device setup: enabled 2025/01/25 23:05:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 23:05:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 23:05:26 USB emulation: enabled 2025/01/25 23:05:26 hci packet injection: enabled 2025/01/25 23:05:26 wifi device emulation: enabled 2025/01/25 23:05:26 802.15.4 emulation: enabled 2025/01/25 23:05:26 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 23:05:27 starting 8 fuzzer processes 23:05:27 executing program 0: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0x13}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x241, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0xa0000001}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0xfa1, 0xc, 0x4c, 0x16b}, {0x7ff, 0x6, 0xff, 0x6}, {0x9, 0x34, 0xfc, 0x80000001}, {0xfff9, 0x1, 0x3, 0x1}, {0x1, 0x2, 0x5, 0xea5}, {0x7, 0x0, 0x80, 0xff}]}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) flock(r3, 0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4000080) r5 = syz_io_uring_setup(0x2052, &(0x7f00000002c0)={0x0, 0x2f1d, 0x2, 0x2, 0x2a2, 0x0, r1}, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x2, 0x7, 0x8, 0xffff, 0x6, 0x8}, {0x3, 0x80, 0x1, 0xfffffffffffff341, 0x101, 0xffff}], ['\x00', '\x00']}) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000500)={r5}) syz_open_dev$vcsn(&(0x7f0000000540), 0x8000, 0x389002) syz_io_uring_setup(0x6e11, &(0x7f0000000580)={0x0, 0xec57, 0x4, 0x0, 0x387}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) r8 = syz_io_uring_setup(0x70da, &(0x7f0000000680)={0x0, 0xf2e, 0x10, 0x0, 0x2ad, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x6000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000880)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9ad5, 0x0, &(0x7f0000000780)="74d53ec6c18af6c0a5528adc1a83837469ba4106b1ba3e8ddb8bcdc648e4b844e3e3d4aac66d7f8796eccca5211feb11d74f3c940c1d01e0cee94024b08d64e025fbfce89c134213447d37ee3fea54268ddc57fa87bb40497f008974b07752e76223ef82d065e7d4f7cae9bf862cf5713f279296c900401dce966b4ccdff8aec5fd445908389658f74666b50133f1003714ea175fea719a47c93d0ad5aa392af4d0c2c81ce63cfbf342563f55a77056fa31c078cfdbd1be4d2c8744e66f6bb4c9181d24605038786f75c70368ac5352c498e7031f5442aa59064e475f9b6da4bd5d5062a9a97b41f00cf4ced35cd459e8a4a4b2aabcb", 0xf8aa00, 0x0, 0x0, {0x2}}, 0x401) r11 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r11, r8) syz_io_uring_submit(r9, r7, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x9, 0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ddbc69dfb56f088171663d01cb045ad9cb103586a0df718442723ac194bef24c44b1", 0x22}, {&(0x7f0000000900)="3e39e4457b653120ba4061e3039653465102cc9b321f5f45997ff619cb797721c0d0ce1d4cd4e836c1e174163fe4c7576850e4e603d237108a8657", 0x3b}, {&(0x7f0000000940)="2eb715b5d7e61307e19f7245fd0d6d02d39b50ec4e8e12ebf84c40183707b23879c2339bdc1365bdb06284d65d26b697968e50edd34209601e153bd979fb304ed34243b49af14944", 0x48}], 0x3, 0x2, 0x1, {0x3}}, 0x1f) 23:05:27 executing program 3: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040800) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r1, 0x8000, 0xffffffffffffffff, 0x100000001}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000200)={{r1}, 0x80000000, 0x8, 0xd321}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x531002, 0x0) sync_file_range(r1, 0x6, 0xee, 0x4) getpeername$netlink(r1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/nf_conntrack_ftp', 0x80, 0x100) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000340)) r4 = fsopen(&(0x7f0000000380)='bfs\x00', 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/drm_display_helper', 0x80400, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r5) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000480)=0xcf, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x1, 0x6, 0x2, 0x77f, 0x5, [{0x68, 0x6, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x3, '\x00', 0x46}, {0xfffffffffffffffe, 0x1f, 0x4, '\x00', 0xd}, {0x5, 0x3, 0x1ff, '\x00', 0x104}, {0x7, 0x5, 0x8, '\x00', 0x408}]}) 23:05:27 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x7f, 0x101, 0x4, 