Warning: Permanently added '[localhost]:31192' (ECDSA) to the list of known hosts. 2025/01/25 23:26:42 fuzzer started 2025/01/25 23:26:43 dialing manager at localhost:40883 syzkaller login: [ 70.157076] cgroup: Unknown subsys name 'net' [ 70.314027] cgroup: Unknown subsys name 'cpuset' [ 70.356347] cgroup: Unknown subsys name 'rlimit' [ 75.429405] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 23:26:58 syscalls: 202 2025/01/25 23:26:58 code coverage: enabled 2025/01/25 23:26:58 comparison tracing: enabled 2025/01/25 23:26:58 extra coverage: enabled 2025/01/25 23:26:58 setuid sandbox: enabled 2025/01/25 23:26:58 namespace sandbox: enabled 2025/01/25 23:26:58 Android sandbox: enabled 2025/01/25 23:26:58 fault injection: enabled 2025/01/25 23:26:58 leak checking: enabled 2025/01/25 23:26:58 net packet injection: enabled 2025/01/25 23:26:58 net device setup: enabled 2025/01/25 23:26:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 23:26:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 23:26:58 USB emulation: enabled 2025/01/25 23:26:58 hci packet injection: enabled 2025/01/25 23:26:58 wifi device emulation: enabled 2025/01/25 23:26:58 802.15.4 emulation: enabled 2025/01/25 23:26:58 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 23:27:00 starting 8 fuzzer processes 23:27:00 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x22100, 0x6, 0x4}, 0x18) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x131200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='.\x00', 0x100, 0x0, &(0x7f0000000180), 0x221050, &(0x7f00000001c0)={[{@lazytime}, {@nomblk_io_submit}, {@sb={'sb', 0x3d, 0x5}}, {@dioread_lock}, {@grpjquota}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/autofs\x00'}}, {@pcr={'pcr', 0x3d, 0x10}}, {@fowner_gt={'fowner>', 0xee01}}, {@dont_hash}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_user={'obj_user', 0x3d, ',-\\-'}}, {@dont_hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x10802, 0x1, 0x12}, 0x18) recvmmsg$unix(r1, &(0x7f0000000340), 0x0, 0x2000, &(0x7f0000000380)) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLERRORu(r2, &(0x7f0000000400)={0x17, 0x7, 0x2, {{0xa, 'grpjquota='}, 0x10000}}, 0x17) r3 = accept4(r1, 0x0, &(0x7f0000000a00), 0x80000) accept4$unix(r3, &(0x7f0000000a40)=@abs, &(0x7f0000000ac0)=0x6e, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) connect$bt_sco(r1, &(0x7f0000000b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000bc0)=@abs, &(0x7f0000000c40)=0x6e, 0x80800) bind$unix(r6, &(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e) write$P9_RLERRORu(r2, &(0x7f0000000d00)={0x1d, 0x7, 0x1, {{0x10, '[)[,--@.,.,:!@(('}, 0x2}}, 0x1d) write$nbd(r5, &(0x7f0000000d40)={0x67446698, 0x0, 0x0, 0x1, 0x2, "788c5f91d2061f6173177931a3f90fbb3a20794faeaa5aed34ccad8b0f4d79f21546e88730d0180b7f59aaf12cae9b5a1fb9db091c89669ae2f5908460ee249a8aed15833f3dc22bbdfca993835a99ce2829065fc211dfed929f88e026380a77063f15335ace2a9aad8329c724"}, 0x7d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000dc0)={'wpan3\x00'}) recvmmsg$unix(r6, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/106, 0x6a}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/14, 0xe}, {&(0x7f0000000f00)=""/154, 0x9a}, {&(0x7f0000000fc0)=""/107, 0x6b}], 0x5, &(0x7f00000010c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000003400)=[{&(0x7f0000001200)=""/243, 0xf3}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/203, 0xcb}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x4, &(0x7f0000003440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000003500)=""/75, 0x4b}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003640)=""/94, 0x5e}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/174, 0xae}, {&(0x7f0000004780)=""/173, 0xad}, {&(0x7f0000004840)=""/131, 0x83}], 0x7, &(0x7f0000004980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000004a00)=@abs, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004a80)}, {&(0x7f0000004ac0)=""/218, 0xda}, {&(0x7f0000004bc0)=""/82, 0x52}, {&(0x7f0000004c40)=""/48, 0x30}, {&(0x7f0000004c80)=""/67, 0x43}], 0x5, &(0x7f0000004d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x4, 0x120a0, &(0x7f0000004ec0)={0x77359400}) 23:27:00 executing program 0: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x0, @desc4}) r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="57ebbea011d0d7792061e664839d0ba9c49b872e655abc4caa87f2e8326b077c7822f5a49f01611d34ba4dff96197acbcef08620b54704e60ac758516c614b865a29224ef24be1cf3310c945c9f4f1369e1fe4dc0eaf3f8719c07b35932f557d3a29023b26797e6b61b8e6a287f648858291f6be9693b692c7c64f64820f8d40821ce0b52007d1719079762653342087e1c5e533a5f0e8bbf11813d765d9c69504b7ea2fb42b8f35ee57e129f746fb1b70b67f0b713ecbdf021c5b0b7e7e81e7928c0a075a9a9f3ca2", 0xc9, 0x1}, {&(0x7f00000001c0)="20eec98093a0682434b43a05a47cde6a9ba2732208f1d8733f00197ca6d2de", 0x1f, 0x2000000}, {&(0x7f0000000200)="f63e379b25667fd54a53c32345a393a2348a43", 0x13, 0x5}], 0x1044000, &(0x7f00000002c0)={[{}, {'\x85\xba\xa1t\xf0\xcb\x11B'}, {'(Q{5'}, {'\x85\xba\xa1t\xf0\xcb\x11B'}, {'\x85\xba\xa1t\xf0\xcb\x11B'}, {'\x85\xba\xa1t\xf0\xcb\x11B'}, {'$%'}, {'\x85\xba\xa1t\xf0\xcb\x11B'}, {}, {'&\xdf'}], [{@smackfsroot}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xb7ab}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000440)="e81c287537449998f5aec0d9c3ba307b8db577657b8d422ccab91905d1ab38d34292ed1f422d654883a44713fdfc73c17fc2acf37c07b0cccaab66", 0x3b}, {&(0x7f0000000480)="d98b5188875415c52ad0b9dfe94990a1c318a0116482698739ef3247af1389db24de97fe787db3e51adb5bbf75fc7526baf6d6c7854c1f25b1edea1e26604c8a47e30af5dea86078944615ea8c20235f20cee5e7494192c1d4e81d438ecda2ea2d746501e9e1afb2bb6608e3b7b83a9859b6483952020c42fe036b843f3e55452a8e95b495994e0333f299ddd308bd285350d2cb8a9b194e40245d2e75d66e78cd1d8dd7104e01b3b8c121e6c5e10905633520c2c4172716fce986d0073dfe08e4d79de1eb490115b7b99ddc3dd00b1b2df1ba00398bcf93cda5b6d2696f03a776f29a0ebd98aa04e21c41f825b73ea44ad4c1c923adce", 0xf7, 