syzkaller login: [ 58.799840] sshd (238) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:8295' (ECDSA) to the list of known hosts. 2025/01/28 01:53:47 fuzzer started 2025/01/28 01:53:47 dialing manager at localhost:40883 [ 61.906827] cgroup: Unknown subsys name 'net' [ 61.993281] cgroup: Unknown subsys name 'cpuset' [ 62.033984] cgroup: Unknown subsys name 'rlimit' [ 69.330324] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 01:54:07 syscalls: 2217 2025/01/28 01:54:07 code coverage: enabled 2025/01/28 01:54:07 comparison tracing: enabled 2025/01/28 01:54:07 extra coverage: enabled 2025/01/28 01:54:07 setuid sandbox: enabled 2025/01/28 01:54:07 namespace sandbox: enabled 2025/01/28 01:54:07 Android sandbox: enabled 2025/01/28 01:54:07 fault injection: enabled 2025/01/28 01:54:07 leak checking: enabled 2025/01/28 01:54:07 net packet injection: enabled 2025/01/28 01:54:07 net device setup: enabled 2025/01/28 01:54:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 01:54:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 01:54:07 USB emulation: enabled 2025/01/28 01:54:07 hci packet injection: enabled 2025/01/28 01:54:07 wifi device emulation: enabled 2025/01/28 01:54:07 802.15.4 emulation: enabled 2025/01/28 01:54:07 fetching corpus: 50, signal 9839/11210 (executing program) 2025/01/28 01:54:07 fetching corpus: 100, signal 11098/13670 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/15557 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/16806 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/18082 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/19307 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/20582 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/21866 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/23126 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/24394 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/25644 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/26914 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/28179 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/29440 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/30699 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/31879 (executing program) 2025/01/28 01:54:07 fetching corpus: 121, signal 11804/31879 (executing program) 2025/01/28 01:54:12 starting 8 fuzzer processes 01:54:12 executing program 0: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000080)=0x552) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x80000001, 0x14, &(0x7f00000000c0)=""/20}) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x67, 0x109000) ioctl$KDSETLED(r1, 0x4b32, 0x7) fadvise64(r1, 0x80000001, 0x94d5, 0x2) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "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"}) open_by_handle_at(r0, &(0x7f0000001200)=@ceph_nfs_confh={0x10, 0x2, {0xffff, 0xd9d74c5}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000001280)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8, 0x2, 0x6, 0x2, 0x1800000000000, 0x1}, {0x2, 0x9, 0x3f, 0xc8, 0x1, 0xc2a}], ['\x00', '\x00', '\x00', '\x00']}) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000001480), 0x2, 0x0) fstatfs(r3, &(0x7f00000014c0)=""/4096) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000024c0)=""/73) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000002540)={0x0, 0x5, [0x7f, 0x6, 0x3, 0x81, 0x8, 0x3]}) 01:54:12 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x1, 0x7d) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='ip_vti0\x00', 0x4, 0x7, 0x81}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x1ff}}, './file0\x00'}) r2 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x80000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000001c0)="0b83a6dd2b423a2ec2b8a3d22c56a2b1c01dfcb8b178bf05e3e7c7f45811aecf6ceb90059207047de91ade87d22e9b81a0254df4f354c37534dbbf1e7c7224eee049f7679ea119f201c620217979a894c3e207a0a6e940b5be4f2cefb893bb888b3d7c2db20b7acf7bd436061f521ec751e22057a867656b4f441798a9c68be8ff107286925b05104963a50e1a617857f9dbb543db10e7f774bf5f3cc68c7f6c734f4a297a900cfcbae37e59881d180be87311dae9d415ba06a60ee56f3f9aed6d00c388d5d2a35a6bbdb6d19f497b2a74ad7112842a1916") bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fgetxattr(r4, &(0x7f0000000340)=@random={'btrfs.', '-\x00'}, &(0x7f0000000380)=""/13, 0xd) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004074) fcntl$lock(r2, 0x25, &(0x7f0000000540)={0x2, 0x4, 0xfffffffffffffffd}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x7d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x4000805) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000780)={'broute\x00', 0x0, 0x3, 0x53, [0x81, 0x6, 0x1, 0x8, 0x3, 0xfffffffffffffffe], 0x1, &(0x7f00000006c0)=[{}], &(0x7f0000000700)=""/83}, &(0x7f0000000800)=0x78) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @multicast2, @local}, 0xc) sendmsg$sock(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000880)="707082b42b7f59eed9b70eb0057cdc359e5f23ef4a987dec05cd8081f66d3111e4a1ace6c1a542247fd191acb783cd3351587081186a85fbfed7d4159bb8e21b3f0e65abc675843fa9288325c0dd000c727957317db6d2d5eb0201c05a9022b7c79731a85bf133c4b220f33226870324359edde2e2ced395d38257c7e5caa918fb2a993563c56d30db6bf670d4a036762840f1659d203d0cebdeb24c7beb12ad67bad1dee81237b58abdbf83dfd2630896c56063fa9e9a15c56b6081ef2272bb7d412ecac43bd9d693321eaab0506e47e958b538c1ded51534cd8394d890729ca7cb62b3e99cb3bb6e3a", 