Warning: Permanently added '[localhost]:38885' (ECDSA) to the list of known hosts. 2025/01/28 01:51:11 fuzzer started 2025/01/28 01:51:11 dialing manager at localhost:40883 syzkaller login: [ 54.615593] cgroup: Unknown subsys name 'net' [ 54.726864] cgroup: Unknown subsys name 'cpuset' [ 54.785097] cgroup: Unknown subsys name 'rlimit' [ 59.564680] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 01:51:29 syscalls: 2217 2025/01/28 01:51:29 code coverage: enabled 2025/01/28 01:51:29 comparison tracing: enabled 2025/01/28 01:51:29 extra coverage: enabled 2025/01/28 01:51:29 setuid sandbox: enabled 2025/01/28 01:51:29 namespace sandbox: enabled 2025/01/28 01:51:29 Android sandbox: enabled 2025/01/28 01:51:29 fault injection: enabled 2025/01/28 01:51:29 leak checking: enabled 2025/01/28 01:51:29 net packet injection: enabled 2025/01/28 01:51:29 net device setup: enabled 2025/01/28 01:51:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 01:51:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 01:51:29 USB emulation: enabled 2025/01/28 01:51:29 hci packet injection: enabled 2025/01/28 01:51:29 wifi device emulation: enabled 2025/01/28 01:51:29 802.15.4 emulation: enabled 2025/01/28 01:51:29 fetching corpus: 50, signal 9948/11323 (executing program) 2025/01/28 01:51:29 fetching corpus: 100, signal 11626/14148 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/15565 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/16825 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/18102 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/19387 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/20670 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/21951 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/23212 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/24447 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/25709 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/26973 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/28222 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/29422 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/30665 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/31766 (executing program) 2025/01/28 01:51:29 fetching corpus: 121, signal 11804/31766 (executing program) 2025/01/28 01:51:32 starting 8 fuzzer processes 01:51:32 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbae}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c011}, 0x80) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0xb25, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044050}, 0x804) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file1\x00'}) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x5c}}, 0x20040000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x42}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) r5 = pidfd_getfd(r2, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x73}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$inet(0x2, 0x800, 0x9) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x1) 01:51:32 executing program 2: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x6) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffff, 0x400000) ioctl$KDADDIO(r0, 0x4b34, 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0xffff, 0x6}, {0x6, 0x5}, {0x81, 0xfff7}, {0x2, 0x80}, {0x0, 0xc0}]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000140)) read$usbmon(r0, &(0x7f0000000180)=""/192, 0xc0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000640)={0x0, 0x1, 0x14, 0x1d, 0xf, &(0x7f0000000240)="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"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000680)) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000006c0)=0x7fff) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000700)) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000740)={0x7ff, 0x9, 0x160, 0x4}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0), 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000800)={0x1, 0x100, 0xf0, 0x34, 0xcdd, 0x9, 0x4, 0x0, 0x7, 0x6, 0x4, 0x3b87e19c, 0xfa6c, 0x7ff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000840)=0x200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x18641) fallocate(r2, 0x40, 0x9, 0x5) 01:51:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r4}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r4}}, {@audit}]}}) r6 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000e40)={r2, 0x1, 0x6, @random="a12f35698ef6"}, 0x10) getsockname$unix(r6, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e) faccessat(r6, &(0x7f0000000f40)='./file0\x00', 0x40) utimensat(0xffffffffffffffff, &(0x7f0000000fc0)='./file1\x00', &(0x7f0000001000), 0x0) 01:51:32 executing program 3: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0x1ec, 0x5, &(0x7f0000000080)}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) lseek(r2, 0x40, 0x7) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="29bf9b9e9bcd61087d945f58b821131d84c6c06aff8800f8137b58ec667fcbabd5b671", 0x23}], 0x1, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xa8}, 0x40000) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000740)={0x100000000, 0x3}) r5 = open(&(0x7f0000000780)='./file0\x00', 0x10000, 0x3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/bus/pci', 0x800c0, 0x20) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000800)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)) llistxattr(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/255, 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000a00)=0x14) ioctl$KDENABIO(r2, 