0x40}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044810}, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r1, 0xea, 0x152a7618, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r6 = socket(0x9, 0x1, 0x4) getsockname$netlink(r6, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040005) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc480}, 0x20000000) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7fff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r4) r8 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10104003}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r7, 0x54f6b30383a7ae1b, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup3(r0, r6, 0x0) sendmsg$netlink(r9, &(0x7f0000000d40)={&(0x7f00000006c0)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)=[{&(0x7f0000000700)={0x3c8, 0x34, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@generic="898c94154e409b743bae090f2d9a0ac1c649a4f60a7a7e79ef1d99250a79a3a91c56627c9111fbbf4fb418f3a622181ed5c70e339f6a4f13b8d34c17ddfd4c9a15a71482da353b32d85b7002ebdc29b38af758319d56d40e53de6ab20d5bd0e0fe7599dcc0b0e78946955761d4cc84ef8fb03debc9ea50025d8ba69e373162537e645c80b1de0ddb1530c15a672f3e64c7add552b4f8162814965be83cf7c27544e9d89f1b98fdf5e499d9ebe354f0ad4ac8f9f0be81b014a8ddee80e6c6f3d350aeb1dec9b10dcc15c58ebef8d45c67025c0702e6034b32475ef815e37699595bfec32521eade51251b023b4b48357968d3d64c230ef4eb02220c4c0f", @typed={0xc, 0x24, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r10}, @typed={0x5, 0x96, 0x0, 0x0, @binary="1b"}, @nested={0x1ac, 0x29, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}, @generic="8af54d5ced208f6cf09c65f9d34d8738e28204d6bc7cdfa8654db78cadd85eb64a4a01a2f7c7cce218ddd13ac74ba294005af71b87da119e58d1c3265c38edf64709c75494fc257fa45ada3e67c98f431037797978330e2bbebfdf332fa0da9efb9c80b89a68ddf022487b3a9d5ce05f528b705d2a08c738205b2a", @generic="58158e5d94dc833d84f68d5fd2c5be8e9710fd9fdf7626a8c32720d609bc88a4745c38060fc8fffcff97bc81f19a69f703eebe665509ad726842b93b9fbec4ba63d018a2c0223bbd09e2ee789fae85768a", @generic="d6df1674903f70b565266e4dc1c3538b77d10c6ee436a73ffad25b6af58f0986c73b2b5bbe2bb5ed591b4907b633240b09bedd84e0201ed51e4cda274d5a1594b613a592169ae66f1654176c7292b1852c202c1ef871ba610d0640c5cb04d86368d76a05fb6b4c68f08a0e14637f914df50cc29c5cecd494039b81cd3ad9d271bd524bec2ec3d678682e1dd27b9c9ee01778ee1210cfdba54825c98601ae6a808c0f68d754a6db734bd8c643fb1891b4deeec1868878172e3640a52cacbf45ccc25c89589038eea488e75b19", @generic="bf14235ffe48debf"]}, @typed={0x8, 0xf, 0x0, 0x0, @fd}, @generic="b5b13aa5b75f5132f4c607b48453785ca4750ac37e42c0f0e539aae60d7d8b6d7f552532ddd999b1294f068a4171890c0b8804dfa5e2ba07459b2afcf468b605f35f2be03a4ce7479eb62f0bb841fa5904c0f219ffcfd2b5a26e579cf94e1d3d8a32c7e049b974fd6827553fe5ffbd30d063e595587fed526cd8dd61075c0ec29f57af4454b7ed7f376e26313677ff668bc69ee4d795799696e4c022daae48c5ce20cdaa73db581e5f3b723b7ba50a5e1fa3b7d3f4ceba761c9331f5fd273d4cf86c2383d734ba6d83acad132368d7fc7288d066c8d324e149da5492799223f4c90d205759afd83592"]}, 0x3c8}], 0x1, &(0x7f0000000cc0)=[@rights={{0x30, 0x1, 0x1, [r5, r8, 0xffffffffffffffff, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r8]}}], 0x58, 0x4015}, 0x20000000) 23:05:27 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x80000000, 0xb5, 0x3, 0x6, 0x2, [0x2, 0xd85, 0x20, 0x10000]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x0, 0x9}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x1, 0x1, @status={[0x3ff, 0x5, 0x7, 0x600000000000, 0x80, 0x6]}, [0x7f, 0x8, 0x9, 0x0, 0x5, 0x3, 0x68c0, 0x1, 0x6, 0x0, 0x4, 0x6d673ba6, 0x8001, 0x6, 0xe8f6, 0x800, 0x8000, 0x6dc6, 0x80, 0x7ff, 0x9, 0x6, 0x3f, 0x3ff, 0x1, 0x8001, 0x8000, 0xff, 0x6, 0xfffffffffffff000, 0x8, 0x5, 0x5, 0x7fff, 0xf74d, 0x81, 0x2, 0x10000, 0x100000000, 0xc2c, 0x0, 0x2, 0xff, 0x1, 0x7, 0x9, 0x1, 0x5826ca6a, 0x5, 0x0, 0xfffffffffffffff7, 0x8, 0x4, 0x2, 0x8, 0x5d3, 0x5, 0x200000000000000, 0x1, 0xc795, 0x2, 0xff, 0x9, 0x1]}) getsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000000bc0)=""/4096, &(0x7f0000001bc0)=0x1000) fcntl$notify(r1, 0x402, 