0xea}, {&(0x7f0000000980)="8d10ff6a36cea08376a0fbe01fe3dde8f8c228f37b8356b9619d189e0b4c4ccf789b6da782178a21e1a64dfd594719774a9ed2b626d16f888f0e345e0635d6565ff27b6cdcaf3b7b2fdd173a9a3ab7d2fe14664f907e70bb7f04bf6932bde275d4b0939810531c105c3d8d7eed416ffd63735ab379a91027988d04d4cbd221fe782001ee787d17cc03fee0667e8e8097ba3743a2b5f02746645302d5253b080a592177c8e8a0e3cbeadbd92b75ee56422e0835fddde9703253b921465b5523188a4b4473c0d1aa7902feccc1bdd3d40071adfcd42f4489287610a415937575e72c0db55c3ee595fb2d8ac55f90b774b7ace9a23c9512561d45ac9bbc99d45ecb9b2217b27f0d67042fe7d68c8418c097635232056273b669f8f29032ed60953e1e4ae9417682d8100e762bb9d5f865619a8d9fb2ca96748fbeb39689c180bb7e77134e4bdb98995e1e45f590a851c62fb844c1cec139632780ecb5ef29c02584d570e73a9b925c14c712f49b8926c1ed8ebf20031bc47f9c694a16458c9d46ecda9911b9d668f4a8a48593d2554dc98e308905a29a5e3fbc0e277eb1f82b460465ed889c13370992cb6052daa93bd6c1ec7460862e936659502a8401af9aaf33433b7bae540f67260529a423471cb0b33a4112dba5682d9cacc6b0ecb4eff95c0495e39ab2122757fb0ce3266d5b5a40914408dff673485b685e663056018c15ee2211e32dfab0765a5198796fe64f49de488ad1835df57a3ce571944c07f793fa6ce9f866c66d54040eb7fb926f4fb8b0d9c82b6f404613eae40a5dd77fa8b6cfe276f86803575365d4e8630d56584cf014ba19ad8e823511d9b42f406481543fb8aef89d62bcd9c77ccdd4d307a91e46fd6363bdf24bbdb2e0b000e8d6f63a88fb66a21ba5e66142b6486f8da614918bac50378b46f184b7d8e49a082ba32881abf6e152d5da6e9a266118ecb0fd4418cb3d191a83f288968aca84988cb1aa71800d71d94aa4c396dda871431f9813a69deef458653600b409fd70f6691a28d43c2f8a58bc34309b8c2d2e7a3587b4944737988ad9588cabfee109617565b361090df07fd93f3336428adb1ead44bb1e2320efcc9e2d04307b97f3cf92fed99522bb4ba32ed7f87808a62f6720086840f641183defeee364a8234b7008577bc565360610053b749db0449b154c37549f721f0b0abe219dff009081376b22f36f08c639261593b11de866384701fce5a672be106b53ccb5cc58aeba346845c7692f3fd9e595035a34dd9a85f84e3791c728ae31399034a514d8400aef49248ca4d9f72bd024a50fcaac698cebce5a5b6c437ab81bb5fd5a5b4f158bd91134d3b40006d9ab7698ba9a8b2654ab5a793f6a9284283659e70d0eac23340f8a0c72acb857c45d4d0eda8548dc53bebff74bb2d9dfcae998784357193e2659c039eca21ce34bd0936c24ecfdd98b4437375228c28f3b84e6328f5ebb443a76cee087f699d275fe34c5322dd59fdf107f46391ba7fe60b4d0ca83bf28f45b1e617d0cfd2491f32b6547eaef48cf90a6cb49e9c0ce452c7a5960a4d203e09b9ca2622577b0554c06bb357cee977aff6787b5003cf9d949971c90cf978e7cb3403e94f7528f6b24d6d9a8d0c38353412a8420f6a1315bae1a2ca8ee3f3e3b7205a00407733d20163591e39979fc3b4d60489515a05ff3a5b9525ab6e97edca9f16d239a131b3b171ad78fc5d62823e893822f7ad11864c3cbf7344a9b4a8b0f2aa194023bd1359fcd1cba29c4561cb0da231b971ffdefe30b4ed1c6b369e3e47e61e879f6a8bb31a0c4061369b9322ad6570551b8e036fecec21c03aeb7827218f5e2a8d33534698628a9c96d062c87590ee18724e48e2ada3434793c2b4595492ba81b754b31561de9006510ed576f90a616115335bd1bcd83f1f3e9d15130060b7faaf2cdbec506b98d97e75ddfff48e05d8049979f22ea33bf65f8868b4a9265614a23f8447c786e1508d73dbde4d448a7d5ee94a8a913c5bd0d79e7cec44982ffe65cd8376cb455a0469e83d950be3df5a47992492bd5562ee29a0a7e73b9823b041d67991abb4d04779f50b724aaed53c90dd12ba66be68d5b1d85e35851d84a99aa10f24a59cf51682735d0835d62325c2aea026e2f01c2ce0105610cfaffb0c0711628c007b05e9b721cf5cfb2d9bc54bc7060d6e79d1f62627e450b3c0a2bb952bebae175677db68ed50b2dcc91344d3b575e6ac26d36b775903b3b1266818e407ca9eb77e90ebac2187e045440765af454151bee962c587f4e13b12fc993b92d37808daf3aa8ddf1c35d96683d5da86d820843ab3948eb522b9755ce2967531a1b0c9e56b065ed3a97669bcad89f7df12159f84d42f2d431cc99dc465154a4f97f87d40e5bb0ad554878758f926bbfb4a105b2c615fa73497f1f76f220636c54cfdf4fe60ad21c7a150ae6fa6e8378fef7b030374b1c9b061c03f7633fe5a55979f6028013b751df71c60ddc71cfecca06bf0c7601bd90a762a7d5246169a6994a0037ff139b3bcb3d53c1548f14511f65bce2136267471a4fc6e73cd574d070f7887bae7663f58b8667d88e6b85fcd1b68286d9a9b1180119e435cf6194701e70f72b877c96fb0e9241165f2dfda08b2f5fb43a49afc223a5fcfd653cb96c03b086b5dff5a99612b179ea09341b4c9964354f50cb3d56957335758b4be630dea1eb8e6c5502b5f27eb3f164afb08c37a845e7d28b2aa118802dafc672f314c8237876e14ea802c2883b29835c62a8dab69b5557ff4e9a7ea7797e800f3d5d8c73660b6b53ace1d0297f675650a1ac03f4f2ca82a570cba3065f9c4c5cb8a7704274289f4c54f4d9c401d73f0a14d33902220ac83d213139ae35108fdc572bc40272736217485b1480b366121a05e339e375d68e2df636454ab00c44909332b8b880772f17da0798d17371d48f9f82a29c9ef3623cd2807b6edeb8b1d805300cc300db552a12d94ed19d419701bdbe5a20df272d494b98006f9e3b1510ed6fb7b3f0676598e422de1975afd7229176dd63866d53fe580b1558bcb5f434ee6d0b5446aab6cd82cb2ba0a00207c09821883c0caefba20d78462dbac557e53ef009e094bdd0e145ecb9978481f03ccce869de3e670c0ea72851d53a6af2171590df5a434a8fffdc3f5ddc3ee2bcdeb7abdf95b61244b43efe0c687e4d90bea3bbc71092497ae893aa620aa12975ebd9a9c8c93bc16b912185c072a1472894af0e53c1d6306578ea7679b123c5a3fa9c0cccc9b438885c8a91da33f7a68775865ab319325be1614a704b4f30ab7ac708912a69e9b7c24cb3e0239bc8d6b0b935f9fb989e1e07198db2f1417cbb2a81c4cf36cbd077dd12bab93bf5a7c2a201a857095a58df3ac98516d55331f3cb2a610dd4739603c9cce0ff71a500b1854bf2026e65df34e4b6f4e3917c314a217a30c0248dda1f5467e684e510d66f639b30b6928067942a919d1c0a88441af35486c9206995ce0680a36992b595e9beaaa9d098ef941e5db5a4b9d9cabf439f0e63aff414a99416cd5671b29351ca2da30f954dcb232267466a317dc059e3fd414adb640cf765d4a489ac2a8fb9689c6800a2cd41401d0f1494e30efb9c24a38b3c89c5ee162e2fb412691ef330a4d4e058297f33d41f8c343d5bbb5a9a4df628218a4fa5e3b501512cee76abec7c07326e79d49e91880417408da4257308e0c58d6efb1da2665c284ac76027510c9781ac89d1a83e328e256dce3aef5cbadca8e5e23a7e31e70d30ffcb61855f76835f5d19c654ebc61ba3d478d0e516d54124cd949e0c584170b6376f527035e22326aa3c8325682f496641345683516e71205a8ad772a895dd762a9e8ca9c4592ae1c43e7d11d0fa67eba2828308656c0b502086331f5de71db5c1ba11967fb4778d7b6e033abe6061989882125395598bc5c598d159