0x4b36) dup(r1) fadvise64(0xffffffffffffffff, 0x10000, 0x7fffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) 01:51:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001, 0x222}}, './file0\x00'}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) getpeername(r0, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x1, 0x7, 0x75, @loopback, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8000, 0x10, 0x7f, 0x7}}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@private=0xa010102, @broadcast, r2}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r5, &(0x7f0000000700)=@vsock={0x28, 0x0, 0x5dab}, 0x80) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r6 = openat(r3, &(0x7f0000000780)='./file0\x00', 0x2000, 0x10) inotify_add_watch(r6, &(0x7f00000007c0)='./file0\x00', 0x84000040) lsetxattr$trusted_overlay_origin(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880), 0x2, 0x3) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000008c0)="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") ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 74.654833] audit: type=1400 audit(1738029092.156:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:51:32 executing program 5: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x5, 0x3, 0x6, 0x5, 0x4c, "a786af2a2402f9eb6691e3e75a6a57701b0f40badb943df3612f25fb6ea3f2d39d16ad3611dcae8bbab47dc3b8a3d1aefa7d5da6490e4bdeb374bef70eb348ac70df87f097cec34f0c617b87"}, 0x55, 0x2) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x2, 0x109402) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000280)={{0x4, 0x19}, {0x9, 0x9}, 0x9}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x71}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ec4bfc6b45e28108e1677db1953c5976"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c611627f510d51d8731ffa196154404d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40021}, 0x8080) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x40010, r0, 0xf26e) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{0x0, 0x1, 0x100, 0x20, 0x4, 0x8, 0x9, 0x4, 0x7, 0xfeb8, 0x9, 0x7, 0x200, 0xebef, 0x8a1}}) r2 = fsmount(r0, 0x0, 0xe0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000001440)={0x1, 0x101}) r3 = dup2(r2, r0) read$ptp(r3, &(0x7f0000001480)=""/104, 0x68) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000001500)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x152, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x94, 0x80}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001580)={0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'VTT}#'}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5ef3b4e79be89c7fa1"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040008}, 0x4011) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000001a80)={'filter\x00', 0x4}, 0x68) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0xc040, 0x0) getsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) 01:51:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='gre0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'syzkaller0\x00', {'veth1\x00'}}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x19c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000080}, 0x1) r2 = signalfd4(r0, &(0x7f0000000440)={[0x932]}, 0x8, 0x800) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000580)={0xcdf, "f562ca"}, 0x6) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4004000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x180) fcntl$setstatus(r5, 0x4, 0x4000) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0x2000}}, './file0\x00'}) write$tun(r7, &(0x7f0000000880)={@void, @val={0x2, 0x0, 0xfeff, 0x8, 0x9, 0x7}, @mpls={[{0x2}], @ipv6=@tipc_packet={0x2, 0x6, "28f32d", 0x22a, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x88, 0x2, 0x4, 0x1, 0x9, 0x50, 0x6, [@dev={0xfe, 0x80, '\x00', 0x25}]}, @fragment={0x2f, 0x0, 0x9, 0x1, 0x0, 0x7, 0x65}, @srh={0x5e, 0xa, 0x4, 0x5, 0x19, 0x8, 0x1, [@dev={0xfe, 0x80, '\x00', 0xe}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback]}, @dstopts={0x3c, 0x27, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0xf3a, [0x0, 0x3, 0x3c, 0xe64b, 0xea, 0xcedf]}}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0xc67}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x1, 0x84, "a720939c5f481f5bc21046f2c636fbe9cc14f7580832eee73ff80132d71f78d4c5e03edbadfa6866c0177493f41010450dc3881b9f94dc3c00421443bb099abb9912dbefe85658aaa8523d57a7e85d0e13d21a78114a4581744e3e6c47d4fd6c96ba45a630bfec4759bd000c981635e0569deec694f84caa63d9e6761b7731612dc6e4ac"}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x40, {0x3, 0xe, 0x4, 0x3, [0x4, 0xb8, 0x80000001, 0x40000000000, 0x47e, 0x80, 0x0]}}]}, @fragment={0x87, 0x0, 0x0, 0x0, 0x0, 0x1, 0x66}, @fragment={0x73, 0x0, 0x4, 0x0, 0x0, 0x1d, 0x64}, @srh={0x1, 0x6, 0x4, 0x3, 0xb5, 0x20, 0x9, [@dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}], @payload_direct={{{{0x22, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x2, 0x8, 0x0, 0x3, 0xe, 0x0, 0x3, 0x1, 0x401, 0x4, 0x4e20, 0x4e22}, 0x3}}, [0x0, 0x0]}}}}}, 0x260) 01:51:32 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x907bee3952eb6c29}, 0x4008084) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x60}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000910}, 0x48801) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7ff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x63}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x840) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x22002, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}]}, 