0xc441}, {&(0x7f0000000580)="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", 0xfc, 0x10001}], 0x285d064, &(0x7f0000000700)={[{'(Q{5'}, {'(Q{5'}, {'+'}, {'(Q{5'}, {'user_u'}], [{@fsuuid={'fsuuid', 0x3d, {[0xf5, 0x1, 0x38, 0x32, 0x30, 0x37, 0x38], 0x2d, [0x39, 0x30, 0x39, 0x32], 0x2d, [0x38, 0x64, 0x0, 0x30], 0x2d, [0x64, 0x33, 0x39, 0x66], 0x2d, [0x31, 0x33, 0x32, 0x35, 0x38, 0x62, 0x35, 0x34]}}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1d}}]}) getsockname(r2, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000800)=0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa322}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44851}, 0x840) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0xc202, 0x4, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r4, {0x9f}}, './file0/file0\x00'}) r6 = accept(r3, &(0x7f0000000a00)=@phonet, &(0x7f0000000a80)=0x80) bind$bt_sco(r6, &(0x7f0000000ac0)={0x1f, @none}, 0x8) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000b00)) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b40), 0x22000, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x48010) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000cc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x11, "a3d2e322081e4a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001cc0)={{r8, 0x72, 0x100000001, 0x81, 0x0, 0x7, 0xfffffffffffffffb, 0x8000, 0x1f, 0x200, 0x8, 0x4, 0x3, 0x0, 0xea57}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x8000) recvmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000001ec0)=@ax25={{}, [@remote, @null, @netrom, @remote, @rose, @null, @null, @netrom]}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f40)=""/52, 0x34}, {&(0x7f0000001f80)=""/25, 0x19}, {&(0x7f0000001fc0)=""/135, 0x87}, {&(0x7f0000002080)=""/89, 0x59}], 0x4}, 0x1ff}], 0x1, 0x41, &(0x7f0000002180)={0x0, 0x989680}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000002300)='./file0\x00', 0x8, 0x1, &(0x7f0000002380)=[{&(0x7f0000002340)="f0097ef3815747ce8a0628cc1fd03fb87cb264799ea44f131ee36f2edcd65b6ed6bbc9046cccc4090e4123b0fcfa", 0x2e, 0x6}], 0x194008, &(0x7f00000023c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x36, 0x39, 0x57, 0xd, 0x30, 0x37], 0x2d, [0x64, 0x31, 0x36, 0x38], 0x2d, [0x30, 0x33, 0x66], 0x2d, [0x35, 0x31, 0x63, 0x62], 0x2d, [0x32, 0x37, 0x34, 0x31, 0x65, 0x5a, 0x31, 0x54]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}-'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 23:27:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$tun(r1, &(0x7f0000000040)={@void, @void, @llc={@llc={0x4e, 0xfc, "1ff3", "fd707f04ad9f2439015b130832f9f8d2338fa1b3720e8624928ae284d28f585e94174d1c7ad38037f57125a2f7955bc60380a9267434f8a069c6747913ef0166c7d27671e9d6d544e05bc1189b4f4c85bb5a41d53039b69b82991d04a6956c2d558247bd97082b72876db6e301bc7acd0fb3359c0df3c05955918cb5c762e82f473196d72d33c22b087aadd271f3a161030723168fe24fcfbb15e11ac8c4f6c0417971fffb"}}}, 0xa9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) socketpair(0xa, 0x5, 0x3ff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000002c0)=0x80) getsockname$unix(r4, &(0x7f0000000300), &(0x7f0000000380)=0x6e) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x6aa801, 0x10, 0x2}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000003c0)=',(/:\x00', &(0x7f0000000400)='./file0\x00', r5) socketpair(0x2b, 0x2, 0x10001, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getsockname(r6, &(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f00000005c0)=0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x8, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r3) shmctl$SHM_LOCK(0x0, 0xb) recvmmsg$unix(r3, &(0x7f0000006a80)=[{{&(0x7f00000007c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/142, 0x8e}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/238, 0xee}, {&(0x7f0000001c40)=""/139, 0x8b}, {&(0x7f0000001d00)=""/205, 0xcd}, {&(0x7f0000001e00)=""/92, 0x5c}], 0x9, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002080), 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000002100)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000003400)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/9, 0x9}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000003300)=""/168, 0xa8}, {&(0x7f00000033c0)=""/39, 0x27}], 0x5, &(0x7f0000003480)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f00000035c0), 0x0, &(0x7f0000003600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f00000036c0)=""/31, 0x1f}, {&(0x7f0000003700)=""/206, 0xce}, {&(0x7f0000003800)=""/157, 0x9d}, {&(0x7f00000038c0)=""/162, 0xa2}, {&(0x7f0000003980)=""/223, 0xdf}, {&(0x7f0000003a80)=""/255, 0xff}, {&(0x7f0000003b80)=""/36, 0x24}, {&(0x7f0000003bc0)=""/149, 0x95}, {&(0x7f0000003c80)=""/40, 0x28}], 0x9, &(0x7f0000003d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003dc0)=""/145, 0x91}, {&(0x7f0000003e80)=""/63, 0x3f}], 0x2, &(0x7f0000003f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000003fc0)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004040)=""/67, 0x43}, {&(0x7f00000040c0)=""/67, 0x43}, {&(0x7f0000004140)=""/58, 0x3a}, {&(0x7f0000004180)=""/20, 0x14}], 0x4, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f00000042c0)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004340)=""/187, 0xbb}], 0x1, &(0x7f0000004440)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004480), 0x6e, &(0x7f00000056c0)=[{&(0x7f0000004500)=""/219, 0xdb}, {&(0x7f0000004600)=""/160, 0xa0}, {&(0x7f00000046c0)=""/4096, 0x1000}], 0x3, &(0x7f0000005700)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000006980)=[{&(0x7f00000057c0)=""/109, 0x6d}, {&(0x7f0000005840)=""/148, 0x94}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/102, 0x66}], 0x4, &(0x7f00000069c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0xa, 0x120, 0x0) write$rfkill(r7, &(0x7f0000006d00)={0x8, 0x9, 0x2, 0x1, 0x1}, 0x8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000006e00)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x54840) 