791ec575bfb05e3786b0c93b3154bbf9cac7461a914343af11aaa5695169800ba84d2cb63ce5b949658e3bb81b1be40938a62e0cf370465dd5ed828c8c38be364519d3cb334ac339a72b0b99e4e99ae2ee5e9e94fb8ff818d46168e1dc37431060fd1a259c00ff466c9b9c90d4e030d24d08df469fc47984edf407338e795285e1c78e19b748013195e32f620398fb6dda124858a14b1b9131da3e8cf18782af0bae12ce84f81399bbc78f771ec82c3c2b605afe6929b1ce2b5f64e8f5e008549c464103207d29fd45f46f1a7763e53051e25e638dfff1bd9c8f848cee98b114159ac747ea142884b9eab8fe528eeb1254419e1199533642e1a12fa84da0fbdd5912c8481c7e92e8c3f8f5bb7c571839eda4b06391c939a25279054f0552bd51c7d048ea8424f9d898d0544e39ea59142a0603d17016b0798c059d9f6810308e9d4e73847ea603982702909221d903e159ac603efcb00b1d1ca46c567448f69147c3022840261eb28071ca6883a979832e7012ae09abfb9b6b1027d91a99ce46007cbcf1b0beb7a929c1d55f5d0dac27a56dfccc7472a29c7f8c0c51ed523ede23dc63754618f6070e380dad05c626143810c5535b291d86a29c8c1de51ae6cfa38888a5c6c95002dbc3e01171c78947862b6bafd25b6c86b7219d54fcb1e217175e135d2eee85513320efe2a6b4ed9cda303e9cbfbbfa3e5afb0e8593f19b4454c5f8d581ebc36b2504c7d9e4d1c5640da279097c7201e45635184f4654cac0cecb1ada011d73fdfc7c5bc98d82648d4c2ebceb6d082c5e45a42175d46d09b7fc47bcc48b82ac302e0492180d6b4aeeeeffe70c0790fa98f1b2c8552af3337c001e221fee5ae891cde6e09eaa3041c0598ede946b84d5305c25da1bd104b521d05a264f93c3f4612aa7c942f4fea207ed2f88af61f61b8d97ab4d62971b44f2417938301638ab4ac78b25f03a88342c3cc1705f043f30cb68761ae9e448d68612523661535b6f89223f2c61fd15ec33d782cf28693f4e3df7e2f76e8ac44d6a0e144422f8d48d0269e784a0edf71ebc2960b7b5a9497fb62b72ace0692964f94bedffc394d355b505e9722c4ec02dc7a5aec361fe32baefca89edbcbaec2561aa4fa69a86a67046d8c64f90b32c851ca32c2fa7daf3db0f8d810949623f9679281476a7ff958ce648fda37404c0805df89a595517c1c48dd15dace0b80949a401b747038a9a79bd91e66e45ad422c2121b182b3e927fd3b0bd335e5f067820991a17862b8655d6e00b17414062b18e028d42b9765443c8166c7463153258c3f5561b40756658e4290273d6f3c9bfd9d9fa1b734e12256c8ef33e19a39311a7bef3fe9b18623f1b13c32de9d935dcc04f625003f0d4ff7da99491846facc5cedb093737fe621e977ffcd42547c37ecf3d80be0b9949b700c8e753971f22bd542988dd5fdcd9f508def381fb1a6903e9c0910405becb15af75292065847348fd14f2d538a2b4f3596b2ab9a5e844334ac8d16ff79f5f32c2867751b4b4195449c7bb78a5d9560440e307c63affe4fdc71a966b03563fad4e7e257823665a005d423f170da41db2dea92983791b27e6e56477bc0c4768c7ed0f2aa36b59a7703fbed3c8c83d05d25f9b8669cc36755f5cf384e8ce66ae5c3a213212749810fe21427e498b61911746b85f9e0549c9e147b3f3d6dbb9750fd80f4587c67626f18fdbcc1c1a68fc9b323aecfd18bcb7bf17309ced355365c534ed7174eb0a2497f9d5f1d74940302b02281628c0d459cd34a1c3943d57601ae80234d30da70c0292d6c103bf7f240e53897b46674fa27", 0x1000}, {&(0x7f0000001980)="09ecda", 0x3}], 0x3, &(0x7f0000001a00)=[@txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0x18}, 0x40080) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1c8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0xd0) 01:54:12 executing program 1: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r1 = syz_open_pts(0xffffffffffffffff, 0x701040) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct}}) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x2, 0x14, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2a3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}}, 0x4014) r7 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xec7e9999bcfa5901) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'veth0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 01:54:12 executing program 3: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x48}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x2400a080) r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0c05}, 0x4000840) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={0x384, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x5c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1d8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "1a664679c0a6246e65552f6f47da6377e211c3990c"}, @NL80211_FTM_RESP_ATTR_LCI={0x9c, 0x2, "bc1b4b98349333117187d9ef5bf74de6f6a6c9bf50f3cb6bf9330922b5f99ff6c2fa2001a7dd04aac561cb04f05e1c26d27ccc6b67c2ad3af38c7e51e9a65d72127806dc71fc2c49460a01e06f3a4f5d9e2fefb437337d6bf1377c87a994d6ce560fb761de55c5a87beb12fc77a47841dde283f8cd6f227dcdabdf1edfc021efc3b5f805ec7ca7ef98d07447518fb44faf305048f927ed0b"}, @NL80211_FTM_RESP_ATTR_LCI={0xb3, 0x2, "872f59fa3952360a250600d30b3e6e588e07c2afc78d1a2707011ba73908aba480d1378bd365cc453b57ef60555c0474d4195015644ff825f0650330081c6c5604c4c6402aaf47b08e3c5747626f6ef2a7ca96062ca677ccf47106e061d0068b9a4f63b7030584ae7a1d1f2a99052ebd1db0beedde571e585e93e7cf5161b14bd48d91e4ca17d56b95d4fac437e1018523f6666c935642a3a43f8072da0fa8abb060d6fad9d59598613646abade541"}, @NL80211_FTM_RESP_ATTR_LCI={0x65, 0x2, "bee45345d0586b9ac9f942265331b09008ff3f101159a51fe0e9201b68de9852b4e6265e6b8d853651d3482532d632ea9971c74b3f971885d68396891795e8ee3a3baed670515b2d20522420c29bc8dba09d05efe425e714000fbf152f7dcdad9a"}]}, @NL80211_ATTR_BEACON_HEAD={0x186, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @random="4a972a274595", {0x8, 0xffd}}, 0x7e, @default, 0x4800, @void, @void, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x4, 0x7, 0x8b95, 0xd460}}, @val={0x6, 0x2, 0x9}, @val={0x5, 0x2d, {0x7f, 0x9d, 0x7, "5c27e4491fe057a971a8e91dff26964975feda1fa7b05e51b8a75bfb4394f44d1d72cdcde76525965118"}}, @val={0x25, 0x3, {0x0, 0xae, 0x87}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3f, 0x99, 0x1f}}, @val={0x2d, 0x1a, {0x20, 0x1, 0x3, 0x0, {0x7fffffff, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0xc00, 0x1, 0xc0}}, @void, @void, @val={0x76, 0x6, {0xaa, 