Warning: Permanently added '[localhost]:28851' (ECDSA) to the list of known hosts. 2025/01/28 07:23:09 fuzzer started 2025/01/28 07:23:09 dialing manager at localhost:40883 syzkaller login: [ 67.979428] cgroup: Unknown subsys name 'net' [ 68.090638] cgroup: Unknown subsys name 'cpuset' [ 68.128386] cgroup: Unknown subsys name 'rlimit' [ 72.584018] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 07:23:27 syscalls: 203 2025/01/28 07:23:27 code coverage: enabled 2025/01/28 07:23:27 comparison tracing: enabled 2025/01/28 07:23:27 extra coverage: enabled 2025/01/28 07:23:27 setuid sandbox: enabled 2025/01/28 07:23:27 namespace sandbox: enabled 2025/01/28 07:23:27 Android sandbox: enabled 2025/01/28 07:23:27 fault injection: enabled 2025/01/28 07:23:27 leak checking: enabled 2025/01/28 07:23:27 net packet injection: enabled 2025/01/28 07:23:27 net device setup: enabled 2025/01/28 07:23:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 07:23:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 07:23:27 USB emulation: enabled 2025/01/28 07:23:27 hci packet injection: enabled 2025/01/28 07:23:27 wifi device emulation: enabled 2025/01/28 07:23:27 802.15.4 emulation: enabled 2025/01/28 07:23:27 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 07:23:29 starting 8 fuzzer processes 07:23:29 executing program 0: openat$ptmx(0xffffffffffffff9c, 0xfffffffffffffffe, 0x80000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x3f, 0x0, 0x8, 0x40f9c49e}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x32, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4008004) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20040099) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000480)) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000005c0)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xac}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x59}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x10) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000740)) socketpair(0x0, 0x6, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0xc0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004005) 07:23:29 executing program 1: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x3) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/245, 0xf5) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x80) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x40010, r1, 0x7fff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x9}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RELDISP(r2, 0x5605) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r5 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x9, 0x20, 0x7, 0x1, 0x0, 0x10001, 0x82020, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x12400, 0x1, 0x3f, 0x1, 0x100000000, 0x37, 0x3, 0x0, 0x3, 0x0, 0xd3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r5, 0x7) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 07:23:29 executing program 3: r0 = socket(0x1d, 0x800, 0x20000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) socketpair(0x28, 0x0, 0x9b, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x81, 0x31}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xd}, 0x84) r6 = socket(0x8, 0x5, 0x3) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x2d}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24080) sched_rr_get_interval(0x0, &(0x7f0000000440)) socketpair(0x22, 0xa, 0x7fff, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x8, 0x484, 0x18, @private1, @mcast2, 0x8, 0x700, 0x80000001, 0xd24}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r10, 0x8, 0x8, 0xdab4, 0x1000, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x68, 0x0, 0x8, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @noop, @end, @end, @rr={0x7, 0x17, 0x48, [@loopback, @loopback, @broadcast, @local, @broadcast]}, @lsrr={0x83, 0x17, 0x23, [@broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @private=0xa010100, @multicast1]}, @end]}}}}}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5df6fb818fc1"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004005) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a80)={r11, 0x0, 0xffffffffffffffff, 0xffffffff}) [ 87.290151] audit: type=1400 audit(1738049009.462:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:23:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/72, 0x48}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/94, 0x5e}], 0x4, &(0x7f0000000380)=""/163, 0xa3}, 0x1}], 0x1, 0x12040, &(0x7f0000000480)) read$usbmon(0xffffffffffffffff, &(0x7f00000004c0)=""/78, 0x4e) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000540)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000600), 