Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:16411' (ECDSA) to the list of known hosts. 2025/01/28 21:20:49 fuzzer started 2025/01/28 21:20:49 dialing manager at localhost:40187 syzkaller login: [ 54.277132] cgroup: Unknown subsys name 'net' [ 54.377727] cgroup: Unknown subsys name 'cpuset' [ 54.406816] cgroup: Unknown subsys name 'rlimit' [ 71.944733] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 21:21:08 syscalls: 2217 2025/01/28 21:21:08 code coverage: enabled 2025/01/28 21:21:08 comparison tracing: enabled 2025/01/28 21:21:08 extra coverage: enabled 2025/01/28 21:21:08 setuid sandbox: enabled 2025/01/28 21:21:08 namespace sandbox: enabled 2025/01/28 21:21:08 Android sandbox: enabled 2025/01/28 21:21:08 fault injection: enabled 2025/01/28 21:21:08 leak checking: enabled 2025/01/28 21:21:08 net packet injection: enabled 2025/01/28 21:21:08 net device setup: enabled 2025/01/28 21:21:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 21:21:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 21:21:08 USB emulation: enabled 2025/01/28 21:21:08 hci packet injection: enabled 2025/01/28 21:21:08 wifi device emulation: enabled 2025/01/28 21:21:08 802.15.4 emulation: enabled 2025/01/28 21:21:08 fetching corpus: 50, signal 14537/16074 (executing program) 2025/01/28 21:21:08 fetching corpus: 100, signal 20383/23107 (executing program) 2025/01/28 21:21:08 fetching corpus: 150, signal 26645/30252 (executing program) 2025/01/28 21:21:08 fetching corpus: 200, signal 30834/35117 (executing program) 2025/01/28 21:21:08 fetching corpus: 250, signal 34698/39454 (executing program) 2025/01/28 21:21:08 fetching corpus: 300, signal 36693/42057 (executing program) 2025/01/28 21:21:08 fetching corpus: 350, signal 39470/45142 (executing program) 2025/01/28 21:21:08 fetching corpus: 400, signal 40045/46430 (executing program) 2025/01/28 21:21:09 fetching corpus: 450, signal 40937/47883 (executing program) 2025/01/28 21:21:09 fetching corpus: 500, signal 42148/49471 (executing program) 2025/01/28 21:21:09 fetching corpus: 550, signal 42970/50760 (executing program) 2025/01/28 21:21:09 fetching corpus: 600, signal 44036/52148 (executing program) 2025/01/28 21:21:09 fetching corpus: 650, signal 46321/54269 (executing program) 2025/01/28 21:21:09 fetching corpus: 700, signal 47027/55308 (executing program) 2025/01/28 21:21:09 fetching corpus: 750, signal 47728/56293 (executing program) 2025/01/28 21:21:09 fetching corpus: 800, signal 48349/57192 (executing program) 2025/01/28 21:21:09 fetching corpus: 850, signal 48727/57939 (executing program) 2025/01/28 21:21:09 fetching corpus: 900, signal 49007/58595 (executing program) 2025/01/28 21:21:10 fetching corpus: 950, signal 49927/59577 (executing program) 2025/01/28 21:21:10 fetching corpus: 1000, signal 50590/60339 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/60838 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/61318 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/61810 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/62235 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/62732 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/63221 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/63698 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/64165 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/64658 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/65112 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/65580 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/66096 