23:27:00 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8410004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000280)=0x1, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x24}}, 0x4048005) r4 = memfd_secret(0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000440)=0x1, 0x4) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r1) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008890}, 0x40) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x44844) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x68}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400}, 0x20008000) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000800), 0x101, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7, {r8}}, './file0\x00'}) [ 87.609878] audit: type=1400 audit(1737847620.932:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:27:00 executing program 4: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008881}, 0xbf6c70f873440284) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}]}, 0x34}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc64ddb8fc70d85a}, 0x20004000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) r7 = accept(r3, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) r10 = accept(r1, 0x0, &(0x7f00000006c0)) r11 = accept4(r2, 0x0, &(0x7f0000000700), 0x800) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r3}, {0x8, 0x1, r8}, {0x8, 0x1, r3}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14004001}, 0x1) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4811) recvmmsg$unix(r0, &(0x7f0000004480)=[{{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000a00)=""/63, 0x3f}, {&(0x7f0000000a40)=""/135, 0x87}, {&(0x7f0000000b00)=""/45, 0x2d}, {&(0x7f0000000b40)=""/44, 0x2c}, {&(0x7f0000000b80)=""/64, 0x40}, {&(0x7f0000000bc0)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/41, 0x29}, {&(0x7f0000000d00)=""/155, 0x9b}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/231, 0xe7}], 0xa}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002000)=""/174, 0xae}, {&(0x7f00000020c0)=""/43, 0x2b}, {&(0x7f0000002100)=""/97, 0x61}, {&(0x7f0000002180)=""/220, 0xdc}, {&(0x7f0000002280)=""/138, 0x8a}, {&(0x7f0000002340)=""/36, 0x24}, {&(0x7f0000002380)=""/252, 0xfc}, {&(0x7f0000002480)=""/104, 0x68}, {&(0x7f0000002500)=""/54, 0x36}], 0x9, &(0x7f0000002600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/187, 0xbb}, {&(0x7f0000002880)=""/253, 0xfd}, {&(0x7f0000002980)=""/248, 0xf8}, {&(0x7f0000002a80)=""/227, 0xe3}, {&(0x7f0000002b80)=""/193, 0xc1}], 0x6, &(0x7f0000002d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002e40)=""/32, 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/177, 0xb1}, {&(0x7f0000003fc0)=""/245, 0xf5}, {&(0x7f00000040c0)=""/230, 0xe6}], 0x5, &(0x7f0000004240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004340)}], 0x1, &(0x7f00000043c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x0, &(0x7f0000004600)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000004640)={{0x1, 0x1, 0x18, r11, {r13}}, './file0\x00'}) 23:27:01 executing program 5: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r0 = timerfd_create(0x0, 0x80000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)="a6c1dc93ff030b3ed7c006efa75efecc3ca70f2f71913343602d9d3b54978e48e59fcc80bd9bc535733a3682fa6b5cedeefae9f3f7c7ed2e2ab9e942cc8e07dc389562a4101f556c8c97a0c53afeeca884404e31a75e107b2db063b91c", 0x5d}, {&(0x7f0000000180)="e2929414e21fd561ceac42a9db837246cd117a81faf6d9a52660586201b551094be4493817dad8f19d992d06a585ef6290e6f36ef6d933e00ab9fc2a60082bf7eaf52150a10a13ad", 0x48}, {&(0x7f0000000200)="51964f1890550124bddaa59e8eb026573ad68626203f5dd9", 0x18}, {&(0x7f0000000240)="643e3b9d941e8cbac556cbce48b37c2b4f4e48030629cf7f8dff410c9367283ccbfd9fd6ebc5b2d59a5d03014a2ccc8718719ffe65e1ae5d9f0f7702e9a245", 0x3f}, {&(0x7f0000000280)="875502488985c570", 0x8}, {&(0x7f00000002c0)="69f56c9f34d3a73402386eafe3406780c55aefd31c3172cdceb85975b512a89884372be5d4395df88b19de51ecbb0b2cf390c91c3761dfee4cfe2ba008861d863368957f72835b06013109aa65965d8045af2250e6fa732a136052895e683d50e676ad50e3057e17d606e231d02b33e10fb52f0e32891529b5399b19f01236b606434e61fddc4b015c9d9e5bcb9c02ecef186bbdbd56b6698aaafd59cd26205f9e212609742a3290307d1a", 0xab}], 0x6, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0x20004084}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$cgroup_pressure(r1, &(0x7f0000000580)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x7fff}}, './file0\x00'}) syz_open_dev$sg(&(0x7f0000000600), 0x3, 0x204182) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000640)={0x3, 0x100, 0x5, 0x2, 0xa7, 0x101}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) recvmmsg$unix(r5, &(0x7f0000002d40)=[{{&(0x7f00000006c0), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/91, 0x5b}, {&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f00000008c0)=""/51, 0x33}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/133, 0x85}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001b40)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/179, 0xb3}, {&(0x7f0000001c80)=""/2, 0x2}, {&(0x7f0000001cc0)=""/166, 0xa6}, {&(0x7f0000001d80)=""/230, 0xe6}, {&(0x7f0000001e80)=""/57, 0x39}, {&(0x7f0000001ec0)=""/126, 0x7e}, {&(0x7f0000001f40)=""/238, 0xee}], 0x8, &(0x7f00000020c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002180)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f0000002200)=""/33, 0x21}, {&(0x7f0000002240)=""/244, 0xf4}, {&(0x7f0000002340)=""/135, 0x87}, {&(0x7f0000002400)=""/145, 0x91}, {&(0x7f00000024c0)=""/83, 0x53}, {&(0x7f0000002540)=""/224, 0xe0}, {&(0x7f0000002640)=""/83, 0x53}, {&(0x7f00000026c0)=""/144, 0x90}, {&(0x7f0000002780)=""/180, 0xb4}], 0x9, &(0x7f0000002900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002a40)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002ac0)=""/185, 0xb9}, {&(0x7f0000002b80)=""/70, 0x46}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/159, 0x9f}], 