0x31) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001c00)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0, {0xffffff81}}, './file0\x00'}) fremovexattr(r1, &(0x7f0000001e40)=@known='com.apple.FinderInfo\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001e80)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001ec0)='net/hci\x00') r4 = geteuid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001f40)=0x0) getgroups(0x9, &(0x7f0000001f80)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0xee00, 0xee01, 0xee01, 0x0, 0x0]) fsetxattr$system_posix_acl(r3, &(0x7f0000001f00)='system.posix_acl_access\x00', &(0x7f0000001fc0)={{}, {0x1, 0x7}, [{0x2, 0x1, r4}, {0x2, 0x4, r5}, {0x2, 0x0, 0xee01}], {0x4, 0x1}, [{0x8, 0x2, r6}, {0x8, 0x5, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x4}}, 0x4c, 0x2) setuid(r5) 23:05:27 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2d40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4b07}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46084}, 0x8000) r1 = socket(0x8, 0x4, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)=""/116, 0x74}], 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsetxattr$security_selinux(r1, &(0x7f0000000740), &(0x7f0000000780)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x2) fremovexattr(r1, &(0x7f00000007c0)=@random={'btrfs.', '*\x00'}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x400000, 0x0) r4 = dup2(r0, r0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x2a0200, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x10001, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xc4, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000b00)) r9 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/ip_vs\x00') ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000d40)={0x6, 0x3, 0x81, 0x81, 0xa7}) dup3(0xffffffffffffffff, r8, 0x0) 23:05:27 executing program 6: pselect6(0x40, &(0x7f0000000000)={0x8, 0x10001, 0x4991, 0xfffffffffffffff7, 0x1, 0x8, 0x1, 0x4}, &(0x7f0000000040)={0x8, 0x5, 0x7c, 0x0, 0x100000000, 0x7, 0xf8, 0x7}, &(0x7f0000000080)={0x80000001, 0x8000, 0x3, 0x6, 0x5, 0x1, 0xc580000000000000, 0x2}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_rr_get_interval(0x0, &(0x7f00000001c0)) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="d333ed70c9856fc5602802249123490ee5fd17e47cc5d76a180d184ea9e2ae520921ab462217ee4c56229210aafabe614e2e5dbf72ace6aa89f74cc0ca61dcca5e6b0dd241f38456716acd45db79a5c08dbdf46795027106f391ccccc91f26df9d0905b8696560f388f5aaac9778be0612032a4c2d2f95fe3042c6f642d592a69820906cd85e3c1dd461088c50a89ea33acc72751ffabed4009649c250a561066b27ccbffee3afa94975ad87991bc08ecd8db55dc3", 0xb5}, {&(0x7f00000002c0)="3a7ac867e93f847016f7bd107d5ee7122a02e3c3233cb4d635bb4b5bd8c42a61e1a725b323c30637914338cb02275393ccf0074d48da50e4f79ea56019b4629a58b7ae6d46ef194745c977d8e1e0c98bc7dd7af92fc412e1f22ca3e59b7f50ca5249ab96c79b52", 0x67}], 0x2, 0x0, 0x100, 0x16) r2 = socket(0x28, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000380)) r3 = dup2(r1, r0) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000011) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000580)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r7 = socket$inet6(0xa, 0x80000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, @in_args={0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000800)) preadv2(r0, &(0x7f0000000940)=[{&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/23, 0x17}], 0x2, 0x80000001, 0x1f, 0x18) r9 = accept4(r8, &(0x7f0000000980)=@generic, &(0x7f0000000a00)=0x80, 0x80000) write(r9, &(0x7f0000000a40)="58c7b6f02bff374985bcc65266f4ff1743899cf65bf52fc8a69f66378a8a10d19a3ef2f35843b1e9111a9a4f156e43201591175801f16a6272dcb2f043b68310a9197ff585c33753e75ae7a9d9fe55b4af20d9a79ec6fa8b3193269ef1d83a7322659315e64501eba899094bf205b93029ba2ebc83b42b72b329c586553b03", 0x7f) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000ec0)={0x0, 0x1, 0x7f}) 23:05:27 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x9, 0x8, 0x101}, {0x81, 0x4, 0x40, 0x71}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x80, 0x80000000, 0x3ff, 0x2, 0x6}) sync_file_range(r0, 0x5, 0x1ff, 0x2) r1 = dup2(r0, r0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="f500cbc0d9f551d49255c7f14adfb6fe6164459e1479fd69912df65f506738977127a16322f37da25b6344a28956eecdf91aef49fcb02c54f63030dbb24c5014c384fe2b5cdad097b13a975444aa6027034fed21ba719063342ab5e61acd4ed55bcb9aeb3baf0834f972b6bda20dcc0a75f30d95e5b18a3d63c3360dd8f49a352fc3848f503612c977b7066dca0e9cd4bd447232fa643a4cd40e2a8732d8836cbbb8bbe5a9df5b1dedfb15f0eba18e7739b94f7050092469", 0xb8}, {&(0x7f0000000180)="7e0199ed2631b9f0058f0bf4a1b86c681ff2162ffbc34b2db82fa716426e18e2294ba9eee49be37188e9feb9b9d33fd7fd2253c485c0", 0x36}, {&(0x7f00000001c0)="0da42e", 0x3}, {&(0x7f0000000200)="edb6ad4773aa4bc3c300171b3ce309c5dc6faf85bb4452", 0x17}, {&(0x7f0000000240)="877b85ceecb25acc8c1bea85b37abf33b0de3728f849e3d61c3c3121354d4add95c5594024eecea7bd3083ed5bd13c661777838237055a1275e7", 0x3a}, {&(0x7f0000000280)="8279da1448c983061ca9b7c679cbd271e23e4167a6b3205534729b547cb774e82cbc4a6b9e191c6eeffb0fa7ee45a33db849de687b5934489a731cbb03d239", 0x3f}, {&(0x7f00000002c0)="747c2fdbdb61dd7bca27fc1426690b8dabdd0e7c3fa5c3cd687cbfc01756ceb8bdee3bbbfa0319bdb53c677375ae32dd3687300a7ca19b3fb356c5bdc58a56533ac2c09717703b5b0164d7882b9067cda65d7d42653bccf642e414e2451a28065b414fe6950ae239032d9f434f77927535d12329fe02095fc976554d01c3a43665d9bc8ab3ca264a2b345cf17367b4b64873a17710fc6f89c2111ecc39e394a9bf7d1405564a5a15d98218e28e58", 0xae}], 0x7, 0x3, 0x8000, 0x1a) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syncfs(r2) timerfd_gettime(r2, &(0x7f0000000440)) r3 = io_uring_setup(0x337, &(0x7f0000000480)={0x0, 0xbefa, 0x4, 0x2, 0x110, 0x0, r2}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000500)=0x2) r4 = socket(0x29, 0xa, 0x401) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000540)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000580)=r5) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000680)=[{0x401, 0x5, 0x3f, 0x4}, {0x5, 0x0, 0xa8, 0xffffff1d}, {0x8, 0x8, 0x2e, 0x2}, {0x4, 0x8, 0x8, 0x9}]}) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000700)=0x2000000) getsockopt$inet6_buf(r2, 0x29, 0xcc, &(0x7f0000000740)=""/179, &(0x7f0000000800)=0xb3) sync_file_range(r1, 0x7fffffff, 0x2, 0x3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000008c0)={&(0x7f0000000840)=""/101, 0x65, 0x1, 0x2}) [ 81.986386] audit: type=1400 audit(1737846327.725:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:05:27 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getgroups(0x3, &(0x7f00000000c0)=[0xee00, 0x0, 0xffffffffffffffff]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x4}, [{0x2, 0x6, r0}, {0x2, 0x5, r1}], {0x4, 0x1}, [{0x8, 0x6, 0xee01}, {0x8, 0x0, r2}, {0x8, 0x4}, {0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x4}}, 0x54, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000001c0)=0x1) connect$netlink(r3, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r7 = syz_open_dev$mouse(&(0x7f00000002c0), 0xfffffffffffffffb, 0x18040) getpeername$netlink(r7, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000380)={r7, 0x3f, 0x6, 0x1}) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f00000003c0)) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000440)={0x7, 0xffffffff, 0x7fffffff}, 0x10) r10 = io_uring_setup(0x2920, &(0x7f0000000480)={0x0, 0x6a20, 0x8, 0x1, 0xc5, 0x0, r9}) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) syz_io_uring_setup(0x31b5, &(0x7f0000000500)={0x0, 0xa3cc, 0x2, 0x0, 0x142, 0x0, r4}, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) getsockname$netlink(r6, &(0x7f0000000600), &(0x7f0000000640)=0xc) [ 