0x0, 0x2, 0x2}}, [{0xdd, 0xc5, "9ca8babc36f19dec67e4e47c6f56668633236a1d23dd84abc5c4c5ba5ca307f605504e0e903c91332578dfe733cb17b88764567f650c498f39c65b20bd03f17a4f4c87ce75661af0fe61f79dd4104d3ed6abb6e2ff33c47b25dc9a230a3b228cbbc5bc44eeafab4c86a9930b4095d4bb01c412454c909fa5ce7c44c859fd7f7d4af655dc9d36295096a76832d25f4f46f2887833ebbd5648ea79fcaaa38dad2228f25aa9b37c375088141d35df81f5b36f82927c53e52cc9863b8258ddb04e6d0490ea15b2"}, {0xdd, 0x25, "603928c8791fe4d27c0e78e054d318202140b84c0ca8bdcef2566ae2fb036fabe305d9f4f0"}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = syz_open_procfs(0x0, &(0x7f0000000900)='environ\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffff80}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000b00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) read$usbmon(r0, &(0x7f0000000b40)=""/130, 0x82) r6 = syz_open_dev$vcsa(&(0x7f0000000c00), 0x401, 0x4800) getpeername$packet(r4, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040095) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000e00), 0x200200, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r6) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, r9, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x100) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000fc0), 0xc101, 0x0) ioctl$BTRFS_IOC_FS_INFO(r10, 0x8400941f, &(0x7f0000001000)) [ 86.282770] audit: type=1400 audit(1738029252.181:7): avc: denied { execmem } for pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:54:12 executing program 5: r0 = eventfd(0x101) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod', 0x404100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = signalfd(r2, &(0x7f00000000c0)={[0x4]}, 0x8) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000140)) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000540)) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000580)={0x0, 0x88fa, [0x7, 0x7, 0x5, 0x7, 0x7, 0x20]}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000600)=@buf={0x27, &(0x7f00000005c0)="c6bb1453d2d752cecdd7970fed918509b85654101f0b78a06e1f7148250b78ff0bd3591b7346a7"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) connect$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) r6 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x20, 0x240e01) ioctl$RTC_WIE_ON(r6, 0x700f) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x800) fstat(r7, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 01:54:12 executing program 4: r0 = dup(0xffffffffffffffff) fsync(r0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r3 = accept$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000300)=@ccm_128={{0x304}, "f47faf92713ac7ca", "2368b4775cf6afe96fe3c5c19ed4b4cf", "c81a774f", "b7cccfa9fe71ff10"}, 0x28) r4 = pidfd_getfd(r2, r3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c014) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xfffff358}}, './file0\x00'}) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f00000004c0)={'security\x00', 0x3f, "d5aa1d966b47a0a3ccb610d765005e763ced15aa7db824c6965659e677df7af5cd4dd953d98e3382b7c69e6308acf511c89327f73d5e827d8942beafec4ea3"}, &(0x7f0000000540)=0x63) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000580), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000005c0)="d61c22204c22c4c2fb0925bb458829855fd3c48516c791e1ac8ef12a5a352a162b47e761ffe84414f6fe5fd6ce3319f9a401948a", 0x34, r0}, 0x68) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x24000000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000780)) ioctl$FITHAW(r0, 0xc0045878) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x8402, 0x6, 0x7}, 0x18) unlinkat(r6, &(0x7f0000000840)='./file0\x00', 0x200) recvmsg$unix(r5, &(0x7f0000000a40)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)=""/109, 0x6d}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x100) 01:54:12 executing program 6: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000080)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x400, 0x7, 0x5, 0x2, 0x3, [{0x80, 0x3, 0xffffffff, '\x00', 0x180}, {0x2, 0x0, 0xfffffffffffffffb, '\x00', 0x288a}, {0x2, 0x4, 0x80000001, '\x00', 0x2084}]}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0xcf068d4a1b2d900a, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x1}, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)="77e48ee3b948c681328236f201c257a591e25522fc46487c953fba80ec8a44ec8e61b8a4e58e2cfbda44b76f7bd9d267af4972f7d94879f011df35deed2a65e6a5d116f693e25d65d4df78144944a8c1c3053b3f96193747697c6f99ef198f25867e92f1696fa80ef1be4a0f0a92e3f07f64187d00ad9962b35dd65ce8c71fb7ef762031fc98500e2cf9aed101bffeec7f23217fc151f4c8d27b87f6854348a4fcaf295fc2f7101369337c0fbdf7b69258", 0xb1, 0x0, &(0x7f00000003c0)={0x2, 0xcf, {0x0, 0xc, 0x31, "d9bc5ce1b4c9d71a364eb1192932bd9173ce4859912625d4154148ed5e0d8874ad53137bccd714a88907570d8f63a26d38", 0x91, "b4e4941eb538a01d21a9edb340614441661192437bbc87c10b6cb5a9af72f50dde222891d6d48cdecd6cac3eb87701ec94d18742ad3ba48456360dddbed03a4df110e186aeb178aa50a437cb999f3ecd4ca1378089614ab357d021625cbf49bf69feffab3f3b1d577a55d2845e9d54dacd9927ca02206d467eb37aef793ba4a7d87759cbffe8d513996bf572a1007742db"}, 0xa9, "603885212bc33410dc44bfd56ebdbef3f681187e47ed436a5049a8ce354a02df32ed5f11b9888cefaf6150ddf695a41f5bc3c9b1116854c301f266d81ae85f90793594a776b45924e2fa1340b42aa6ceab38e4d514d4e6f5e84da28efb70a1f18e83521c1cd18387ec487a78beda337679001a6c1af01eb08f013c850b49496f508639fe65823f0b28d19813eddcbd48909a458f211a90ca410ea74548e4c7e599aceb66d43ffa10a9"}, 