Warning: Permanently added '[localhost]:64351' (ECDSA) to the list of known hosts. 2025/01/25 23:19:57 fuzzer started 2025/01/25 23:19:58 dialing manager at localhost:40883 syzkaller login: [ 59.955862] cgroup: Unknown subsys name 'net' [ 60.050863] cgroup: Unknown subsys name 'cpuset' [ 60.081610] cgroup: Unknown subsys name 'rlimit' [ 66.333023] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 23:20:16 syscalls: 200 2025/01/25 23:20:16 code coverage: enabled 2025/01/25 23:20:16 comparison tracing: enabled 2025/01/25 23:20:16 extra coverage: enabled 2025/01/25 23:20:16 setuid sandbox: enabled 2025/01/25 23:20:16 namespace sandbox: enabled 2025/01/25 23:20:16 Android sandbox: enabled 2025/01/25 23:20:16 fault injection: enabled 2025/01/25 23:20:16 leak checking: enabled 2025/01/25 23:20:16 net packet injection: enabled 2025/01/25 23:20:16 net device setup: enabled 2025/01/25 23:20:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 23:20:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 23:20:16 USB emulation: enabled 2025/01/25 23:20:16 hci packet injection: enabled 2025/01/25 23:20:16 wifi device emulation: enabled 2025/01/25 23:20:16 802.15.4 emulation: enabled 2025/01/25 23:20:16 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 23:20:18 starting 8 fuzzer processes 23:20:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/219) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'ip6erspan0\x00', @broadcast}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x9, 0x7, 0x0, 0x4}, {0x1, 0x9, 0x2, 0x3ff}, {0x0, 0x9, 0x8, 0x5}, {0x8, 0x9, 0x4, 0x1}, {0x6d22, 0x1, 0x3f, 0x7}, {0x1, 0x20, 0x5, 0xe27}, {0x0, 0x1, 0x5, 0x8001}]}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000240)) connect$packet(r1, &(0x7f0000000280)={0x11, 0xd, 0x0, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) inotify_init() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x202280, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x1, 0x0, 0x81, 0x7ff}, {0x80, 0x8, 0x80, 0x6}, {0x6, 0x7, 0x6, 0x5}]}) pipe(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000b40)={'vxcan1\x00'}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000b80)=""/63) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000c00)={0x5, &(0x7f0000000bc0)=[{0x9, 0x5, 0x5, 0x6}, {0x400, 0x5f, 0x1f, 0x7}, {0xd4, 0x0, 0x0, 0x4}, {0x2, 0x6d, 0x0, 0x1}, {0x8000, 0x90, 0x8, 0x240000}]}) pipe(&(0x7f0000000c40)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) getpgrp(0x0) 23:20:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x24}}}}, ["", ""]}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x41) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004080) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x41fc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb1ec}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x532e}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg$unix(r1, &(0x7f00000007c0)={&(0x7f0000000600), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10042) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x134, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe1c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a4b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x28d5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffc1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8308}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff0000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x42}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x566f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x741}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2b1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000104}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x20004000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x20102, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r3) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x19) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r5) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001040)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000d00)={0x2c4, r7, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x284, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbf, 0x3, "08e2b63fb8b71ea97eeb832045eed2f0022dcff10e570711899e1a1a62bf3f97ebe8eed1c913e26333588b75364dde2c2d738e294d39dd06cf109b02fff6ce5cdcb4443970ca408444448b1dcfb1de747aeb581b3ea810b27a7167af728831754c10b2b6d7ed436eabef793dbf7e61b3bb9756f1b21a49578d855aa765f18f34bbbce1cf8b70c420f93a010b5be0c5ce4485fcd7de0213964d12fb19cdb9189b4a56f1f2478bf2eaee76b457ab223bd575c336cc7f7658d82f935f"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6cda2f4cb0f3720d7fd4dd387ca66bc802f3abe163668bb69634f7b07d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "c8ea54d8b427dfaf2a14a3e347be19d4fd9e14f3048d4a4c7ec8d318fa8f6495de149d5f4f1a64a4aa12ceb4d7ca56e073ee5f7e88ada7746129f074da6004a73f841c82184fb2425fba47c96843dd8beeeb485702a7e34d18cd5e76a076023103d365379a9d6a539ff1a1a541bd0c75c9d71347463036bc43765fc75a0ba454380e8d807822bc84f62fe6726b3dfe44e38de67c02b1b2218495e4de488dabd9571a4886f6dc3ff0d89f9b84f1f2521ddce578f3769fb03ab7fd41fbaea18fe8eea5c42157b31042c080fc5843c2f93f733aeefe08737436a095167f"}, @TIPC_NLA_NODE_ID={0x87, 