0x4}}], 0x4, 0xa100, &(0x7f0000002e40)={0x0, 0x3938700}) recvmmsg(r1, &(0x7f0000007e80)=[{{&(0x7f0000002e80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f00)=""/185, 0xb9}, {&(0x7f0000002fc0)=""/182, 0xb6}, {&(0x7f0000003080)=""/93, 0x5d}, {&(0x7f0000003100)=""/90, 0x5a}, {&(0x7f0000003180)=""/221, 0xdd}], 0x5, &(0x7f0000003300)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004380)=""/204, 0xcc}], 0x1, &(0x7f00000044c0)=""/168, 0xa8}, 0x3f}, {{&(0x7f0000004580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/216, 0xd8}, {&(0x7f0000005740)=""/172, 0xac}, {&(0x7f0000005800)=""/185, 0xb9}, {&(0x7f00000058c0)=""/103, 0x67}], 0x6, &(0x7f00000059c0)=""/23, 0x17}, 0x4}, {{&(0x7f0000005a00)=@tipc=@id, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005a80)=""/219, 0xdb}, {&(0x7f0000005b80)=""/219, 0xdb}, {&(0x7f0000005c80)=""/32, 0x20}, {&(0x7f0000005cc0)=""/254, 0xfe}, {&(0x7f0000005dc0)=""/167, 0xa7}, {&(0x7f0000005e80)=""/165, 0xa5}, {&(0x7f0000005f40)=""/73, 0x49}], 0x7, &(0x7f0000006040)=""/68, 0x44}, 0xe97}, {{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f00000060c0)=""/151, 0x97}, {&(0x7f0000006180)=""/215, 0xd7}, {&(0x7f0000006280)=""/174, 0xae}, {&(0x7f0000006340)=""/161, 0xa1}, {&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/86, 0x56}, {&(0x7f0000007480)=""/227, 0xe3}], 0x7, &(0x7f0000007600)=""/140, 0x8c}, 0xffe00000}, {{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f00000076c0)=""/61, 0x3d}, {&(0x7f0000007700)=""/131, 0x83}, {&(0x7f00000077c0)=""/182, 0xb6}, {&(0x7f0000007880)=""/11, 0xb}], 0x4}, 0x7}, {{&(0x7f0000007900)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007980)=""/183, 0xb7}], 0x1, &(0x7f0000007a80)=""/251, 0xfb}, 0xe09}, {{&(0x7f0000007b80)=@ax25={{0x3, @rose}, [@remote, @netrom, @default, @bcast, @null, @rose, @default, @bcast]}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000007c00)}, {&(0x7f0000007c40)=""/22, 0x16}, {&(0x7f0000007c80)=""/252, 0xfc}, {&(0x7f0000007d80)=""/154, 0x9a}], 0x4}, 0x7}], 0x8, 0x2000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', &(0x7f00000080c0)={0x2100, 0x8, 0x24}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000008100)) accept$unix(r2, 0x0, &(0x7f0000008300)) 23:27:01 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8080) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555d}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555540304}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20805}, 0x4000081) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x4880}, 0x18) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000420}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xac}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4800) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r0) r5 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x40480c4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000700)={'wpan0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x48048) 23:27:01 executing program 7: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040004}, 0x8041) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040055}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x12}, 0x8000) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x40091) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x48000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6408040}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fffffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x20048000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb7}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f4}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x865a5131f951b38d) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000bc0)=""/76, &(0x7f0000000c40)=0x4c) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000cc0), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x40084) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x40008b0) [ 89.264621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.268734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.272175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.280888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.284795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.287817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.345922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.348781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.351084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.354225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.358590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.361025] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.363593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.366711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.374715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.376523] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.378435] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.380015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.382821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.393283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.401603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.404713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.408355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.410266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.412783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.412943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.417554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.420878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.429948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.434001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.438787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.441738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.445489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.450524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.456319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.458422] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.460481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.463295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.471634] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.473610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.475420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.483882] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.486704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.520469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.523305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.533357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.538637] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.540520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.349321] Bluetooth: hci0: command tx timeout [ 91.475209] Bluetooth: hci3: command tx timeout [ 91.476366] Bluetooth: hci1: command tx timeout [ 91.539218] Bluetooth: hci6: command tx timeout [ 91.540388] Bluetooth: hci5: command tx timeout [ 91.540958] Bluetooth: hci2: command tx timeout [ 91.541634] Bluetooth: hci4: command tx timeout [ 91.603223] Bluetooth: hci7: command tx timeout [ 93.395320] Bluetooth: hci0: command tx timeout [ 93.524238] Bluetooth: hci1: command tx timeout [ 93.524711] Bluetooth: hci3: command tx timeout [ 93.588243] Bluetooth: hci4: command tx timeout [ 93.588695] Bluetooth: hci2: command tx timeout [ 93.589156] Bluetooth: hci5: command tx timeout [ 93.589574] Bluetooth: hci6: command tx timeout [ 93.653234] Bluetooth: hci7: command tx timeout [ 95.443927] Bluetooth: hci0: command tx timeout [ 95.572410] Bluetooth: hci3: command tx timeout [ 95.573372] Bluetooth: hci1: command tx timeout [ 95.636373] Bluetooth: hci6: command tx timeout [ 95.637577] Bluetooth: hci5: command tx timeout [ 95.639357] Bluetooth: hci2: command tx timeout [ 95.640590] Bluetooth: hci4: command tx timeout [ 95.699369] Bluetooth: hci7: command tx timeout [ 97.491267] Bluetooth: hci0: command tx timeout [ 97.619217] Bluetooth: hci3: command tx timeout [ 97.619901] Bluetooth: hci1: command tx timeout [ 97.683421] Bluetooth: hci5: command tx timeout [ 97.684228] Bluetooth: hci6: command tx timeout [ 97.684872] Bluetooth: hci4: command tx timeout [ 97.685740] Bluetooth: hci2: command tx timeout [ 97.747175] Bluetooth: hci7: command tx timeout [ 151.658007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.659884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.661063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.662557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.664051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.664157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.665948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.666930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.667045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.677605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.678208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.680395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.680669] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.681442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.682618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.682641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.684432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.684808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.726858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.729390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.736069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.742299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.745225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.746502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.839392] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.841245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.842756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.845272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.847327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.848594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.914863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.919720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.924265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.929216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.939019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.944955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.952305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.970308] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.971471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.986231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.037683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.046389] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.048508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.072344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.081336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.114668] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.136818] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.138326] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.747575] Bluetooth: hci1: command tx timeout [ 153.747609] Bluetooth: hci0: command tx timeout [ 153.877207] Bluetooth: hci3: command tx timeout [ 153.877325] Bluetooth: hci4: command tx timeout [ 153.878242] Bluetooth: hci2: command tx timeout [ 154.067309] Bluetooth: hci6: command tx timeout [ 154.131237] Bluetooth: hci5: command tx timeout [ 154.259232] Bluetooth: hci7: command tx timeout [ 155.795420] Bluetooth: hci1: command tx timeout [ 155.795479] Bluetooth: hci0: command tx timeout [ 155.923221] Bluetooth: hci2: command tx timeout [ 155.923671] Bluetooth: hci4: command tx timeout [ 155.924165] Bluetooth: hci3: command tx timeout [ 156.115498] Bluetooth: hci6: command tx timeout [ 156.179251] Bluetooth: hci5: command tx timeout [ 156.307175] Bluetooth: hci7: command tx timeout [ 157.843176] Bluetooth: hci1: command tx timeout [ 157.844181] Bluetooth: hci0: command tx timeout [ 157.972201] Bluetooth: hci3: command tx timeout [ 157.972695] Bluetooth: hci4: command tx timeout [ 157.973464] Bluetooth: hci2: command tx timeout [ 158.165224] Bluetooth: hci6: command tx timeout [ 158.227286] Bluetooth: hci5: command tx timeout [ 158.357190] Bluetooth: hci7: command tx timeout [ 159.891273] Bluetooth: hci0: command tx timeout [ 159.891318] Bluetooth: hci1: command tx timeout [ 160.020142] Bluetooth: hci2: command tx timeout [ 160.020632] Bluetooth: hci4: command tx timeout [ 160.021058] Bluetooth: hci3: command tx timeout [ 160.212320] Bluetooth: hci6: command tx timeout [ 160.275213] Bluetooth: hci5: command tx timeout [ 160.404294] Bluetooth: hci7: command tx timeout [ 213.831284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.843708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.858554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.865539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.868302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.870193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.920927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.923346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.925423] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.934544] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.937590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.942390] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.018041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.028390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.030758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.041628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.053456] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.062813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.114036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.143638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.152900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.174993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.179323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.182442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.205948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.211771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.227805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.246374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.286913] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.294762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.296954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.299855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.305710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.311221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.318775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.332684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.335768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.338490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.342458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.364408] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.371750] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.377569] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.417360] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.421361] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.426797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.458664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.492534] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.494731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.891323] Bluetooth: hci0: command tx timeout [ 216.019177] Bluetooth: hci1: command tx timeout [ 216.149121] Bluetooth: hci2: command tx timeout [ 216.275167] Bluetooth: hci3: command tx timeout [ 216.403395] Bluetooth: hci5: command tx timeout [ 216.404426] Bluetooth: hci4: command tx timeout [ 216.595168] Bluetooth: hci7: command tx timeout [ 216.915176] Bluetooth: hci6: command tx timeout [ 217.939289] Bluetooth: hci0: command tx timeout [ 218.067220] Bluetooth: hci1: command tx timeout [ 218.195187] Bluetooth: hci2: command tx timeout [ 218.323214] Bluetooth: hci3: command tx timeout [ 218.451335] Bluetooth: hci4: command tx timeout [ 218.451395] Bluetooth: hci5: command tx timeout [ 218.643172] Bluetooth: hci7: command tx timeout [ 218.965285] Bluetooth: hci6: command tx timeout [ 219.989152] Bluetooth: hci0: command tx timeout [ 220.115132] Bluetooth: hci1: command tx timeout [ 220.243167] Bluetooth: hci2: command tx timeout [ 220.372293] Bluetooth: hci3: command tx timeout [ 220.499226] Bluetooth: hci4: command tx timeout [ 220.499937] Bluetooth: hci5: command tx timeout [ 220.691170] Bluetooth: hci7: command tx timeout [ 221.013136] Bluetooth: hci6: command tx timeout [ 222.035242] Bluetooth: hci0: command tx timeout [ 222.163271] Bluetooth: hci1: command tx timeout [ 222.291360] Bluetooth: hci2: command tx timeout [ 222.421187] Bluetooth: hci3: command tx timeout [ 222.547538] Bluetooth: hci5: command tx timeout [ 222.548702] Bluetooth: hci4: command tx timeout [ 222.739264] Bluetooth: hci7: command tx timeout [ 223.059158] Bluetooth: hci6: command tx timeout [ 274.958476] [ 274.958751] ====================================================== [ 274.959405] WARNING: possible circular locking dependency detected [ 274.960051] 6.13.0-next-20250124 #1 Not tainted [ 274.960486] ------------------------------------------------------ [ 274.961391] kworker/u8:1/64 is trying to acquire lock: [ 274.962664] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.964880] [ 274.964880] but task is already holding lock: [ 274.966409] ffff888030d18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 