0x184}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x206, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xc3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xa4b}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x82}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x14000000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffc1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x40000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x1000, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f00000007c0)='.pending_reads\x00', 0x4c4480, 0x81) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) read$ptp(r4, &(0x7f0000000a00)=""/42, 0x2a) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000a40)={{0x0, 0x100000001, 0x3, 0x0, 0x6000000, 0x3ff, 0x7, 0x1, 0x10001, 0x2, 0x10001, 0x100000001, 0x4, 0xff, 0x10000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{r5, 0x15, 0x4, 0x7, 0x1, 0x6, 0x3, 0x200, 0x10000, 0x6, 0x8, 0xfffffffffffffffc, 0x1000, 0x88c1, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001b00)={0x2, 'ip6tnl0\x00', {0x7e36779a}, 0x1}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x58}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x9}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000001d80)) finit_module(0xffffffffffffffff, &(0x7f0000001dc0)='&]\x00', 0x7) 01:54:12 executing program 7: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/16) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="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") r1 = syz_open_dev$rtc(&(0x7f0000004340), 0x80000000, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000043c0)={0x1, 0x30, '\x00', 0x0, &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) listxattr(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)=""/32, 0x20) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000004480)=0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f0000004680)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004640)={&(0x7f0000004500)={0x138, 0x3, 0x5, 0x5, 0x70bd28, 0x25dfdbff, {0x5}, [@typed={0x8, 0x94, 0x0, 0x0, @u32=0x33f}, @generic="457b92eb7b99e92b69bff4eac34e98aaa826a703cf7da12db1dadf8816a681b583e763b6a4bd324872ad106f40af01df", @nested={0xe4, 0xc, 0x0, 0x1, [@generic="e36bf4c98a6035853a4953e2926265cf3a4be627182c9014308b9f6779b61c5660203bc07160f6c9e00f5aefda0b963ba28f2574d1a31bf8cd3c0d58d0904812e0a7ce4c98a60d024d74128a7fd54300f6ec18131c0eddb7d5d8ff886b9ab2bd03c3d636bf7cbaaba8b9630547c900f0ee382e2fa9c5231fee0ee621f948910954e82fde2a9ee1974f787e24b27f59504d20", @generic="e2bb4ed6281e8581142dab7f6381f21fa21be7192ecf2d23dc8db086556a3fbb179d69115adee8bede6cdc122d507d612c212ce9481d", @typed={0x8, 0x6d, 0x0, 0x0, @uid}, @typed={0x4, 0x83}, @typed={0x8, 0x69, 0x0, 0x0, @pid}, @typed={0x4, 0x52}]}, @typed={0x8, 0x90, 0x0, 0x0, @uid}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x8001) r2 = dup(r1) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) lchown(&(0x7f00000046c0)='./file0\x00', 0xffffffffffffffff, 0xee00) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000004700)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCSIG(r3, 0x40045436, 0x31) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004740), 0x48002, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x80) r5 = mq_open(&(0x7f0000004780)='\x00', 0x800, 0x58, &(0x7f00000047c0)={0x0, 0x1, 0x9, 0x2}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) [ 87.658705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.664118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.667156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.671581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.673568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.675010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.722380] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.731030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.741835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.749102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.753766] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.764232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.770609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.790786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.798113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.806155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.811109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.813670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.836127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.843076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.844881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.852022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.855858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.866283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.868885] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.870851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.872692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.876658] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.878225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.882085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.884684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.886682] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.888327] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.888684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.893646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.894616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.895931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.897711] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.901474] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.901616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.905547] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.905656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.908326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.922320] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.925694] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.950714] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.964925] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.975823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.737935] Bluetooth: hci0: command tx timeout [ 89.865526] Bluetooth: hci2: command tx timeout [ 89.865728] Bluetooth: hci1: command tx timeout [ 89.929844] Bluetooth: hci4: command tx timeout [ 89.994480] Bluetooth: hci6: command tx timeout [ 89.995085] Bluetooth: hci5: command tx timeout [ 89.995677] Bluetooth: hci3: command tx timeout [ 90.057609] Bluetooth: hci7: command tx timeout [ 91.787436] Bluetooth: hci0: command tx timeout [ 91.913523] Bluetooth: hci1: command tx timeout [ 91.914688] Bluetooth: hci2: command tx timeout [ 91.977503] Bluetooth: hci4: command tx timeout [ 92.041654] Bluetooth: hci3: command tx timeout [ 92.042020] Bluetooth: hci5: command tx timeout [ 92.042362] Bluetooth: hci6: command tx timeout [ 92.105494] Bluetooth: hci7: command tx timeout [ 93.833461] Bluetooth: hci0: command tx timeout [ 93.963430] Bluetooth: hci2: command tx timeout [ 93.963894] Bluetooth: hci1: command tx timeout [ 94.026461] Bluetooth: hci4: command tx timeout [ 94.089476] Bluetooth: hci6: command tx timeout [ 94.089976] Bluetooth: hci5: command tx timeout [ 94.090246] Bluetooth: hci3: command tx timeout [ 94.153469] Bluetooth: hci7: command tx timeout [ 95.884585] Bluetooth: hci0: command tx timeout [ 96.010512] Bluetooth: hci1: command tx timeout [ 96.011306] Bluetooth: hci2: command tx timeout [ 96.074067] Bluetooth: hci4: command tx timeout [ 96.137507] Bluetooth: hci3: command tx timeout [ 96.138622] Bluetooth: hci6: command tx timeout [ 96.138648] Bluetooth: hci5: command tx timeout [ 96.201605] Bluetooth: hci7: command tx timeout [ 144.272070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.272911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.531173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.532443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.044707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.045350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.244455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.245116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.431665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.432341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.686461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.687139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.852878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.853617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.168334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.169198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.323191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.323910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:55:12 executing program 1: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r1 = syz_open_pts(0xffffffffffffffff, 0x701040) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct}}) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x2, 0x14, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2a3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}}, 0x4014) r7 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xec7e9999bcfa5901) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'veth0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 01:55:12 executing program 5: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 01:55:12 executing program 5: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 01:55:12 executing program 5: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 01:55:12 executing program 5: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 01:55:12 executing program 1: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r1 = syz_open_pts(0xffffffffffffffff, 0x701040) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct}}) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x2, 0x14, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2a3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}}, 0x4014) r7 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xec7e9999bcfa5901) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'veth0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) [ 146.913430] [ 146.913664] ====================================================== [ 146.914184] WARNING: possible circular locking dependency detected [ 146.914706] 6.13.0-next-20250124 #1 Not tainted [ 146.915098] ------------------------------------------------------ [ 146.916265] kworker/u8:0/11 is trying to acquire lock: [ 146.917343] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.919266] [ 146.919266] but task is already holding lock: [ 146.920884] ffff88803a900768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 146.922771] [ 146.922771] which lock already depends on the new lock. [ 146.922771] [ 146.923882] [ 146.923882] the existing