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/66585 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/66772 (executing program) 2025/01/28 21:21:10 fetching corpus: 1008, signal 50615/66772 (executing program) 2025/01/28 21:21:14 starting 8 fuzzer processes 21:21:14 executing program 0: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0xffffffff00000001, 0x3}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8f}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_cache\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x7fff, 0x1, 0x2, 0xd4ebe0198e8da88f, 0x2, 0x4}, &(0x7f0000000200)=0x20) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x40000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0xd88, 0x7, 0x5, 0x0, 0x0, [{{r0}, 0x3}, {{r0}}, {{r1}, 0x7}, {{r0}, 0x7fffffff}, {{r0}, 0x2b}]}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)) ioctl$KDDISABIO(r0, 0x4b37) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000380)={0x1f, 0x0, 0x2, 0x7, 0x0, [0x6, 0x2, 0x80, 0x5]}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000400)=0x9) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000440)={0x0, 0x1, 0xdf7f, 0x1, 0x3f}) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000480)) r3 = accept$unix(r1, &(0x7f00000004c0), &(0x7f0000000540)=0x6e) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000005c0)={0x15400, 0x8, [0x6, 0x0, 0x9], &(0x7f0000000580)=[0x0]}) r4 = pidfd_getfd(r2, r1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) fcntl$setsig(r6, 0xa, 0x33) 21:21:14 executing program 1: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000080)={0x80000001, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000000c0)) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0)) r0 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="c9a455def46fb531b4c350894b94a1d85beeeefc0f074b35e7a8f5772cefe2737fd5aee0c9cfab1012e5766bb124286843dc2c394032a69bce297c955566637d", 0x40, 0x3562}, {&(0x7f00000002c0)="218812c946f95d4c698366e86086a4d8cb2e6a244924bd166e04ec7b28ac519cafc93367d845c06d68941f879786ca0658122f872e52d4eafa6774872379eb37fd23e740c0d648a3dc208dc963b4699ff8b2223535c50fdcaae17a162062", 0x5e, 0x100}, {&(0x7f0000000340)="8ac0ee533946b8c1c19c3c50a583ec8fc5e25eb85e291e12b19d37c3e7bb982872428acb755001468d4b80e04d5b948aea1382628884e646522cb02f6bd3c59d90a34a2abc15bf96d5ec40ebc7701feb82a6946f87f1d123d6eb34195d819037a226e07f1256eaa85704bef695bed26f0a23f48b90c4b1d31f93f84752adfd41c575bf14cd9110bfed9ee29880af0555e3696af0626f0dac79f3f1", 0x9b, 0x4}, {&(0x7f0000000400)="8f07d27063fc0f61982cd6b23772ee313277ba701383888286ff1763069edcc85e3dac507a74e772a06e26ea8d879c1bdb7fc0aeec0f28074f4d3a21867e8293b391d0754382d1ff32942426f2e5e03cc54cd74157eff1c4550dc76b11d9ea62ff6b0a164e7552", 0x67, 0x41}], 0x2918088, &(0x7f0000000500)={[{@cruft}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {}, {@map_normal}, {@mode={'mode', 0x3d, 0x3}}, {@unhide}, {@unhide}, {@dmode={'dmode', 0x3d, 0x10001}}, {@cruft}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'y\x00'}}]}) fcntl$setlease(r0, 0x400, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000600)={0x3, 0x28, '\x00', 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = dup(r0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x208040, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}, {@cache_mmap}, {@fscache}, {@dfltuid}, {@aname={'aname', 0x3d, 'dmode'}}], [{@appraise}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, 