0x200, 0x3050c0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000740)={&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000680)=""/130, 0x82}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000780)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r2, &(0x7f00000007c0), 0x0, 0x200, &(0x7f0000000800)={0x0, 0x989680}) r3 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x4, 0x1, 0x9, 0x20, 0x0, 0x8, 0x30, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x64e6b4c2, 0x7}, 0x2000, 0x5, 0x20000, 0x7, 0x8, 0x3ff, 0xffff, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000008c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000f00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000940)={0x57c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x550, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "feb19953c570b4d6ab1eda7d88999c2358e5b9dde680621168ad8433a220e27a"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @loopback, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x40, @private0, 0x20}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10000000, @private1, 0x6e}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x57c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = syz_open_dev$usbmon(&(0x7f0000000f40), 0xfffffffffffffffc, 0x10800) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000f80), &(0x7f0000000fc0)=""/92, 0x5c}) pipe(&(0x7f0000001080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5e}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4841}, 0x50) 07:23:29 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x4, 0xff, 0x9, 0x0, 0x966a, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xdae2, 0x7}, 0x41, 0x9, 0x7, 0x4, 0x2, 0x9, 0x81, 0x0, 0x6, 0x0, 0xff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x42041, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x1, 0x3f, 0x9, 0x0, 0x100000001, 0x48, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2222, 0x4, @perf_config_ext={0xfff, 0x1}, 0x20, 0x1, 0x10001, 0x0, 0x4, 0x3, 0x200, 0x0, 0x3, 0x0, 0x5}, r1, 0x4, r2, 0xc) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9b, 0xde, 0x1, 0x95, 0x0, 0x300, 0x4008, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x81, 0x8000}, 0x20004, 0x3, 0x5, 0x7, 0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r0, 0x2) r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x8, 0x7f, 0x6, 0x0, 0x0, 0xc1e, 0x1208, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x2001, 0x9, 0x1, 0x5, 0x80000001, 0x7fff, 0x7f, 0x0, 0x5, 0x0, 0x7fff}, r2, 0x10, r4, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) prctl$PR_SET_FP_MODE(0x2d, 0x3) recvmmsg(r2, &(0x7f0000005280)=[{{&(0x7f0000000300)=@ethernet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x101}, {{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/202, 0xca}], 0x8}, 0x5}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)=""/238, 0xee}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002c00)=@tipc=@id, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/189, 0xbd}], 0x1, &(0x7f0000002d80)=""/236, 0xec}, 0x8}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000002e80)=""/20, 0x14}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/49, 0x31}, {&(0x7f0000004f00)=""/197, 0xc5}, {&(0x7f0000005000)=""/243, 0xf3}], 0x6, &(0x7f0000005180)=""/238, 0xee}, 0x6}], 0x5, 0x60, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000005400)={0x0, 0x80, 0x1f, 0x1f, 0x16, 0x7, 0x0, 0x94, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f00000053c0)}, 0x2, 0x8, 0x1, 0x3, 0x3ff, 0x8, 0xbab, 0x0, 0x1, 0x0, 0x1200000000000}, r6, 0xb, r5, 0x1f) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r7) pipe(&(0x7f00000054c0)={0xffffffffffffffff}) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000005500)) r9 = msgget$private(0x0, 0x48) msgctl$IPC_SET(r9, 0x1, &(0x7f0000005540)={{0x3, 0xee01, 0xee01, 0x0, 0x0, 0x24}, 0x0, 0x0, 0x10000, 0x2, 0x7, 0x0, 0x3f, 0x3ff, 0x6}) 07:23:29 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x428000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x0, 0x81, 0x8, 0x2, 0x3, "97dff8af322358556b12840842d4766d0c3d19"}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) ioctl$VT_RELDISP(r1, 0x5605) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x13, 0x2a, [@challenge={0x10, 0x1, 0x7e}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @chsw_timing={0x68, 0x4, {0x1, 0x2e}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0xdf, 0x2a, [@preq={0x82, 0x72, @not_ext={{0x1, 0x1}, 0x96, 0x8, 0x7, @device_b, 0x800, "", 0x7f, 0x81, 0x8, [{{0x1}, @device_b, 0x5c}, {{}, @broadcast, 0x5}, {{}, @broadcast, 0xde42}, {{0x1, 0x0, 0x1}, @device_b, 