0x3, "2116494acc9a586e3aec0e60c6561ee5cc0c0af3de4531793d6f3bfd10937b000df9f875290c9f58b96e503beb742f63df34e52de7cd6d840a5322b5b481649c663d02c4e5caa3716c74a4412a19646be6917d6f8c8b076d54a7878411a316713ead11924fa5422ba3e63b2dd354cff3fe21e60dc3424332fab1ef0f802d04f393e533"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x801}, 0x20004010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r5) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x20, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7c01, 0x12}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x851) syz_genetlink_get_family_id$team(&(0x7f00000011c0), r1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008001}, 0x0) 23:20:18 executing program 2: msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/89) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000080)=""/195) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000180)=""/210) r0 = msgget(0x0, 0x90) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000280)=""/218) r1 = msgget(0x2, 0x8) msgsnd(r1, &(0x7f0000000380)={0x3, "beaae3e637e0a0b8514b70cb815f28c7f84ad7a4ab66b3bf7cff4e"}, 0x23, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/40}, 0x30, 0x0, 0x3800) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000400)=""/4096) openat$urandom(0xffffffffffffff9c, &(0x7f0000001400), 0x4000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x88, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = msgget(0x0, 0x300) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000015c0)=""/167) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001680)=""/2) msgctl$IPC_RMID(r0, 0x0) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4007) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000016c0)=""/182) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000001780)=""/208) [ 79.838865] audit: type=1400 audit(1737847218.329:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:20:18 executing program 3: waitid(0x1, 0x0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) mq_open(&(0x7f0000000140)='\x00', 0x0, 0x2, &(0x7f0000000180)={0x1f, 0x1ff, 0x9, 0x400}) socketpair(0x27, 0x800, 0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @loopback, 0x1}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000003}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) socketpair(0x8, 0x0, 0x6, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000003c0)=""/35, &(0x7f0000000400)=0x23) socket$inet_icmp(0x2, 0x2, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x30, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004851}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0xea080, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5bd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x26000200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x6, 0xd9}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x0, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x200448c0}, 0x8881) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r9) 23:20:18 executing program 4: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000000)=""/104) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'wg2\x00'}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x8001, 0x7, 0x6, 0xffff0000}, {0x8000, 0x5, 0x40, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000001c0)=0x6d) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x6, 0x9, 0x5, 0x8}, {0x5d0f, 0x42, 0x9, 0xc35}, {0x100, 0x5, 0xbd, 0x9}]}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000280)=""/84, &(0x7f0000000300)=0x54) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x1d84, 0x6, 0x3}, {0x644f, 0x4, 0x4, 0xac}, {0x3ff, 0x81, 0x3, 0xfffffffc}, {0x2, 0x0, 0x3, 0x7ff}]}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x0, 0x8, 0x7, 0x3}, {0x3, 0xad, 0x80, 0x3}, {0x7f, 0x1, 0x81, 0x8}, {0xa5, 0x8, 0x8, 0x3}, {0x8, 0x1, 0x4, 0x400}, {0x1f, 0x8, 0x9f, 0xffffffe0}]}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000440)=0x1) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000480)=""/43) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x8, 0x0, 0x4, 0x7}, {0xffff, 0x7, 0x5, 0x3}, {0x4, 0x8, 0x0, 0x57}]}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000580)=0x4) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000005c0)=0x46b) mq_notify(r1, &(0x7f0000000600)={0x0, 0xa, 0x2, @tid=0xffffffffffffffff}) 23:20:18 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1e8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) connect$packet(r4, &(0x7f0000000480)={0x11, 0x0, r5, 0x1, 0x7}, 0x14) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000500)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000808}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x6, 0x5, 0x4}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x404c840) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20001, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r9) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000b80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000780)={0x3a8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x220, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x68, 