'cruft'}}, {@appraise}]}}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x404300, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000800)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000840)) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0), 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x81, 0x7f, 0x68, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x80, 0x40, 0x1, 0x1}}) accept(r2, &(0x7f00000009c0)=@hci, &(0x7f0000000a40)=0x80) r6 = openat2(r3, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x1, 0x9, 0xd}, 0x18) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 21:21:14 executing program 2: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000080)=0x14) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r0, 0x2f, 0x3, 0x3, 0xffffff44, 0x46, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x2, 0x50}}) fcntl$addseals(r1, 0x409, 0xe) getsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f00000002c0)=""/163, &(0x7f0000000380)=0xa3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f00000005c0)=""/71, 0x47}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40010000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6gre0\x00', r2, 0x2f, 0x2, 0x1f, 0x2, 0x2, @empty, @loopback, 0x700, 0x40, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'sit0\x00', r0, 0x2f, 0x1f, 0x80, 0xffffffff, 0x20, @empty, @private0, 0x80, 0x20, 0x0, 0xff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', r2, 0x2b, 0x1, 0xfd, 0xd7b4, 0x35, @mcast2, @mcast1, 0x20, 0x40, 0x9, 0x3}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000ac0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x80, 0x8000, 0xffffffff, 0x80000000, {{0x40, 0x4, 0x3, 0x19, 0x100, 0x67, 0x0, 0x6, 0x4, 0x0, @broadcast, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x8c, [@empty, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x3f, 0x0}, @loopback]}, @end, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0xb, [{@private=0xa010101, 0x1}, {@broadcast, 0x5}, {@broadcast, 0x1000}, {@multicast2, 0x4}]}, @cipso={0x86, 0x7a, 0x0, [{0x2, 0x7, "b9d43eb978"}, {0x2, 0x4, 'p2'}, {0x1, 0x9, "0f644c6a123cb1"}, {0x1, 0xe, "5397e3f3d5db3ab821e2ece5"}, {0x7, 0x10, "6ab334375b81989e4a847778d17a"}, {0x2, 0xf, "04f7b30e1bbbb4ac53531162f4"}, {0x1, 0x8, "806ac0223035"}, {0x5, 0xe, "67b5a7f730aeb93aed8edab6"}, {0x6, 0xf, "53f7a6c772f6786a3af718b5c0"}, {0x1, 0xe, "4e45d28950538e3952398506"}]}, @generic={0x82, 0xa, "d786a5ec0c374daa"}, @cipso={0x86, 0x18, 0x1, [{0x1, 0x12, "f1bdcd3907e1f0d4246f41fc7cdc251f"}]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0xa, [{@multicast1, 0x7}, {@local, 0x5}]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000d80)=0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000001000)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1e4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, r13, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa400}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xe0}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5ba8f2dd}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6f5c}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000008) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001240), r5) sendmsg$WG_CMD_GET_DEVICE(r14, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r15, 0x1, 0x70bd2c, 0x81, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}}, 0x20004000) 21:21:14 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/132, 0x84}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)}], 