0x2c}}, 0x40) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4003) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x20044000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0xe41, 0x452d45cc}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x6, 0x1, 0xd0cb492685afcc72, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040040}, 0x48800) [ 76.002941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.008124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.011848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.015379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.023256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.025509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.029432] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.032058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.035438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.054532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.057480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.061499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.063595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.070189] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.074021] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.075871] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.077862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.080447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.084406] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.086494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.093742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.098979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.118456] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.125631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.128795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.130658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.134671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.136610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.138570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.142033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.153802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.156626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.170644] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.174672] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.175975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.179154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.221153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.232347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.242572] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.246778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.251114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.253074] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.259172] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.263484] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.265981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.274653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.295891] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.297892] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.085618] Bluetooth: hci0: command tx timeout [ 78.149597] Bluetooth: hci2: command tx timeout [ 78.150441] Bluetooth: hci1: command tx timeout [ 78.213368] Bluetooth: hci4: command tx timeout [ 78.214428] Bluetooth: hci3: command tx timeout [ 78.277459] Bluetooth: hci5: command tx timeout [ 78.341585] Bluetooth: hci6: command tx timeout [ 78.342718] Bluetooth: hci7: command tx timeout [ 80.135298] Bluetooth: hci0: command tx timeout [ 80.198376] Bluetooth: hci1: command tx timeout [ 80.198841] Bluetooth: hci2: command tx timeout [ 80.262455] Bluetooth: hci3: command tx timeout [ 80.262880] Bluetooth: hci4: command tx timeout [ 80.325381] Bluetooth: hci5: command tx timeout [ 80.390816] Bluetooth: hci7: command tx timeout [ 80.391238] Bluetooth: hci6: command tx timeout [ 82.181341] Bluetooth: hci0: command tx timeout [ 82.245713] Bluetooth: hci1: command tx timeout [ 82.246224] Bluetooth: hci2: command tx timeout [ 82.309530] Bluetooth: hci3: command tx timeout [ 82.310029] Bluetooth: hci4: command tx timeout [ 82.374439] Bluetooth: hci5: command tx timeout [ 82.438449] Bluetooth: hci6: command tx timeout [ 82.438969] Bluetooth: hci7: command tx timeout [ 84.229377] Bluetooth: hci0: command tx timeout [ 84.295334] Bluetooth: hci2: command tx timeout [ 84.295792] Bluetooth: hci1: command tx timeout [ 84.360301] Bluetooth: hci3: command tx timeout [ 84.360762] Bluetooth: hci4: command tx timeout [ 84.422400] Bluetooth: hci5: command tx timeout [ 84.486354] Bluetooth: hci7: command tx timeout [ 84.486809] Bluetooth: hci6: command tx timeout [ 132.570458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.571149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.877144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.878100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.426389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.427056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.695025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.696648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.893890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.895176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:52:31 