0x3, "6bdd71945b7d52c10eb6bba738f804a8263309ec239242644e9ebde615cbd7051cb2e64ab887f40eabf2043620d82c41204b0baead1d72de69c6c72bd3124c3fd079a69d1bc3ec3cedd6a193cfdd3853b62c92191f855e07e13a6e76b5819321c793d827"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cd96e7ad3a80924e60e492660cfdcd20a88f33fa3a0b5c88c1539c57"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "df3b7b465e6a71250b1d6dff7b3a32fde1cfb1ae7a0debd12cd44ee4ba0745fcbb22076bce2fd3ee284c6ffa8c2994b37d50537d880a0c3ecc792365e5977669fba4c6ca19427bb9af87337cebc7199e7d8f2e589eba9985e7382fcacf16c1fc894952a5e7120596abe11424ca57db4a3d8c18d7ef3ffd3a91a9581d6167fd1d6fedaff1fee16a343a0e79c3933f54d2f3e6971184a340d1a78639379e2542d1a003591c36b201ef02b03a79ea619002aad345edd1bfbc62e3bf696a8383f67f2022a708411086202570ef646db08b9a6ddf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "22e9f1b18f430bc24fd4f1cc5215c860e23c8019c1031ad1768845c12cd67e4e62e9"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "bfe2a9a9dea1e14459431e9022c23cfc32a046549fc88595d4d0"}}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x336e9e39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x92a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe45}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10044}, 0x48800) pipe(&(0x7f0000000d40)) 23:20:18 executing program 6: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r0) keyctl$unlink(0x9, r0, r1) r2 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='keyring\x00', r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r4 = add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="343e4babe62b2760c92c9bd7374f729f3c3a193b04e7b92803ddef064364dfdf1c53877e1a0f988d554432d342274e8eb527e15429731e9ae377c89e662e25", 0x3f, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz', 0x2}, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, r6, 0x1, 0x40, 0x6, @multicast}, 0x14) r7 = add_key(&(0x7f0000000500)='rxrpc\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="131b8ecca6ddb346b26de212eb80ed06f809430289ea1e958f20d896f441afff00351463660f1a42f50d719a67078105eae1af5327644993305b4e410caf83d459ba2b35497fd9116b05a0acf033b354dd26b54e050e0b72f6188ee75e6a608919c8801b74c365c61f446f59479e33a000065c1089adcc2bd1bb55887fdfe70af6f02975447ca5c6e39bd65d653a1a882538c87627bb4723faa62b0edc", 0x9d, r2) keyctl$search(0xa, r7, &(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x1}, r2) r8 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)='encrypted\x00') r9 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$search(0xa, r9, &(0x7f0000000840)='rxrpc_s\x00', &(0x7f0000000880)={'syz', 0x0}, r9) r10 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc3}, &(0x7f00000009c0)={0x0, "64e55fd640a077e905328cd3fc3410658c69b1ba629377f91add17f7ed3879e9fd6826ee007b1bf15de99de8877144c29ade5812f09dcfbb1b8e8950c83c6ab4", 0x1b}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, r10) 23:20:18 executing program 7: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x3ff}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x440448c4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x40080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8400480}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x8080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40801}, 0xc0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x180, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x175c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfb18}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7035}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20040004}, 0x800) inotify_init() sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, 0x0, 0xe01, 0x70bd2b, 0x40, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8001}, 0x48040) socketpair(0x15, 0x4, 0xfffffff9, &(0x7f00000009c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a00)={'wpan3\x00'}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x10) [ 81.218398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.221045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.222442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.227507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.229583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.232404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.281306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.289656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.291444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.298973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.301049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.302464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.356491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.358581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.360303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.365641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.379189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.392084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.398181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.399460] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.406216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.429064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.451630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.455086