0x3, &(0x7f0000000180)=""/218, 0xda}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/155, 0x9b, 0x40002182, &(0x7f0000000380)=@x25, 0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)) r0 = syz_open_dev$vcsn(&(0x7f0000000440), 0xb3a, 0x100) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000100c}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x20, 0x1f}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x80, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x8, 0x1}}, 0x4010, 0x6, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x0, 0x0, {0x1, 0x5, 0x0, 0x1e8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x16, 0x2}}, [{0xdd, 0x34, "6d3434325bcd318c71f934655b5b121c9e4a1df209f4d08f3212edd8046d8c4518feeb8c55138f38cb279223511c2bb287f4f727"}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000680)) r3 = open_tree(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x80800) getsockopt$inet6_buf(r3, 0x29, 0xcc, &(0x7f0000000700)=""/14, &(0x7f0000000740)=0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000007c0)=0xfffffc01) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) r4 = syz_open_dev$hidraw(&(0x7f0000000800), 0x10001, 0x105d00) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000840)="75cca6ca2a7ea67629eba98a3bed76462fa54a3c8cefab0a7d3156896a0e5419c51d4c815063eb854c967fc034e4c96f5768bcf88f56ee4a80699f3740ca80d6915e976a98646b48d4fea6f03953390ac27131c4baa2a6372d8670442a20472f495527dc2cfe746a894e41d63660e380a85159d044f9ede04baf54ee97ef2fdcb506caf074c124becd9c42b13d7f6a5965c390953935df2bda2268cd838dee48e0f00124eb506841720762b8ddc45bd6bf4237ddc9aa5a015f6f36ab2aef1d88601bb9c28a5ac99e8932f7d2b86c9cbb206c280aecda6b4c30617ebb455548a10f3cfcefe703ca5a0149d3bc", 0xec}, {&(0x7f0000000940)}, {&(0x7f0000000980)="6e7258c05042c8a992e46d152a1e68abb99fd83270bf444677f8433e5571bf42f00c3123974e9afe5915edb3c906df61fbe389048d4d09c034922ce1036dabe2ad5300d1f9c47eb5aa44035736c6322122a007d0267fdabe251b7a", 0x5b}, {&(0x7f0000000a00)="e7aa0fad378a1a005f38324573269ca93874a753fe32feeaadd3327fa27d64cffd1dab43180612a5595219e8ba3fa8614d13a7c5c8486721147e0a221f236129101b61260391606edcbfa53782ccb27d473dc8fe227f4ede1766787b5dbc5916db04421d509dd85c399a86e9d4fdd14db7bd7fb2d8afee0dd16e8fff095578b5f253bb7f8290208db64100d411b90b50c58cf55b45fdb3570e725f77456d03d9c2bdd38e958ea9b0fde59e13bf3155860ed82ae6173aa327a602d4641f7cc0ae1fc483feaead6db4042214181a034e26243f81de", 0xd4}], 0x4) fcntl$lock(r0, 0x5, &(0x7f0000000b40)={0x0, 0x4, 0x5553, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000b80)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x44000, 0x0) fcntl$setflags(r5, 0x2, 0x0) 21:21:14 executing program 4: syslog(0x9, &(0x7f0000000000)=""/69, 0x45) syslog(0x0, &(0x7f0000000080)=""/180, 0xb4) syslog(0x9, &(0x7f0000000140)=""/37, 0x25) syslog(0x0, &(0x7f0000000180)=""/59, 0x3b) syslog(0xa, &(0x7f00000001c0)=""/76, 0x4c) syslog(0xa, &(0x7f0000000240)=""/62, 0x3e) syslog(0x9, &(0x7f0000000280)=""/62, 0x3e) syslog(0xa, &(0x7f00000002c0)=""/100, 0x64) syslog(0x9, &(0x7f0000000340)=""/139, 0x8b) syslog(0x4cb638cb, &(0x7f0000000400)=""/38, 0x26) syslog(0x1, 0x0, 0x0) syslog(0x0, &(0x7f0000000440)=""/111, 0x6f) syslog(0x3, &(0x7f00000004c0)=""/122, 0x7a) syslog(0x1, 0x0, 0x0) syslog(0x4, &(0x7f0000000540)=""/148, 0x94) syslog(0x0, &(0x7f0000000600)=""/228, 0xe4) syslog(0xa, &(0x7f0000000700)=""/20, 0x14) syslog(0xb, &(0x7f0000000740)=""/157, 0x9d) syslog(0x9, &(0x7f0000000800)=""/4096, 0x1000) syslog(0xa, &(0x7f0000001800)=""/43, 0x2b) [ 78.648094] audit: type=1400 