dependency chain (in reverse order) is: [ 146.924494] [ 146.924494] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 146.925067] __mutex_lock+0x13d/0xb50 [ 146.925476] wiphy_register+0x1b2e/0x25d0 [ 146.925906] ieee80211_register_hw+0x23a4/0x3d60 [ 146.926379] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 146.926877] init_mac80211_hwsim+0x389/0x870 [ 146.927339] do_one_initcall+0xf9/0x640 [ 146.927777] kernel_init_freeable+0x53d/0x7a0 [ 146.928241] kernel_init+0x1e/0x2d0 [ 146.928612] ret_from_fork+0x48/0x80 [ 146.928989] ret_from_fork_asm+0x1a/0x30 [ 146.929424] [ 146.929424] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 146.929961] __lock_acquire+0x29fd/0x4580 [ 146.930388] lock_acquire+0x19b/0x520 [ 146.930786] __mutex_lock+0x13d/0xb50 [ 146.931192] unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.931743] unregister_netdevice_queue+0x224/0x2e0 [ 146.932230] _cfg80211_unregister_wdev+0x57b/0x700 [ 146.932721] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 146.933205] ieee80211_unregister_hw+0x55/0x3a0 [ 146.933670] hwsim_exit_net+0x3a0/0x730 [ 146.934079] ops_exit_list+0xb3/0x180 [ 146.934471] cleanup_net+0x546/0xad0 [ 146.934858] process_one_work+0x8ee/0x1a10 [ 146.935303] worker_thread+0x674/0xe70 [ 146.935729] kthread+0x3ab/0x720 [ 146.936103] ret_from_fork+0x48/0x80 [ 146.936480] ret_from_fork_asm+0x1a/0x30 [ 146.936911] [ 146.936911] other info that might help us debug this: [ 146.936911] [ 146.937561] Possible unsafe locking scenario: [ 146.937561] [ 146.938057] CPU0 CPU1 [ 146.938455] ---- ---- [ 146.938849] lock(&rdev->wiphy.mtx); [ 146.939197] lock(rtnl_mutex); [ 146.939702] lock(&rdev->wiphy.mtx); [ 146.940242] lock(rtnl_mutex); [ 146.940552] [ 146.940552] *** DEADLOCK *** [ 146.940552] [ 146.941056] 4 locks held by kworker/u8:0/11: [ 146.941439] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 146.942333] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 146.943201] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 146.944013] #3: ffff88803a900768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 146.944913] [ 146.944913] stack backtrace: [ 146.945296] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 146.945333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 146.945356] Workqueue: netns cleanup_net [ 146.945396] Call Trace: [ 146.945406] [ 146.945417] dump_stack_lvl+0xca/0x120 [ 146.945476] print_circular_bug+0x47b/0x750 [ 146.945522] check_noncircular+0x2e9/0x3c0 [ 146.945564] ? __pfx_check_noncircular+0x10/0x10 [ 146.945606] ? hlock_class+0x4e/0x130 [ 146.945636] ? mark_lock+0xac/0xed0 [ 146.945676] ? srso_return_thunk+0x5/0x5f [ 146.945731] ? sched_clock+0x37/0x60 [ 146.945788] ? lockdep_lock+0xba/0x1b0 [ 146.945846] ? __pfx_lockdep_lock+0x10/0x10 [ 146.945908] __lock_acquire+0x29fd/0x4580 [ 146.945962] ? __pfx___lock_acquire+0x10/0x10 [ 146.946005] ? lock_release+0x20f/0x6f0 [ 146.946050] ? __pfx_lock_release+0x10/0x10 [ 146.946098] lock_acquire+0x19b/0x520 [ 146.946141] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.946190] ? __pfx_lock_acquire+0x10/0x10 [ 146.946234] ? srso_return_thunk+0x5/0x5f [ 146.946290] ? lock_release+0x20f/0x6f0 [ 146.946333] ? srso_return_thunk+0x5/0x5f [ 146.946388] ? lock_is_held_type+0x9e/0x120 [ 146.946443] ? srso_return_thunk+0x5/0x5f [ 146.946502] __mutex_lock+0x13d/0xb50 [ 146.946554] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.946599] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.946645] ? srso_return_thunk+0x5/0x5f [ 146.946700] ? synchronize_rcu_expedited+0x38a/0x420 [ 146.946744] ? __pfx___mutex_lock+0x10/0x10 [ 146.946798] ? __pfx_autoremove_wake_function+0x10/0x10 [ 146.946853] ? srso_return_thunk+0x5/0x5f [ 146.946908] ? kasan_quarantine_put+0x84/0x1e0 [ 146.946969] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 146.947004] ? srso_return_thunk+0x5/0x5f [ 146.947064] unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.947109] ? __virt_addr_valid+0x2e8/0x5d0 [ 146.947162] ? __pfx_lock_release+0x10/0x10 [ 146.947207] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 146.947253] ? find_held_lock+0x2c/0x110 [ 146.947311] ? srso_return_thunk+0x5/0x5f [ 146.947369] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 146.947430] ? srso_return_thunk+0x5/0x5f [ 146.947485] ? lock_release+0x20f/0x6f0 [ 146.947529] ? __pfx_lock_release+0x10/0x10 [ 146.947572] ? srso_return_thunk+0x5/0x5f [ 146.947627] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 146.947675] ? srso_return_thunk+0x5/0x5f [ 146.947742] unregister_netdevice_queue+0x224/0x2e0 [ 146.947785] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 146.947829] ? up_write+0x195/0x520 [ 146.947884] _cfg80211_unregister_wdev+0x57b/0x700 [ 146.947936] ? srso_return_thunk+0x5/0x5f [ 146.947994] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 146.948033] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 146.948072] ? srso_return_thunk+0x5/0x5f [ 146.948127] ? srso_return_thunk+0x5/0x5f [ 146.948182] ? synchronize_rcu+0x1ff/0x260 [ 146.948224] ieee80211_unregister_hw+0x55/0x3a0 [ 146.948269] hwsim_exit_net+0x3a0/0x730 [ 146.948311] ? __pfx_hwsim_exit_net+0x10/0x10 [ 146.948352] ? srso_return_thunk+0x5/0x5f [ 146.948407] ? netdev_run_todo+0x788/0x1040 [ 146.948456] ? __pfx_hwsim_exit_net+0x10/0x10 [ 146.948499] ops_exit_list+0xb3/0x180 [ 146.948542] cleanup_net+0x546/0xad0 [ 146.948586] ? __pfx_cleanup_net+0x10/0x10 [ 146.948640] process_one_work+0x8ee/0x1a10 [ 146.948705] ? __pfx_lock_acquire+0x10/0x10 [ 146.948750] ? __pfx_process_one_work+0x10/0x10 [ 146.948808] ? srso_return_thunk+0x5/0x5f [ 146.948863] ? move_linked_works+0x172/0x270 [ 146.948908] ? srso_return_thunk+0x5/0x5f [ 146.948963] ? assign_work+0x196/0x240 [ 146.949021] worker_thread+0x674/0xe70 [ 146.949079] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 146.949131] ? __pfx_worker_thread+0x10/0x10 [ 146.949191] kthread+0x3ab/0x720 [ 146.949242] ? __pfx_kthread+0x10/0x10 [ 146.949294] ? srso_return_thunk+0x5/0x5f [ 146.949349] ? finish_task_switch.isra.0+0x206/0x840 [ 146.949400] ? __pfx_kthread+0x10/0x10 [ 146.949455] ret_from_fork+0x48/0x80 [ 146.949486] ? __pfx_kthread+0x10/0x10 [ 146.949539] ret_from_fork_asm+0x1a/0x30 [ 146.949605] [ 147.151764] syz-executor.4 (287) used greatest stack depth: 24016 bytes left 01:55:13 executing program 5: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) 01:55:13 executing program 1: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r1 = syz_open_pts(0xffffffffffffffff, 0x701040) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct}}) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x2, 0x14, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2a3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}}, 0x4014) r7 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xec7e9999bcfa5901) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'veth0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) [ 149.603198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.606264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.608632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.613927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.619709] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.622553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.655616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.657290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.659735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.662272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.665654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.671656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.673475] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.674972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.676013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.678518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.679200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.679988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.682966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.686471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.686541] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.687895] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.689660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.689834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.691916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.694280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.702625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.703512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.713485] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.715443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.723047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.743534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.744604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.746307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.747510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.748342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.690517] Bluetooth: hci0: command tx timeout [ 151.753433] Bluetooth: hci4: command tx timeout [ 151.753906] Bluetooth: hci1: command tx timeout [ 151.754313] Bluetooth: hci2: command tx timeout [ 151.754771] Bluetooth: hci3: command tx timeout [ 151.817474] Bluetooth: hci5: command tx timeout [ 153.737546] Bluetooth: hci0: command tx timeout [ 153.801463] Bluetooth: hci3: command tx timeout [ 153.801916] Bluetooth: hci2: command tx timeout [ 153.802325] Bluetooth: hci1: command tx timeout [ 153.802790] Bluetooth: hci4: command tx timeout [ 153.866402] Bluetooth: hci5: command tx timeout [ 155.785513] Bluetooth: hci0: command tx timeout [ 155.850438] Bluetooth: hci3: command tx timeout [ 155.851301] Bluetooth: hci4: command tx timeout [ 155.852172] Bluetooth: hci1: command tx timeout [ 155.853024] Bluetooth: hci2: command tx timeout [ 155.913472] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 01:55:12 Registers: info registers vcpu 0 RAX=ffffffff86bcfe76 RBX=0000000000000002 RCX=ffffffff86bcfe76 RDX=0000000000000000 RSI=ffffffff86bcfe6a RDI=ffffffff8672a29c RBP=ffff88806ce090d8 RSP=ffff88806ce09010 R8 =ffffffff86bcfe6a R9 =ffff88806ce090c0 R10=000000000003ab7c R11=00000000000ba2d5 R12=ffff88806ce090e0 R13=ffff88806ce090c8 R14=ffff88806ce090c1 R15=ffff88806ce09080 RIP=ffffffff8134910a RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0002a9000 CR3=000000000d4a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095decc8 R8 =0000000000000000 R9 =ffffed100182f046 R10=00000000000fe503 R11=6f6c206863696877 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d2e66 R15=dffffc0000000000 RIP=ffffffff8283f125 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffa6108f38 CR3=000000000db5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000002210000726500716d2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055930c6af240000055930c6f5bb0 XMM06=000055930c6f4520ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000