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.474132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.486853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.489330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.491738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.493260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.495181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.497236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.502181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.504017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.506149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.510516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.514170] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.515511] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.516573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.520042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.523262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.533608] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.553147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.574900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.654389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.660414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.676208] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.709384] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.713071] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.314945] Bluetooth: hci0: command tx timeout [ 83.378193] Bluetooth: hci1: command tx timeout [ 83.506836] Bluetooth: hci2: command tx timeout [ 83.569936] Bluetooth: hci6: command tx timeout [ 83.570039] Bluetooth: hci4: command tx timeout [ 83.570845] Bluetooth: hci3: command tx timeout [ 83.633915] Bluetooth: hci5: command tx timeout [ 83.826876] Bluetooth: hci7: command tx timeout [ 85.361940] Bluetooth: hci0: command tx timeout [ 85.425889] Bluetooth: hci1: command tx timeout [ 85.553802] Bluetooth: hci2: command tx timeout [ 85.617881] Bluetooth: hci3: command tx timeout [ 85.618487] Bluetooth: hci4: command tx timeout [ 85.618520] Bluetooth: hci6: command tx timeout [ 85.682813] Bluetooth: hci5: command tx timeout [ 85.875342] Bluetooth: hci7: command tx timeout [ 87.410850] Bluetooth: hci0: command tx timeout [ 87.474823] Bluetooth: hci1: command tx timeout [ 87.602812] Bluetooth: hci2: command tx timeout [ 87.666805] Bluetooth: hci3: command tx timeout [ 87.667268] Bluetooth: hci6: command tx timeout [ 87.667694] Bluetooth: hci4: command tx timeout [ 87.729809] Bluetooth: hci5: command tx timeout [ 87.921884] Bluetooth: hci7: command tx timeout [ 89.458017] Bluetooth: hci0: command tx timeout [ 89.521822] Bluetooth: hci1: command tx timeout [ 89.651021] Bluetooth: hci2: command tx timeout [ 89.713834] Bluetooth: hci4: command tx timeout [ 89.713892] Bluetooth: hci6: command tx timeout [ 89.714246] Bluetooth: hci3: command tx timeout [ 89.777826] Bluetooth: hci5: command tx timeout [ 89.970042] Bluetooth: hci7: command tx timeout [ 139.363924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.364668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.522852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.523578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.020110] [ 142.020315] ====================================================== [ 142.020841] WARNING: possible circular locking dependency detected [ 142.021357] 6.13.0-next-20250124 #1 Not tainted [ 142.021732] ------------------------------------------------------ [ 142.022724] kworker/u8:0/11 is trying to acquire lock: [ 142.023992] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.026181] [ 142.026181] but task is already holding lock: [ 142.027996] ffff888015be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.030060] [ 142.030060] which lock already depends on the new lock. [ 142.030060] [ 142.031987] [ 142.031987] the existing dependency chain (in reverse order) is: [ 142.033295] [ 142.033295] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 142.034087] __mutex_lock+0x13d/0xb50 [ 142.034648] wiphy_register+0x1b2e/0x25d0 [ 142.035243] ieee80211_register_hw+0x23a4/0x3d60 [ 142.035898] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 142.036589] init_mac80211_hwsim+0x389/0x870 [ 142.037231] do_one_initcall+0xf9/0x640 [ 142.037815] kernel_init_freeable+0x53d/0x7a0 [ 142.038448] kernel_init+0x1e/0x2d0 [ 142.038956] ret_from_fork+0x48/0x80 [ 142.039447] ret_from_fork_asm+0x1a/0x30 [ 142.040012] [ 142.040012] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 142.040737] __lock_acquire+0x29fd/0x4580 [ 142.041323] lock_acquire+0x19b/0x520 [ 142.041870] __mutex_lock+0x13d/0xb50 [ 142.042426] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.043171] unregister_netdevice_queue+0x224/0x2e0 [ 142.043843] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.044522] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.045156] ieee80211_unregister_hw+0x55/0x3a0 [ 142.045766] hwsim_exit_net+0x3a0/0x730 [ 142.046300] ops_exit_list+0xb3/0x180 [ 142.046822] cleanup_net+0x546/0xad0 [ 142.047361] process_one_work+0x8ee/0x1a10 [ 142.047946] worker_thread+0x674/0xe70 [ 142.048509] kthread+0x3ab/0x720 [ 142.048995] ret_from_fork+0x48/0x80 [ 142.049485] ret_from_fork_asm+0x1a/0x30 [ 142.050066] [ 142.050066] other info that might help us debug this: [ 142.050066] [ 142.050961] Possible unsafe locking scenario: [ 142.050961] [ 142.051612] CPU0 CPU1 [ 142.052118] ---- ---- [ 142.052637] lock(&rdev->wiphy.mtx); [ 142.053116] lock(rtnl_mutex); [ 142.053805] lock(&rdev->wiphy.mtx); [ 142.054549] lock(rtnl_mutex); [ 142.054980] [ 142.054980] *** DEADLOCK *** [ 142.054980] [ 142.055673] 4 locks held by kworker/u8:0/11: [ 142.056196] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 142.057174] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 142.058033] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 142.058817] #3: ffff888015be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.059645] [ 142.059645] stack backtrace: [ 142.060021] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 142.060058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.060080] Workqueue: netns cleanup_net [ 142.060121] Call Trace: [ 142.060130] [ 142.060141] dump_stack_lvl+0xca/0x120 [ 142.060198] print_circular_bug+0x47b/0x750 [ 142.060244] check_noncircular+0x2e9/0x3c0 [ 142.060287] ? __pfx_check_noncircular+0x10/0x10 [ 142.060328] ? hlock_class+0x4e/0x130 [ 142.060359] ? mark_lock+0xac/0xed0 [ 142.060405] ? srso_return_thunk+0x5/0x5f [ 142.060460] ? __dequeue_entity+0x9b1/0x1900 [ 142.060512] ? lockdep_lock+0xba/0x1b0 [ 142.060569] ? __pfx_lockdep_lock+0x10/0x10 [ 142.060632] __lock_acquire+0x29fd/0x4580 [ 142.060690] ? __pfx___lock_acquire+0x10/0x10 [ 142.060733] ? lock_release+0x20f/0x6f0 [ 142.060778] ? __pfx_lock_release+0x10/0x10 [ 142.060826] lock_acquire+0x19b/0x520 [ 142.060869] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.060917] ? __pfx_lock_acquire+0x10/0x10 [ 142.060962] ? srso_return_thunk+0x5/0x5f [ 142.061017] ? lock_release+0x20f/0x6f0 [ 142.061060] ? srso_return_thunk+0x5/0x5f [ 142.061115] ? lock_is_held_type+0x9e/0x120 [ 142.061170] ? srso_return_thunk+0x5/0x5f [ 142.061229] __mutex_lock+0x13d/0xb50 [ 142.061280] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.061325] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.061371] ? srso_return_thunk+0x5/0x5f [ 142.061426] ? synchronize_rcu_expedited+0x38a/0x420 [ 142.061470] ? __pfx___mutex_lock+0x10/0x10 [ 142.061524] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.061577] ? srso_return_thunk+0x5/0x5f [ 142.061632] ? kasan_quarantine_put+0x84/0x1e0 [ 142.061693] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.061728] ? srso_return_thunk+0x5/0x5f [ 142.061787] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.061833] ? __virt_addr_valid+0x2e8/0x5d0 [ 142.061885] ? __pfx_lock_release+0x10/0x10 [ 142.061930] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 142.061976] ? find_held_lock+0x2c/0x110 [ 142.062034] ? srso_return_thunk+0x5/0x5f [ 142.062091] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 142.062152] ? srso_return_thunk+0x5/0x5f [ 142.062207] ? lock_release+0x20f/0x6f0 [ 142.062251] ? __pfx_lock_release+0x10/0x10 [ 142.062294] ? srso_return_thunk+0x5/0x5f [ 142.062349] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.062396] ? srso_return_thunk+0x5/0x5f [ 142.062456] unregister_netdevice_queue+0x224/0x2e0 [ 142.062500] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 142.062543] ? up_write+0x195/0x520 [ 142.062598] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.062650] ? srso_return_thunk+0x5/0x5f [ 142.062709] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.062747] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 142.062786] ? srso_return_thunk+0x5/0x5f [ 142.062841] ? srso_return_thunk+0x5/0x5f [ 142.062896] ? synchronize_rcu+0x1ff/0x260 [ 142.062938] ieee80211_unregister_hw+0x55/0x3a0 [ 142.062983] hwsim_exit_net+0x3a0/0x730 [ 142.063025] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.063065] ? srso_return_thunk+0x5/0x5f [ 142.063120] ? netdev_run_todo+0x788/0x1040 [ 142.063167] ? srso_return_thunk+0x5/0x5f [ 142.063224] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.063267] ops_exit_list+0xb3/0x180 [ 142.063309] cleanup_net+0x546/0xad0 [ 142.063354] ? __pfx_cleanup_net+0x10/0x10 [ 142.063407] process_one_work+0x8ee/0x1a10 [ 142.063472] ? __pfx_lock_acquire+0x10/0x10 [ 142.063517] ? __pfx_process_one_work+0x10/0x10 [ 142.063575] ? srso_return_thunk+0x5/0x5f [ 142.063630] ? move_linked_works+0x172/0x270 [ 142.063675] ? srso_return_thunk+0x5/0x5f [ 142.063730] ? assign_work+0x196/0x240 [ 142.063787] worker_thread+0x674/0xe70 [ 142.063845] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.063898] ? __pfx_worker_thread+0x10/0x10 [ 142.063957] kthread+0x3ab/0x720 [ 142.064009] ? __pfx_kthread+0x10/0x10 [ 142.064060] ? srso_return_thunk+0x5/0x5f [ 142.064115] ? finish_task_switch.isra.0+0x206/0x840 [ 142.064166] ? __pfx_kthread+0x10/0x10 [ 142.064220] ret_from_fork+0x48/0x80 [ 142.064251] ? __pfx_kthread+0x10/0x10 [ 142.064304] ret_from_fork_asm+0x1a/0x30 [ 142.064375] [ 