83.341374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.343108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.348520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.362793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.365287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.366795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.469412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.474071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.478519] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.487702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.494108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.496439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.497276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.498354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.505178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.508190] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.509380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.514282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.524644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.529320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.534575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.545515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.548671] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.549782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.577838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.590192] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.595314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.596622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.607025] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.609517] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.610867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.613194] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.618542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.619365] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.621551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.626406] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.626454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.631002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.633846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.638126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.642193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.644023] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.654435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.660006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.665636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.667213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.682137] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.690082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.439508] Bluetooth: hci0: command tx timeout [ 85.566171] Bluetooth: hci2: command tx timeout [ 85.630442] Bluetooth: hci3: command tx timeout [ 85.631028] Bluetooth: hci1: command tx timeout [ 85.694053] Bluetooth: hci7: command tx timeout [ 85.696375] Bluetooth: hci5: command tx timeout [ 85.758044] Bluetooth: hci6: command tx timeout [ 85.759358] Bluetooth: hci4: command tx timeout [ 87.485995] Bluetooth: hci0: command tx timeout [ 87.613968] Bluetooth: hci2: command tx timeout [ 87.678992] Bluetooth: hci1: command tx timeout [ 87.679472] Bluetooth: hci3: command tx timeout [ 87.743033] Bluetooth: hci5: command tx timeout [ 87.743520] Bluetooth: hci7: command tx timeout [ 87.806946] Bluetooth: hci4: command tx timeout [ 87.807410] Bluetooth: hci6: command tx timeout [ 89.534216] Bluetooth: hci0: command tx timeout [ 89.661995] Bluetooth: hci2: command tx timeout [ 89.726019] Bluetooth: hci3: command tx timeout [ 89.726518] Bluetooth: hci1: command tx timeout [ 89.791009] Bluetooth: hci5: command tx timeout [ 89.791462] Bluetooth: hci7: command tx timeout [ 89.855943] Bluetooth: hci6: command tx timeout [ 89.856388] Bluetooth: hci4: command tx timeout [ 91.582090] Bluetooth: hci0: command tx timeout [ 91.709990] Bluetooth: hci2: command tx timeout [ 91.774973] Bluetooth: hci1: command tx timeout [ 91.775469] Bluetooth: hci3: command tx timeout [ 91.839092] Bluetooth: hci7: command tx timeout [ 91.839589] Bluetooth: hci5: command tx timeout [ 91.901967] Bluetooth: hci4: command tx timeout [ 91.902421] Bluetooth: hci6: command tx timeout [ 141.731531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.736858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.324836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.326328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.398884] [ 