0x8000}, {{0x1}, @broadcast, 0xfffffa0a}, {{0x0, 0x0, 0x1}, @device_b, 0x10001}, {{0x0, 0x0, 0x1}, @device_a, 0x40}, {{}, @device_a, 0x3}]}}, @chsw_timing={0x68, 0x4, {0x7, 0xffe1}}, @random={0x3f, 0x5f, "6b22da90d3ca4b51ee1f7fb8e37801001b4beebc9a0cc4ebf14fb00058aac88e64552a357cebc86799ff271e9904517719d5cb06128e5be9bab20d94d79d400b6ad99003bfd9ba90059c285907e69235bd13ae5ce6bcd77356355470fb5248"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}]}, 0x12c}}, 0x4000015) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000002c0)) r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0xffff, 0x400000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xd39fd) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2800000, 0x40010, r3, 0x543d) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000340)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x501000, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f00000003c0)=""/228) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000004c0)=0x9) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8144}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000640)={0x0, 0x7, 0xcd}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000680)) 07:23:29 executing program 6: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = geteuid() r1 = geteuid() r2 = getegid() r3 = getpid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x3, r1, 0xee00, r0, r2, 0xa0, 0x1}, 0x0, 0x0, 0x3, 0x15, 0x2, 0xf8, 0x13, 0x1ff, 0x7ff, 0x100, 0xffffffffffffffff, r3}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) syz_extract_tcp_res(&(0x7f0000000140), 0x1, 0x3ff) mq_unlink(&(0x7f0000000180)='/^&#@\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/2, 0x2}], 0x1, &(0x7f00000002c0)=""/87, 0x57}, 0x1f}, {{&(0x7f0000000340)=@nl, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/75, 0x4b}, {&(0x7f00000006c0)=""/133, 0x85}], 0x7}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000880)=""/11, 0xb}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001900)=@nl=@proc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/126, 0x7e}, {&(0x7f0000001a00)=""/175, 0xaf}, {&(0x7f0000001ac0)=""/213, 0xd5}], 0x3, &(0x7f0000001c00)=""/172, 0xac}, 0x101}], 0x4, 0x40000001, &(0x7f0000001dc0)={0x77359400}) syz_extract_tcp_res(&(0x7f0000001e00), 0x108, 0x4) syz_extract_tcp_res$synack(&(0x7f0000001e40), 0x1, 0x0) mq_unlink(&(0x7f0000001e80)='\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20048000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'wpan0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x4000010) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4010) 07:23:29 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000044) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x178, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xff, @mcast1, 0x7ff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x70b5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b274181f6c009fbd94d9b19437594800ce5bd053e5b7e3c19ae1bce8caf535fb"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20041005) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x11c, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {0x21}, [@INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "e8f81a7786b8343e7ff59c456f4ce322b8b494f1d53abc01867b4c0301ac0a19aa113bcd8e65863fec6e188cdc165063fd6788bba4f357e9a8ba492794d26e7165cc26d9f15ab47cbb72a16613f8edf356618eae9bc979722f2ede13fa142a897a1696eea43be48e106707"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "c543ca21340ea4c2b5dd04059b5c8cc875018ad7a13b25558e306a0ffd2e7bd42790e734d17834123d357ad9f39a5dd5ec15"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "0bf7c219b4d85372db649bd4b4b7bec0e00d8077b4d9ace7738347c0010e1a0dccc9e575d3a706afb255763af72a6ab3579f1eff9b963de5ef3e4a7029b3ca16a0db18680e023b9bf31f320a39c6a68e22a1a80778b07fe464440652"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x20000045) getrlimit(0xf, &(0x7f0000000940)) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x18002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001100)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c40)={0x460, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3df86b48446da6270976af75723a50268b0c82375b0d24d89c6b4ac4fd76c591"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3b0, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88492002cefe69f0defd4c191eda1674e126fceb0316a08e75790312505e25b7"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @local}}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "86107357c59af47cbb3eddb9a76b32a338697bb31eb8c3b6f41126350295a09b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f286ff3dc66334fd80fa2d36b5b86e20703ea952c7dd813d8cc17e2bb44195d4"}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x853}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @private2, 