143.868018] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.872951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.884052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.888165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.890485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.892571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.926846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.934040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.934675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.943130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.943791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.944458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.945509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.948027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.948829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.950309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.953055] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.955147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.956514] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.958592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.984179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.992914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.997865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.000713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.002296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.004804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.005430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.006979] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.007664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.008645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.012020] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.012250] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.015067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.016032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.025604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.027476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.029183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.030577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.034003] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.036420] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.039283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.040125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.122225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.143488] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.155478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.179297] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.184946] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.189160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.905894] Bluetooth: hci0: command tx timeout [ 146.033829] Bluetooth: hci1: command tx timeout [ 146.034370] Bluetooth: hci3: command tx timeout [ 146.097858] Bluetooth: hci6: command tx timeout [ 146.098395] Bluetooth: hci4: command tx timeout [ 146.099121] Bluetooth: hci5: command tx timeout [ 146.163766] Bluetooth: hci2: command tx timeout [ 146.227844] Bluetooth: hci7: command tx timeout [ 147.954846] Bluetooth: hci0: command tx timeout [ 148.081865] Bluetooth: hci3: command tx timeout [ 148.082417] Bluetooth: hci1: command tx timeout [ 148.145996] Bluetooth: hci5: command tx timeout [ 148.146488] Bluetooth: hci4: command tx timeout [ 148.147070] Bluetooth: hci6: command tx timeout [ 148.210774] Bluetooth: hci2: command tx timeout [ 148.275516] Bluetooth: hci7: command tx timeout [ 150.003064] Bluetooth: hci0: command tx timeout [ 150.129861] Bluetooth: hci1: command tx timeout [ 150.129878] Bluetooth: hci3: command tx timeout [ 150.194199] Bluetooth: hci4: command tx timeout [ 150.194545] Bluetooth: hci6: command tx timeout [ 150.195418] Bluetooth: hci5: command tx timeout [ 150.257850] Bluetooth: hci2: command tx timeout [ 150.322606] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:21:20 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec88 R8 =0000000000000000 R9 =ffffed1001dc4046 R10=00000000000fe503 R11=3a6b636f6c206762 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10d2e66 R15=dffffc0000000000 RIP=ffffffff8283f125 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561a9ac211d8 CR3=0000000009508000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=0000561a9ac5e0300000561a9abf4590 XMM05=00000000ffffffff0000561a9abb45d0 XMM06=000000000000006563697665642e3169 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88807b1b4e98 RCX=ffffffff81429a4a RDX=1ffff11001ea1d80 RSI=0000000000000008 RDI=ffff88800f50ec00 RBP=0000000000000000 RSP=ffff88800e6ffdd0 R8 =0000000000000000 R9 =ffffed1001ea1d80 R10=ffff88800f50ec07 R11=ffff88800f55a078 R12=ffff88807b1b4ff9 R13=ffffffff88651e30 R14=ffff88800f559bc0 R15=0000000000000086 RIP=ffffffff81aefb34 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00577f000 CR3=000000001394a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4ed6bd078e55e292e74e80a2cfd3da8e XMM02=d12871896912de2d00000000000fda20 XMM03=f9980df3bdc2dbad0000000000132b08 XMM04=774ce96049ac9e1500000000000ae988 XMM05=9f165a4fe6c971ad0000000000137eb0 XMM06=7c8d2a4f1e787a980000000000137e10 XMM07=9dfd782bcd0463760000000000132b60 XMM08=68a8aee3740b9fad00000000000fdb40 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000002000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000