143.399118] ====================================================== [ 143.399649] WARNING: possible circular locking dependency detected [ 143.400180] 6.13.0-next-20250124 #1 Not tainted [ 143.400580] ------------------------------------------------------ [ 143.401988] kworker/u8:1/65 is trying to acquire lock: [ 143.403052] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.405492] [ 143.405492] but task is already holding lock: [ 143.406646] ffff88800c168768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 143.408609] [ 143.408609] which lock already depends on the new lock. [ 143.408609] [ 143.409713] [ 143.409713] the existing dependency chain (in reverse order) is: [ 143.410333] [ 143.410333] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 143.410909] __mutex_lock+0x13d/0xb50 [ 143.411317] wiphy_register+0x1b2e/0x25d0 [ 143.411754] ieee80211_register_hw+0x23a4/0x3d60 [ 143.412235] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 143.412734] init_mac80211_hwsim+0x389/0x870 [ 143.413199] do_one_initcall+0xf9/0x640 [ 143.413625] kernel_init_freeable+0x53d/0x7a0 [ 143.414090] kernel_init+0x1e/0x2d0 [ 143.414463] ret_from_fork+0x48/0x80 [ 143.414834] ret_from_fork_asm+0x1a/0x30 [ 143.415262] [ 143.415262] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 143.415797] __lock_acquire+0x29fd/0x4580 [ 143.416232] lock_acquire+0x19b/0x520 [ 143.416624] __mutex_lock+0x13d/0xb50 [ 143.417024] unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.417557] unregister_netdevice_queue+0x224/0x2e0 [ 143.418035] _cfg80211_unregister_wdev+0x57b/0x700 [ 143.418518] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 143.419000] ieee80211_unregister_hw+0x55/0x3a0 [ 143.419452] hwsim_exit_net+0x3a0/0x730 [ 143.419853] ops_exit_list+0xb3/0x180 [ 143.420250] cleanup_net+0x546/0xad0 [ 143.420635] process_one_work+0x8ee/0x1a10 [ 143.421080] worker_thread+0x674/0xe70 [ 143.421504] kthread+0x3ab/0x720 [ 143.421882] ret_from_fork+0x48/0x80 [ 143.422263] ret_from_fork_asm+0x1a/0x30 [ 143.422704] [ 143.422704] other info that might help us debug this: [ 143.422704] [ 143.423367] Possible unsafe locking scenario: [ 143.423367] [ 143.423870] CPU0 CPU1 [ 143.424274] ---- ---- [ 143.424668] lock(&rdev->wiphy.mtx); [ 143.425021] lock(rtnl_mutex); [ 143.425526] lock(&rdev->wiphy.mtx); [ 143.426064] lock(rtnl_mutex); [ 143.426369] [ 143.426369] *** DEADLOCK *** [ 143.426369] [ 143.426865] 4 locks held by kworker/u8:1/65: [ 143.427239] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 143.428110] #1: ffff88800bd1fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 143.428968] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 143.429764] #3: ffff88800c168768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 143.430660] [ 143.430660] stack backtrace: [ 143.431048] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 143.431086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 143.431109] Workqueue: netns cleanup_net [ 143.431150] Call Trace: [ 143.431160] [ 143.431172] dump_stack_lvl+0xca/0x120 [ 143.431231] print_circular_bug+0x47b/0x750 [ 143.431277] check_noncircular+0x2e9/0x3c0 [ 143.431320] ? __pfx_check_noncircular+0x10/0x10 [ 143.431361] ? hlock_class+0x4e/0x130 [ 143.431392] ? mark_lock+0xac/0xed0 [ 143.431432] ? srso_return_thunk+0x5/0x5f [ 143.431487] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 143.431533] ? lockdep_lock+0xba/0x1b0 [ 143.431591] ? __pfx_lockdep_lock+0x10/0x10 [ 143.431653] __lock_acquire+0x29fd/0x4580 [ 143.431707] ? __pfx___lock_acquire+0x10/0x10 [ 143.431753] ? lock_release+0x20f/0x6f0 [ 143.431799] ? __pfx_lock_release+0x10/0x10 [ 143.431847] lock_acquire+0x19b/0x520 [ 143.431891] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.431940] ? __pfx_lock_acquire+0x10/0x10 [ 143.431984] ? srso_return_thunk+0x5/0x5f [ 143.432039] ? lock_release+0x20f/0x6f0 [ 143.432083] ? srso_return_thunk+0x5/0x5f [ 143.432146] ? lock_is_held_type+0x9e/0x120 [ 143.432201] ? srso_return_thunk+0x5/0x5f [ 143.432260] __mutex_lock+0x13d/0xb50 [ 