0xc1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff9c50, 0x3}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket(0x1a, 0x3, 0x81) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) [ 88.613207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.615741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.617398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.621270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.624078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.626699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.868790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.872834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.874365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.876381] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.883999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.885401] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.890043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.893464] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.895340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.899947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.926832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.933293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.939672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.952383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.954451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.958921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.967806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.983990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.001732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.002852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.005250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.007954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.012125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.015245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.016950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.021843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.024844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.026447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.032769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.034392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.043347] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.045143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.051172] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.056899] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.058761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.060729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.063905] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.072845] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.081099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.084325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.116965] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.135924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.641764] Bluetooth: hci0: command tx timeout [ 90.961604] Bluetooth: hci1: command tx timeout [ 91.025863] Bluetooth: hci2: command tx timeout [ 91.090541] Bluetooth: hci4: command tx timeout [ 91.154579] Bluetooth: hci6: command tx timeout [ 91.155241] Bluetooth: hci7: command tx timeout [ 91.156194] Bluetooth: hci3: command tx timeout [ 91.156771] Bluetooth: hci5: command tx timeout [ 92.692588] Bluetooth: hci0: command tx timeout [ 93.009725] Bluetooth: hci1: command tx timeout [ 93.073926] Bluetooth: hci2: command tx timeout [ 93.137958] Bluetooth: hci4: command tx timeout [ 93.202644] Bluetooth: hci6: command tx timeout [ 93.203465] Bluetooth: hci5: command tx timeout [ 93.205186] Bluetooth: hci3: command tx timeout [ 93.206035] Bluetooth: hci7: command tx timeout [ 94.737955] Bluetooth: hci0: command tx timeout [ 95.059599] Bluetooth: hci1: command tx timeout [ 95.121600] Bluetooth: hci2: command tx timeout [ 95.185599] Bluetooth: hci4: command tx timeout [ 95.250710] Bluetooth: hci6: command tx timeout [ 95.251158] Bluetooth: hci5: command tx timeout [ 95.251876] Bluetooth: hci3: command tx timeout [ 95.251945] Bluetooth: hci7: command tx timeout [ 96.787522] Bluetooth: hci0: command tx timeout [ 97.105603] Bluetooth: hci1: command tx timeout [ 97.170591] Bluetooth: hci2: command tx timeout [ 97.236539] Bluetooth: hci4: command tx timeout [ 97.297664] Bluetooth: hci5: command tx timeout [ 