274.968577] [ 274.968577] which lock already depends on the new lock. [ 274.968577] [ 274.969579] [ 274.969579] the existing dependency chain (in reverse order) is: [ 274.970205] [ 274.970205] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 274.970790] __mutex_lock+0x13d/0xb50 [ 274.971202] wiphy_register+0x1b2e/0x25d0 [ 274.971637] ieee80211_register_hw+0x23a4/0x3d60 [ 274.972115] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 274.972615] init_mac80211_hwsim+0x389/0x870 [ 274.973085] do_one_initcall+0xf9/0x640 [ 274.973524] kernel_init_freeable+0x53d/0x7a0 [ 274.974001] kernel_init+0x1e/0x2d0 [ 274.974378] ret_from_fork+0x48/0x80 [ 274.974757] ret_from_fork_asm+0x1a/0x30 [ 274.975187] [ 274.975187] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 274.975722] __lock_acquire+0x29fd/0x4580 [ 274.976150] lock_acquire+0x19b/0x520 [ 274.976552] __mutex_lock+0x13d/0xb50 [ 274.976960] unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.977509] unregister_netdevice_queue+0x224/0x2e0 [ 274.977994] _cfg80211_unregister_wdev+0x57b/0x700 [ 274.978484] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 274.978967] ieee80211_unregister_hw+0x55/0x3a0 [ 274.979428] hwsim_exit_net+0x3a0/0x730 [ 274.979835] ops_exit_list+0xb3/0x180 [ 274.980226] cleanup_net+0x546/0xad0 [ 274.980611] process_one_work+0x8ee/0x1a10 [ 274.981052] worker_thread+0x674/0xe70 [ 274.981475] kthread+0x3ab/0x720 [ 274.981844] ret_from_fork+0x48/0x80 [ 274.982221] ret_from_fork_asm+0x1a/0x30 [ 274.982657] [ 274.982657] other info that might help us debug this: [ 274.982657] [ 274.983305] Possible unsafe locking scenario: [ 274.983305] [ 274.983801] CPU0 CPU1 [ 274.984189] ---- ---- [ 274.984578] lock(&rdev->wiphy.mtx); [ 274.984926] lock(rtnl_mutex); [ 274.985433] lock(&rdev->wiphy.mtx); [ 274.985980] lock(rtnl_mutex); [ 274.986290] [ 274.986290] *** DEADLOCK *** [ 274.986290] [ 274.986784] 4 locks held by kworker/u8:1/64: [ 274.987162] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 274.988043] #1: ffff88800f36fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 274.988893] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 274.989684] #3: ffff888030d18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 274.990568] [ 274.990568] stack backtrace: [ 274.990949] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 274.990986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 274.991008] Workqueue: netns cleanup_net [ 274.991049] Call Trace: [ 274.991059] [ 274.991070] dump_stack_lvl+0xca/0x120 [ 274.991130] print_circular_bug+0x47b/0x750 [ 274.991176] check_noncircular+0x2e9/0x3c0 [ 274.991219] ? __pfx_check_noncircular+0x10/0x10 [ 274.991260] ? hlock_class+0x4e/0x130 [ 274.991291] ? mark_lock+0xac/0xed0 [ 274.991331] ? srso_return_thunk+0x5/0x5f [ 274.991386] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 274.991432] ? lockdep_lock+0xba/0x1b0 [ 274.991490] ? __pfx_lockdep_lock+0x10/0x10 [ 274.991552] __lock_acquire+0x29fd/0x4580 [ 274.991606] ? __pfx___lock_acquire+0x10/0x10 [ 274.991650] ? lock_release+0x20f/0x6f0 [ 274.991694] ? __pfx_lock_release+0x10/0x10 [ 274.991742] lock_acquire+0x19b/0x520 [ 274.991785] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.991834] ? __pfx_lock_acquire+0x10/0x10 [ 274.991879] ? srso_return_thunk+0x5/0x5f [ 274.991934] ? lock_release+0x20f/0x6f0 [ 274.991977] ? srso_return_thunk+0x5/0x5f [ 274.992032] ? lock_is_held_type+0x9e/0x120 [ 274.992088] ? srso_return_thunk+0x5/0x5f [ 274.992146] __mutex_lock+0x13d/0xb50 [ 274.992198] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.992244] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.992290] ? srso_return_thunk+0x5/0x5f [ 274.992345] ? synchronize_rcu_expedited+0x38a/0x420 [ 274.992389] ? __pfx___mutex_lock+0x10/0x10 [ 274.992443] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.992498] ? srso_return_thunk+0x5/0x5f [ 274.992553] ? kasan_quarantine_put+0x84/0x1e0 [ 274.992614] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 274.992650] ? srso_return_thunk+0x5/0x5f [ 274.992709] unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.992755] ? __virt_addr_valid+0x2e8/0x5d0 [ 274.992808] ? __pfx_lock_release+0x10/0x10 [ 274.992853] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 274.992899] ? find_held_lock+0x2c/0x110 [ 274.992957] ? srso_return_thunk+0x5/0x5f [ 274.993014] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 274.993075] ? srso_return_thunk+0x5/0x5f [ 274.993130] ? lock_release+0x20f/0x6f0 [ 274.993175] ? __pfx_lock_release+0x10/0x10 [ 274.993218] ? srso_return_thunk+0x5/0x5f [ 274.993273] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.993320] ? srso_return_thunk+0x5/0x5f [ 274.993381] unregister_netdevice_queue+0x224/0x2e0 [ 274.993424] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 274.993475] ? up_write+0x195/0x520 [ 274.993530] _cfg80211_unregister_wdev+0x57b/0x700 [ 274.993582] ? srso_return_thunk+0x5/0x5f [ 274.993641] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 274.993679] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 274.993718] ? srso_return_thunk+0x5/0x5f [ 274.993773] ? srso_return_thunk+0x5/0x5f [ 274.993828] ? synchronize_rcu+0x1ff/0x260 [ 274.993871] ieee80211_unregister_hw+0x55/0x3a0 [ 274.993916] hwsim_exit_net+0x3a0/0x730 [ 274.993958] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.993998] ? srso_return_thunk+0x5/0x5f [ 274.994054] ? netdev_run_todo+0x788/0x1040 [ 274.994103] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.994146] ops_exit_list+0xb3/0x180 [ 274.994188] cleanup_net+0x546/0xad0 [ 274.994233] ? __pfx_cleanup_net+0x10/0x10 [ 274.994286] process_one_work+0x8ee/0x1a10 [ 274.994352] ? __pfx_lock_acquire+0x10/0x10 [ 274.994396] ? __pfx_process_one_work+0x10/0x10 [ 274.994455] ? srso_return_thunk+0x5/0x5f [ 274.994510] ? move_linked_works+0x172/0x270 [ 274.994555] ? srso_return_thunk+0x5/0x5f [ 274.994610] ? assign_work+0x196/0x240 [ 274.994668] worker_thread+0x674/0xe70 [ 