143.432312] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.432357] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.432403] ? srso_return_thunk+0x5/0x5f [ 143.432458] ? synchronize_rcu_expedited+0x38a/0x420 [ 143.432502] ? __pfx___mutex_lock+0x10/0x10 [ 143.432556] ? __pfx_autoremove_wake_function+0x10/0x10 [ 143.432611] ? srso_return_thunk+0x5/0x5f [ 143.432666] ? kasan_quarantine_put+0x84/0x1e0 [ 143.432727] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 143.432763] ? srso_return_thunk+0x5/0x5f [ 143.432822] unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.432868] ? __virt_addr_valid+0x2e8/0x5d0 [ 143.432921] ? __pfx_lock_release+0x10/0x10 [ 143.432966] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 143.433012] ? find_held_lock+0x2c/0x110 [ 143.433070] ? srso_return_thunk+0x5/0x5f [ 143.433127] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 143.433188] ? srso_return_thunk+0x5/0x5f [ 143.433243] ? lock_release+0x20f/0x6f0 [ 143.433287] ? __pfx_lock_release+0x10/0x10 [ 143.433330] ? srso_return_thunk+0x5/0x5f [ 143.433385] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 143.433433] ? srso_return_thunk+0x5/0x5f [ 143.433493] unregister_netdevice_queue+0x224/0x2e0 [ 143.433537] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 143.433580] ? up_write+0x195/0x520 [ 143.433635] _cfg80211_unregister_wdev+0x57b/0x700 [ 143.433687] ? srso_return_thunk+0x5/0x5f [ 143.433746] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 143.433785] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 143.433823] ? srso_return_thunk+0x5/0x5f [ 143.433878] ? srso_return_thunk+0x5/0x5f [ 143.433933] ? synchronize_rcu+0x1ff/0x260 [ 143.433976] ieee80211_unregister_hw+0x55/0x3a0 [ 143.434021] hwsim_exit_net+0x3a0/0x730 [ 143.434062] ? __pfx_hwsim_exit_net+0x10/0x10 [ 143.434103] ? srso_return_thunk+0x5/0x5f [ 143.434158] ? netdev_run_todo+0x788/0x1040 [ 143.434205] ? srso_return_thunk+0x5/0x5f [ 143.434262] ? __pfx_hwsim_exit_net+0x10/0x10 [ 143.434305] ops_exit_list+0xb3/0x180 [ 143.434347] cleanup_net+0x546/0xad0 [ 143.434392] ? __pfx_cleanup_net+0x10/0x10 [ 143.434445] process_one_work+0x8ee/0x1a10 [ 143.434511] ? __pfx_lock_acquire+0x10/0x10 [ 143.434555] ? __pfx_process_one_work+0x10/0x10 [ 143.434614] ? srso_return_thunk+0x5/0x5f [ 143.434669] ? move_linked_works+0x172/0x270 [ 143.434714] ? srso_return_thunk+0x5/0x5f [ 143.434769] ? assign_work+0x196/0x240 [ 143.434826] worker_thread+0x674/0xe70 [ 143.434884] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 143.434936] ? srso_return_thunk+0x5/0x5f [ 143.434991] ? __pfx_worker_thread+0x10/0x10 [ 143.435050] kthread+0x3ab/0x720 [ 143.435102] ? __pfx_kthread+0x10/0x10 [ 143.435154] ? srso_return_thunk+0x5/0x5f [ 143.435209] ? finish_task_switch.isra.0+0x206/0x840 [ 143.435260] ? __pfx_kthread+0x10/0x10 [ 143.435314] ret_from_fork+0x48/0x80 [ 143.435345] ? __pfx_kthread+0x10/0x10 [ 143.435398] ret_from_fork_asm+0x1a/0x30 [ 143.435464] [ 145.483639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.485876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.487676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.490647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.495204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.498363] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.500542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.515111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.522443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.525303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.527491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.532724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.536709] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.538719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.542233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.558182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.573165] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.579142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.619705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.622384