97.298133] Bluetooth: hci7: command tx timeout [ 97.298647] Bluetooth: hci3: command tx timeout [ 97.299080] Bluetooth: hci6: command tx timeout [ 145.544107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.544993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.882789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.883455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.571988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.572775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.860965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.862250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.978033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.979792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.194010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.194699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.569083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.569769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.221394] [ 148.221670] ====================================================== [ 148.222316] WARNING: possible circular locking dependency detected [ 148.222980] 6.13.0-next-20250124 #1 Not tainted [ 148.223459] ------------------------------------------------------ [ 148.224727] kworker/u8:2/3766 is trying to acquire lock: [ 148.225798] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.227679] [ 148.227679] but task is already holding lock: [ 148.228794] ffff888015bf0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 148.230972] [ 148.230972] which lock already depends on the new lock. [ 148.230972] [ 148.232377] [ 148.232377] the existing dependency chain (in reverse order) is: [ 148.233728] [ 148.233728] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 148.234946] __mutex_lock+0x13d/0xb50 [ 148.235868] wiphy_register+0x1b2e/0x25d0 [ 148.236411] ieee80211_register_hw+0x23a4/0x3d60 [ 148.237000] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 148.237619] init_mac80211_hwsim+0x389/0x870 [ 148.238191] do_one_initcall+0xf9/0x640 [ 148.238743] kernel_init_freeable+0x53d/0x7a0 [ 148.239326] kernel_init+0x1e/0x2d0 [ 148.239797] ret_from_fork+0x48/0x80 [ 148.240271] ret_from_fork_asm+0x1a/0x30 [ 148.240811] [ 148.240811] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 148.241454] __lock_acquire+0x29fd/0x4580 [ 148.241951] lock_acquire+0x19b/0x520 [ 148.242413] __mutex_lock+0x13d/0xb50 [ 148.242904] unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.243538] unregister_netdevice_queue+0x224/0x2e0 [ 148.244104] _cfg80211_unregister_wdev+0x57b/0x700 [ 148.244681] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 148.245249] ieee80211_unregister_hw+0x55/0x3a0 [ 148.245798] hwsim_exit_net+0x3a0/0x730 [ 148.246274] ops_exit_list+0xb3/0x180 [ 148.246758] cleanup_net+0x546/0xad0 [ 148.247212] process_one_work+0x8ee/0x1a10 [ 148.247744] worker_thread+0x674/0xe70 [ 148.248232] kthread+0x3ab/0x720 [ 148.248672] ret_from_fork+0x48/0x80 [ 148.249109] ret_from_fork_asm+0x1a/0x30 [ 148.249610] [ 148.249610] other info that might help us debug this: [ 148.249610] [ 148.250406] Possible unsafe locking scenario: [ 148.250406] [ 148.251004] CPU0 CPU1 [ 148.251456] ---- ---- [ 148.251912] lock(&rdev->wiphy.mtx); [ 148.252316] lock(rtnl_mutex); [ 148.252897] lock(&rdev->wiphy.mtx); [ 148.253524] lock(rtnl_mutex); [ 148.253889] [ 148.253889] *** DEADLOCK *** [ 148.253889] [ 148.254506] 4 locks held by kworker/u8:2/3766: [ 148.254975] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 148.256011] #1: ffff888033c37d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 148.257005] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 148.257932] #3: ffff888015bf0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 148.258987] [ 148.258987] stack backtrace: [ 148.259454] CPU: 1 UID: 0 PID: 3766 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250124 #1 [ 148.259500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.259528] Workqueue: netns cleanup_net [ 148.259578] Call Trace: [ 148.259590] [ 148.259604] dump_stack_lvl+0xca/0x120 [ 148.259676] print_circular_bug+0x47b/0x750 [ 148.259734] check_noncircular+0x2e9/0x3c0 [ 148.259787] ? __pfx_check_noncircular+0x10/0x10 [ 148.259839] ? hlock_class+0x4e/0x130 [ 148.259877] ? mark_lock+0xac/0xed0 [ 148.259927] ? srso_return_thunk+0x5/0x5f [ 148.259996] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 148.260053] ? lockdep_lock+0xba/0x1b0 [ 148.260124] ? __pfx_lockdep_lock+0x10/0x10 [ 148.260202] __lock_acquire+0x29fd/0x4580 [ 148.260270] ? __pfx___lock_acquire+0x10/0x10 [ 148.260324] ? lock_release+0x20f/0x6f0 [ 148.260379] ? __pfx_lock_release+0x10/0x10 [ 148.260439] lock_acquire+0x19b/0x520 [ 148.260493] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.260554] ? __pfx_lock_acquire+0x10/0x10 [ 148.260609] ? srso_return_thunk+0x5/0x5f [ 148.260678] ? lock_release+0x20f/0x6f0 [ 148.260733] ? srso_return_thunk+0x5/0x5f [ 148.260803] ? lock_is_held_type+0x9e/0x120 [ 148.260874] ? srso_return_thunk+0x5/0x5f [ 148.260948] __mutex_lock+0x13d/0xb50 [ 148.261013] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.261069] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.261127] ? srso_return_thunk+0x5/0x5f [ 148.261196] ? synchronize_rcu_expedited+0x38a/0x420 [ 148.261251] ? __pfx___mutex_lock+0x10/0x10 [ 148.261318] ? __pfx_autoremove_wake_function+0x10/0x10 [ 148.261385] ? srso_return_thunk+0x5/0x5f [ 148.261454] ? kasan_quarantine_put+0x84/0x1e0 [ 148.261530] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 148.261573] ? srso_return_thunk+0x5/0x5f [ 148.261648] unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.261705] ? __virt_addr_valid+0x2e8/0x5d0 [ 148.261771] ? __pfx_lock_release+0x10/0x10 [ 148.261827] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 148.261884] ? find_held_lock+0x2c/0x110 [ 148.261957] ? srso_return_thunk+0x5/0x5f [ 148.262028] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 148.262106] ? srso_return_thunk+0x5/0x5f [ 148.262175] ? lock_release+0x20f/0x6f0 [ 148.262230] ? __pfx_lock_release+0x10/0x10 [ 148.262284] ? srso_return_thunk+0x5/0x5f [ 148.262352] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 148.262412] ? srso_return_thunk+0x5/0x5f [ 148.262501] unregister_netdevice_queue+0x224/0x2e0 [ 148.262556] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 148.262611] ? up_write+0x195/0x520 [ 148.262679] _cfg80211_unregister_wdev+0x57b/0x700 [ 148.262745] ? srso_return_thunk+0x5/0x5f [ 148.262818] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 148.262866] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 148.262915] ? srso_return_thunk+0x5/0x5f [ 148.262983] ? srso_return_thunk+0x5/0x5f [ 148.263052] ? synchronize_rcu+0x1ff/0x260 [ 148.263105] ieee80211_unregister_hw+0x55/0x3a0 [ 148.263162] hwsim_exit_net+0x3a0/0x730 [ 148.263214] ? __pfx_hwsim_exit_net+0x10/0x10 [ 148.263265] ? srso_return_thunk+0x5/0x5f [ 148.263334] ? netdev_run_todo+0x788/0x1040 [ 148.263395] ? __pfx_hwsim_exit_net+0x10/0x10 [ 148.263449] ops_exit_list+0xb3/0x180 [ 148.263502] cleanup_net+0x546/0xad0 [ 148.263558] ? __pfx_cleanup_net+0x10/0x10 [ 148.263625] process_one_work+0x8ee/0x1a10 [ 148.263707] ? __pfx_lock_acquire+0x10/0x10 [ 148.263762] ? __pfx_process_one_work+0x10/0x10 [ 148.263835] ? srso_return_thunk+0x5/0x5f [ 148.263904] ? move_linked_works+0x172/0x270 [ 148.263960] ? srso_return_thunk+0x5/0x5f [ 148.264029] ? assign_work+0x196/0x240 [ 148.264100] worker_thread+0x674/0xe70 [ 148.264173] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 148.264238] ? srso_return_thunk+0x5/0x5f [ 148.264306] ? __pfx_worker_thread+0x10/0x10 [ 148.264381] kthread+0x3ab/0x720 [ 148.264446] ? __pfx_kthread+0x10/0x10 [ 148.264511] ? srso_return_thunk+0x5/0x5f [ 148.264579] ? finish_task_switch.isra.0+0x206/0x840 [ 148.264643] ? __pfx_kthread+0x10/0x10 [ 148.264710] ret_from_fork+0x48/0x80 [ 148.264750] ? __pfx_kthread+0x10/0x10 [ 148.264816] ret_from_fork_asm+0x1a/0x30 [ 148.264899] [ 150.935136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.941354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.963124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.978916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.980198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.982701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.984740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.987870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.988609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.988996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.990247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.993273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.993279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.998087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.999600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.001229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.002706] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.004330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.007097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.008396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.009785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.011159] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.018959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.020860