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r4}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r4}}, {@audit}]}}) r6 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000e40)={r2, 0x1, 0x6, @random="a12f35698ef6"}, 0x10) getsockname$unix(r6, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e) faccessat(r6, &(0x7f0000000f40)='./file0\x00', 0x40) utimensat(0xffffffffffffffff, &(0x7f0000000fc0)='./file1\x00', &(0x7f0000001000), 0x0) [ 134.279124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.280397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.645039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.646390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:52:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r4}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r4}}, {@audit}]}}) r6 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000e40)={r2, 0x1, 0x6, @random="a12f35698ef6"}, 0x10) getsockname$unix(r6, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e) faccessat(r6, &(0x7f0000000f40)='./file0\x00', 0x40) utimensat(0xffffffffffffffff, &(0x7f0000000fc0)='./file1\x00', &(0x7f0000001000), 0x0) 01:52:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r4}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r4}}, {@audit}]}}) r6 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000e40)={r2, 0x1, 0x6, @random="a12f35698ef6"}, 0x10) getsockname$unix(r6, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e) faccessat(r6, &(0x7f0000000f40)='./file0\x00', 0x40) utimensat(0xffffffffffffffff, &(0x7f0000000fc0)='./file1\x00', &(0x7f0000001000), 0x0) [ 135.083483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.084129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:52:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r4}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r4}}, {@audit}]}}) r6 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000e40)={r2, 0x1, 0x6, @random="a12f35698ef6"}, 0x10) getsockname$unix(r6, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e) faccessat(r6, &(0x7f0000000f40)='./file0\x00', 0x40) 01:52:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r3}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r4}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r4}}, {@audit}]}}) r6 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000e40)={r2, 0x1, 0x6, @random="a12f35698ef6"}, 0x10) faccessat(r6, &(0x7f0000000f40)='./file0\x00', 0x40) [ 135.242544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.243535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:52:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r2}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r3}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r4}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r3}}, {@audit}]}}) r5 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000e00)=0x1, 0x4) faccessat(r5, &(0x7f0000000f40)='./file0\x00', 0x40) 01:52:32 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r2}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r3}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r4}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r3}}, {@audit}]}}) r5 = openat2(r1, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x33, 0x8}, 0x18) faccessat(r5, &(0x7f0000000f40)='./file0\x00', 0x40) 01:52:33 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x10580) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000003c0)={0x1, 0x1, 0x200}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x6, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x3800006, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_client}, {@timeout={'timeout', 0x3d, 0xb3}}, {@rq={'rq', 0x3d, 0x20}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_user={'obj_user', 0x3d, '[$+'}}, {@fowner_gt={'fowner>', r2}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000840)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000940)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x20000, &(0x7f0000000b00)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r3}}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}], [{@fowner_lt={'fowner<', r4}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000bc0)={0x0, 0x9, 0x6}) mount$9p_rdma(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80), 0x10000, &(0x7f0000000cc0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, r3}}, {@audit}]}}) faccessat(0xffffffffffffffff, &(0x7f0000000f40)='./file0\x00', 0x40) [ 135.897536] [ 135.897932] ====================================================== [ 135.898953] WARNING: possible circular locking dependency detected [ 135.899955] 6.13.0-next-20250124 #1 Not tainted [ 135.900744] ------------------------------------------------------ [ 135.907534] kworker/u8:1/64 is trying to acquire lock: [ 135.908389] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 135.910084] [ 135.910084] but task is already holding lock: [ 135.911046] ffff88803be48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 135.912691] [ 135.912691] which lock already depends on the new lock. [ 135.912691] [ 135.913982] [ 135.913982] the existing dependency chain (in reverse order) is: [ 135.915183] [ 135.915183] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 135.916290] __mutex_lock+0x13d/0xb50 [ 135.917081] wiphy_register+0x1b2e/0x25d0 [ 135.917923] ieee80211_register_hw+0x23a4/0x3d60 [ 135.918836] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 135.919792] init_mac80211_hwsim+0x389/0x870 [ 135.920683] do_one_initcall+0xf9/0x640 [ 135.921503] kernel_init_freeable+0x53d/0x7a0 [ 135.922413] kernel_init+0x1e/0x2d0 [ 135.923138] ret_from_fork+0x48/0x80 [ 135.923874] ret_from_fork_asm+0x1a/0x30 [ 135.924704] [ 135.924704] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 135.925731] __lock_acquire+0x29fd/0x4580 [ 135.926568] lock_acquire+0x19b/0x520 [ 135.927333] __mutex_lock+0x13d/0xb50 [ 135.928109] unregister_netdevice_many_notify+0x1612/0x1c80 [ 135.929170] unregister_netdevice_queue+0x224/0x2e0 [ 135.930107] _cfg80211_unregister_wdev+0x57b/0x700 [ 135.931070] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 135.932007] ieee80211_unregister_hw+0x55/0x3a0 [ 135.932906] hwsim_exit_net+0x3a0/0x730 [ 135.933701] ops_exit_list+0xb3/0x180 [ 135.934471] cleanup_net+0x546/0xad0 [ 135.935224] process_one_work+0x8ee/0x1a10 [ 135.936085] worker_thread+0x674/0xe70 [ 135.936903] kthread+0x3ab/0x720 [ 135.937627] ret_from_fork+0x48/0x80 [ 135.938366] ret_from_fork_asm+0x1a/0x30 [ 135.939203] [ 135.939203] other info that might help us debug this: [ 135.939203] [ 135.940471] Possible unsafe locking scenario: [ 135.940471] [ 135.941439] CPU0 CPU1 [ 135.942216] ---- ---- [ 135.942989] lock(&rdev->wiphy.mtx); [ 135.943665] lock(rtnl_mutex); [ 135.944639] lock(&rdev->wiphy.mtx); [ 135.945695] lock(rtnl_mutex); [ 135.946307] [ 135.946307] *** DEADLOCK *** [ 135.946307] [ 135.947265] 4 locks held by kworker/u8:1/64: [ 135.948013] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 135.949735] #1: ffff88800f36fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 135.951405] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 135.952947] #3: ffff88803be48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 135.954691] [ 135.954691] stack backtrace: [ 135.955427] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 135.955502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 135.955545] Workqueue: netns cleanup_net [ 135.955627] Call Trace: [ 135.955645] [ 135.955668] dump_stack_lvl+0xca/0x120 [ 135.955782] print_circular_bug+0x47b/0x750 [ 135.955875] check_noncircular+0x2e9/0x3c0 [ 135.955961] ? __pfx_check_noncircular+0x10/0x10 [ 135.956047] ? pick_eevdf+0x3a4/0x560 [ 135.956147] ? srso_return_thunk+0x5/0x5f [ 135.956258] ? find_held_lock+0x2c/0x110 [ 135.956379] ? lockdep_lock+0xba/0x1b0 [ 135.956495] ? __pfx_lockdep_lock+0x10/0x10 [ 135.956612] ? __pfx_lock_release+0x10/0x10 [ 135.956707] __lock_acquire+0x29fd/0x4580 [ 135.956816] ? __pfx___lock_acquire+0x10/0x10 [ 135.956906] ? __pfx_try_to_wake_up+0x10/0x10 [ 135.957003] lock_acquire+0x19b/0x520 [ 135.957090] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 135.957190] ? __pfx_lock_acquire+0x10/0x10 [ 135.957280] ? srso_return_thunk+0x5/0x5f [ 135.957395] ? lock_release+0x20f/0x6f0 [ 135.957483] ? srso_return_thunk+0x5/0x5f [ 135.957595] ? lock_is_held_type+0x9e/0x120 [ 135.957705] ? srso_return_thunk+0x5/0x5f [ 135.957825] __mutex_lock+0x13d/0xb50 [ 135.957930] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 135.958022] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 135.958115] ? srso_return_thunk+0x5/0x5f [ 135.958237] ? synchronize_rcu_expedited+0x38a/0x420 [ 135.958326] ? __pfx___mutex_lock+0x10/0x10 [ 135.958435] ? __pfx_autoremove_wake_function+0x10/0x10 [ 135.958543] ? srso_return_thunk+0x5/0x5f [ 135.958655] ? kasan_quarantine_put+0x84/0x1e0 [ 135.958777] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.958848] ? srso_return_thunk+0x5/0x5f [ 135.958968] unregister_netdevice_many_notify+0x1612/0x1c80 [ 135.959061] ? __virt_addr_valid+0x2e8/0x5d0 [ 135.959166] ? __pfx_lock_release+0x10/0x10 [ 135.959257] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 135.959351] ? find_held_lock+0x2c/0x110 [ 135.959469] ? srso_return_thunk+0x5/0x5f [ 135.959585] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 135.959707] ? srso_return_thunk+0x5/0x5f [ 135.959818] ? lock_release+0x20f/0x6f0 [ 135.959908] ? __pfx_lock_release+0x10/0x10 [ 135.959995] ? srso_return_thunk+0x5/0x5f [ 135.960107] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 135.960203] ? srso_return_thunk+0x5/0x5f [ 135.960326] unregister_netdevice_queue+0x224/0x2e0 [ 135.960414] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 135.960502] ? up_write+0x195/0x520 [ 135.960614] _cfg80211_unregister_wdev+0x57b/0x700 [ 135.960719] ? srso_return_thunk+0x5/0x5f [ 135.960839] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 135.960917] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 135.960995] ? srso_return_thunk+0x5/0x5f [ 135.961107] ? srso_return_thunk+0x5/0x5f [ 135.961219] ? synchronize_rcu+0x1ff/0x260 [ 135.961305] ieee80211_unregister_hw+0x55/0x3a0 [ 135.961396] hwsim_exit_net+0x3a0/0x730 [ 135.961481] ? __pfx_hwsim_exit_net+0x10/0x10 [ 135.961563] ? srso_return_thunk+0x5/0x5f [ 135.961675] ? netdev_run_todo+0x788/0x1040 [ 135.961774] ? __pfx_hwsim_exit_net+0x10/0x10 [ 135.961861] ops_exit_list+0xb3/0x180 [ 135.961947] cleanup_net+0x546/0xad0 [ 135.962038] ? __pfx_cleanup_net+0x10/0x10 [ 135.962146] process_one_work+0x8ee/0x1a10 [ 135.962288] ? __pfx_lock_acquire+0x10/0x10 [ 135.962379] ? __pfx_process_one_work+0x10/0x10 [ 135.962497] ? srso_return_thunk+0x5/0x5f [ 135.962609] ? move_linked_works+0x172/0x270 [ 135.962699] ? srso_return_thunk+0x5/0x5f [ 135.962811] ? assign_work+0x196/0x240 [ 135.962927] worker_thread+0x674/0xe70 [ 135.963045] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 135.963150] ? srso_return_thunk+0x5/0x5f [ 135.963262] ? __pfx_worker_thread+0x10/0x10 [ 135.963383] kthread+0x3ab/0x720 [ 135.963488] ? __pfx_kthread+0x10/0x10 [ 135.963593] ? srso_return_thunk+0x5/0x5f [ 135.963705] ? finish_task_switch.isra.0+0x206/0x840 [ 135.963807] ? __pfx_kthread+0x10/0x10 [ 135.963916] ret_from_fork+0x48/0x80 [ 135.963979] ? __pfx_kthread+0x10/0x10 [ 135.964087] ret_from_fork_asm+0x1a/0x30 [ 135.964221] [ 138.251389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.256545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.265803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.268921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.277858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.281855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.289932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.293126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.295219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.304796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.313734] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.315746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.428377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.429628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.435534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.438044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.445920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.452035] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 138.461532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.507170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.510655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.512197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.515709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.518640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.524121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.525631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.533551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.541465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.543129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.544469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.545700] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.550611] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.554749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.556118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.556168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.574597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.580737] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.588568] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 138.591826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.596619] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 138.598365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.605151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.357314] Bluetooth: hci1: command tx timeout [ 140.357926] Bluetooth: hci0: command tx timeout [ 140.486351] Bluetooth: hci4: command tx timeout [ 140.677375] Bluetooth: hci5: command tx timeout [ 140.677859] Bluetooth: hci2: command tx timeout [ 140.741328] Bluetooth: hci6: command tx timeout [ 140.741861] Bluetooth: hci7: command tx timeout [ 142.405314] Bluetooth: hci1: command tx timeout [ 142.405853] Bluetooth: hci0: command tx timeout [ 142.533334] Bluetooth: hci4: command tx timeout [ 142.726733] Bluetooth: hci5: command tx timeout [ 142.727869] Bluetooth: hci2: command tx timeout [ 142.789431] Bluetooth: hci6: command tx timeout [ 142.790429] Bluetooth: hci7: command tx timeout [ 144.453366] Bluetooth: hci0: command tx timeout [ 144.453973] Bluetooth: hci1: command tx timeout [ 144.581312] Bluetooth: hci4: command tx timeout [ 144.773322] Bluetooth: hci2: command tx timeout [ 144.773784] Bluetooth: hci5: command tx timeout [ 144.838390] Bluetooth: hci7: command tx timeout [ 144.838825] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:52:33 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81ad66ba RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806ce36250 RBP=0000000000000001 RSP=ffff88800c0973d0 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=ffffffff864043d7 R11=0000000000000000 R12=0000000000000001 R13=0000000000000002 R14=000000000000002b R15=dffffc0000000000 RIP=ffffffff81ad6973 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000092790 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bee14ae030 CR3=000000000c1e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f73991c10a935b0 XMM04=000000c0001455f0000000c0001455c0 XMM05=000000c000145620000000c0000856e0 XMM06=000000c000145680000000c000145650 XMM07=000000c000151600000000c0001456b0 XMM08=000000c0001459b0000000c000145980 XMM09=000000c0001459e0000000c000085740 XMM10=000000c000145a40000000c000145a10 XMM11=000000c000145aa0000000c000145a70 XMM12=000000c000145b00000000c000145ad0 XMM13=000000c000145b60000000c000145b30 XMM14=000000c000085770000000c000145b90 XMM15=000000c000153b80000000c000145bc0 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f36ed20 R8 =0000000000000000 R9 =ffffed1001717046 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005638f3144570 CR3=000000000e046000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000008ffffffff00005638f3142880 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=525f4b434f4c425f57485f4c4c494b46 XMM05=006e616c773d455059545f4c4c494b46 XMM06=4b4652006c6c696b66723d4d45545359 XMM07=7968702f3131323038656565692f3031 XMM08=3a56000a73253a51000a73253a47000a XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000