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.630070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.633842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.635339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.638464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.644463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.650432] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.655169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.664776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.677375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.678429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.679622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.686392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.687108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.690119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.690764] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.698225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.699207] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.712508] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.717324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.740119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.746248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.756558] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.757698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.770482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.774236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.778591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.781199] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.783032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.517978] Bluetooth: hci0: command tx timeout [ 147.582015] Bluetooth: hci1: command tx timeout [ 147.645979] Bluetooth: hci2: command tx timeout [ 147.774453] Bluetooth: hci4: command tx timeout [ 147.775103] Bluetooth: hci3: command tx timeout [ 147.775138] Bluetooth: hci5: command tx timeout [ 147.838041] Bluetooth: hci6: command tx timeout [ 147.902477] Bluetooth: hci7: command tx timeout [ 149.566001] Bluetooth: hci0: command tx timeout [ 149.630958] Bluetooth: hci1: command tx timeout [ 149.694056] Bluetooth: hci2: command tx timeout [ 149.821975] Bluetooth: hci5: command tx timeout [ 149.822324] Bluetooth: hci4: command tx timeout [ 149.822713] Bluetooth: hci3: command tx timeout [ 149.885945] Bluetooth: hci6: command tx timeout [ 149.950545] Bluetooth: hci7: command tx timeout [ 151.614991] Bluetooth: hci0: command tx timeout [ 151.679920] Bluetooth: hci1: command tx timeout [ 151.741948] Bluetooth: hci2: command tx timeout [ 151.869994] Bluetooth: hci4: command tx timeout [ 151.870039] Bluetooth: hci5: command tx timeout [ 151.871599] Bluetooth: hci3: command tx timeout [ 151.936928] Bluetooth: hci6: command tx timeout [ 151.999037] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:06:29 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88807ca01870 RCX=ffffffff81429a4a RDX=1ffff11001e5fe00 RSI=0000000000000008 RDI=ffff88800f2ff000 RBP=0000000000000000 RSP=ffff88800c00fdc0 R8 =0000000000000000 R9 =ffffed1001e5fe00 R10=ffff88800f2ff007 R11=0000000000000001 R12=ffff88807ca01ff9 R13=ffffffff886529f8 R14=ffff88800f2e5340 R15=0000000000000086 RIP=ffffffff84ab2f40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055facb2b24d0 CR3=000000001a25e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffffff XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055facb29fc20000055facb2aaf40 XMM06=000055facb2b64800000000300000002 XMM07=00000000000000000000000000000000 XMM08=000000000000003100004e4f53414552 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bd1ed28 R8 =0000000000000001 R9 =ffffed10017a3d96 R10=0000000000000000 R11=6f6c206863696877 R12=000000000000005b R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283f125 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005831010 CR3=000000001676e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004167365600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000