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.022631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.024234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.028160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.031974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.033182] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.033445] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.033930] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.034959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.035646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.042787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.043811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.045395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.057160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.058282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.060098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.066975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.078812] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.094786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.097930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.100044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.117760] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.133665] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.168624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.180924] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.041594] Bluetooth: hci2: command tx timeout [ 153.105726] Bluetooth: hci5: command tx timeout [ 153.106554] Bluetooth: hci0: command tx timeout [ 153.107339] Bluetooth: hci1: command tx timeout [ 153.108191] Bluetooth: hci6: command tx timeout [ 153.108994] Bluetooth: hci4: command tx timeout [ 153.169550] Bluetooth: hci3: command tx timeout [ 153.233815] Bluetooth: hci7: command tx timeout [ 155.089778] Bluetooth: hci2: command tx timeout [ 155.153734] Bluetooth: hci6: command tx timeout [ 155.154152] Bluetooth: hci4: command tx timeout [ 155.154178] Bluetooth: hci0: command tx timeout [ 155.154724] Bluetooth: hci1: command tx timeout [ 155.155012] Bluetooth: hci5: command tx timeout [ 155.218564] Bluetooth: hci3: command tx timeout [ 155.283527] Bluetooth: hci7: command tx timeout [ 157.137589] Bluetooth: hci2: command tx timeout [ 157.202623] Bluetooth: hci0: command tx timeout [ 157.203073] Bluetooth: hci5: command tx timeout [ 157.204022] Bluetooth: hci6: command tx timeout [ 157.204425] Bluetooth: hci1: command tx timeout [ 157.204892] Bluetooth: hci4: command tx timeout [ 157.267521] Bluetooth: hci3: command tx timeout [ 157.331558] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:24:30 Registers: info registers vcpu 0 RAX=00000000019474a0 RBX=0000000000000001 RCX=0000000000040000 RDX=00000000014fc940 RSI=0000000000019408 RDI=0000000000000001 RBP=000000c00058be10 RSP=000000c00058bde8 R8 =00000000019474a0 R9 =000000000000003a R10=0000000001f21248 R11=000000000000005e R12=0000000000000003 R13=000000c00037c780 R14=0000000000000070 R15=0000000000000100 RIP=0000000000414764 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030b10 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005823010 CR3=000000001ac94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd0000000000000 XMM02=682e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=00000000000000003fd3333333333333 XMM05=6578650a00736465657320636578650a XMM06=6567206365786508006c61746f742063 XMM07=78650e007a7a7566206365786509006e XMM08=650b00737472617473657220726f7475 XMM09=636578650a0065676169727420636578 XMM10=65657320636578650a0073746e696820 XMM11=08006c61746f7420636578650a007364 XMM12=66206365786509006e65672063657865 XMM13=6469646e616320636578650e007a7a75 XMM14=696d696e696d20636578650d00657461 XMM15=00006873616d7320636578650a00657a info registers vcpu 1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff888033c36ca0 R8 =0000000000000000 R9 =ffffed1001d69046 R10=000000000000002e R11=5f20202020202020 R12=000000000000002e R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e16b1ef298 CR3=000000001ac94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415bbb7800000000 XMM03=45535f435049246c746367736d0a2938 XMM04=5f746e6576655f66726570203d203072 XMM05=2c317830202c3972285445535f435049 XMM06=34353530303030303066377830282620 XMM07=313065657830202c3378307b7b3d2930 XMM08=30202c307830202c313065657830202c XMM09=202c307830202c7d34327830202c3078 XMM10=7830202c30303030317830202c307830 XMM11=337830202c307830202c377830202c32 XMM12=0a297d367830202c6666337830202c66 XMM13=317830202c307830202c387830202c61 XMM14=2c307830202c317830202c317830202c XMM15=202c317830202c307830202c31783020