274.994726] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.994777] ? srso_return_thunk+0x5/0x5f [ 274.994832] ? __pfx_worker_thread+0x10/0x10 [ 274.994892] kthread+0x3ab/0x720 [ 274.994944] ? __pfx_kthread+0x10/0x10 [ 274.994996] ? srso_return_thunk+0x5/0x5f [ 274.995051] ? finish_task_switch.isra.0+0x206/0x840 [ 274.995102] ? __pfx_kthread+0x10/0x10 [ 274.995156] ret_from_fork+0x48/0x80 [ 274.995187] ? __pfx_kthread+0x10/0x10 [ 274.995240] ret_from_fork_asm+0x1a/0x30 [ 274.995307] [ 276.192273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.196380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.200320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.208033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.212884] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.217251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.377336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.379404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.381582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.385120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.387680] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.389996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.459800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.463759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.470660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.476521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.482049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.484515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.539645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.545583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.555720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.566535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.572946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.581522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.663520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.671355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.673021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.691481] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.702739] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.709212] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.710857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.725616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.746680] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.801764] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.803522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.813175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.814989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.816910] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.819759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.821689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.828561] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.835513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.897975] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.923632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.936940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.975819] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.980406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.983671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.291158] Bluetooth: hci0: command tx timeout [ 278.419120] Bluetooth: hci1: command tx timeout [ 278.547231] Bluetooth: hci2: command tx timeout [ 278.612083] Bluetooth: hci3: command tx timeout [ 278.803268] Bluetooth: hci4: command tx timeout [ 278.868095] Bluetooth: hci5: command tx timeout [ 278.931250] Bluetooth: hci6: command tx timeout [ 279.059262] Bluetooth: hci7: command tx timeout [ 280.340133] Bluetooth: hci0: command tx timeout [ 280.467189] Bluetooth: hci1: command tx timeout [ 280.596182] Bluetooth: hci2: command tx timeout [ 280.662090] Bluetooth: hci3: command tx timeout [ 280.852198] Bluetooth: hci4: command tx timeout [ 280.917076] Bluetooth: hci5: command tx timeout [ 280.979102] Bluetooth: hci6: command tx timeout [ 281.108120] Bluetooth: hci7: command tx timeout [ 282.387118] Bluetooth: hci0: command tx timeout [ 282.517248] Bluetooth: hci1: command tx timeout [ 282.643153] Bluetooth: hci2: command tx timeout [ 282.707348] Bluetooth: hci3: command tx timeout [ 282.899163] Bluetooth: hci4: command tx timeout [ 282.963296] Bluetooth: hci5: command tx timeout [ 283.027223] Bluetooth: hci6: command tx timeout [ 283.155147] Bluetooth: hci7: command tx timeout [ 284.435325] Bluetooth: hci0: command tx timeout [ 284.563135] Bluetooth: hci1: command tx timeout [ 284.692114] Bluetooth: hci2: command tx timeout [ 284.755112] Bluetooth: hci3: command tx timeout [ 284.947090] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 23:30:08 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f36ed20 R8 =0000000000000000 R9 =ffffed1001d57046 R10=0000000000000020 R11=3a6b636f6c206762 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a0449760c CR3=000000000e60e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=ffffffff000000000000558a044f16f0 XMM05=0000558a044da2800000558a044a83d0 XMM06=000000000000000000000003ffffffff XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888008f3a170 RBX=ffff88800f198000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff81af0a74 RDI=ffff88806cf36250 RBP=ffffffff85a2a840 RSP=ffff88800f48fe40 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=ffffffff864043d7 R11=ffff88800f1984b8 R12=ffffffff85a2ad00 R13=0000000000000000 R14=ffffea0001fff7c0 R15=ffff888008f3a000 RIP=ffffffff81af0b06 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe9f50bbf08 CR3=000000002fa60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff0000ff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000558a044c84d00000558a04491820 XMM06=0000558a0449f9e00000000000000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000