audit(1738099274.539:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:21:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x38, 0x33, 0x37, 0x39, 0x30, 0x37, 0x62, 0x36, 0x63, 0x62, 0x33, 0x66, 0x36, 0x38, 0x61, 0x35]}, &(0x7f0000000080)={0x0, "99813c48b76ac89cf9121d38b43afeeb352c107a03f5fa8cec04b579df225e5abb52e106dbc11ecfe879b28fa603dee155f49531cb46b269cf598c04626643fa", 0x15}, 0x48, 0xfffffffffffffff9) keyctl$update(0x2, r0, &(0x7f0000000100)="f45121edbb06d4f608231217795505b6d801587f211d6dc326393831ebee358bbcab64d4f3d87b5aab8719efc6fdd454a9093d82f8c04c55cbc2f7e84bc0bc547d4d8e58160c1f121bdb16b1824e103fee7eff0dcc07c73abe8b4df691acec673386c40e4b477f86ba10b3b979d7d034e92c02980a69665bed4af1954734a57734a51f343a53b3dc4de0b04d4a3a264563b16276498180f70d598e685a67", 0x9e) r1 = add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="fb2fbd9d179b2468ec3e7d5e0f835763dd85cb0b2a42ce72762b4f856be28180f74036eedd08f5673520ee1b24bd5f3ba278c26606", 0x35, 0xffffffffffffffff) keyctl$reject(0x13, r1, 0x3ff, 0x1, r0) keyctl$search(0xa, r1, &(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x3}, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x36, 0x62, 0x61, 0x35, 0x39, 0x64, 0x37, 0x61, 0xc, 0x32, 0x66, 0x66, 0x34, 0x34, 0x35, 0x39]}, &(0x7f0000000380)={0x0, "949943fb1ae0c0f5b4169f465f95400228a5580e2e6f4ed4a52888626aef641dddfa397bf394b49cd2c499e1853e05ad5c6f9a75371dd0e9ab00cbffa0722bcf", 0x2e}, 0x48, 0xfffffffffffffffb) keyctl$reject(0x13, r2, 0x6, 0xffffffffffffffc0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={r0, 0x15, 0xa0}, 0x0, &(0x7f0000000440)="c52e346c4e4d4da56e12c40d9d1d08fb1a4f9a6992", &(0x7f0000000480)=""/160) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="5ed8cf43173f89f23391d54e001247192d9031adeffb7a665b8a7c56ec4e045c75ad0e652a172268d4c520d3053e7b625f2d70f610cff0c5d25211ea4d8045bca20e52c9b6976b0d28effad9d12a8b8775951c52ce0f8b8e5fc6cec050dabab1b7ed9729f08c86aed3b97169c34d265c3ff63e95d6841957d950e1a721d141185325aeea9ffad41c393f17d284636d98ce72ee17dbe4cadad423c87da3e20df20953e4dacf8e24fcd237949311eeac4836eef91c2ceef385ac2900", 0xbb, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000680)={r3, 0xa4, 0x1000}, 0x0, &(0x7f00000006c0)="8db964a90c6d26ea4c9712ea68a798eb4408e8fd1356b6bb17d774870d3aa69c09cdb29b61add0989ac73b983e3bb5476984d1c3282f55a24d46e073cced7129713c97dcb050b073f96a921049c63237377df80e2f0bc488949fcfd64ea7c52cddac98920180f369956aad13dfcd10ebeaf6224daaa23797ff55c3e745e0ae673746bdcdcec7ba470a3c9c6979024af44279fe71c4d40e0eb8d7d76ba5a2c80599eeb412", &(0x7f0000000780)=""/4096) keyctl$instantiate(0xc, r3, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r5 = add_key(&(0x7f0000001780)='syzkaller\x00', &(0x7f00000017c0)={'syz', 0x2}, &(0x7f0000001800)="d388b0213f57489b6df251874cb5a3fc23f7526771350c357f3e3df08902929afac588ee9c1363a85d86ebcaa1fc2fe10a1d831c831c768747820099b10c2655df4132a657ab4d76dbf1141e29b01d7594a0", 0x52, r4) keyctl$instantiate(0xc, r0, &(0x7f0000001900)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'logon\x00'}, 0x1f, r5) r6 = add_key$user(&(0x7f0000001940), &(0x7f0000001980)={'syz', 0x2}, &(0x7f00000019c0)="a1a2a2add33021a2eeb90b42226aea9f9b49f73593d40dc858864317891ed3ebaecc407aa3a215420bf9510313e15df54b0bae5730b560b7e3b75381f2911d8808fe1e68fa3ca1299171640d332aa59b61949734c0412dcbc1f7fa4148456234cc6b310399220f2000f104fbd650b8001355109d4115a466e74f1037866c2696fc5c9c8fb2310d8497eb126e20f362a27875f3926833e9ee370d2a5a086db2bb635f906130e607aacac5651f1ee5680950174e63e123f937409c828e94", 0xbd, r5) keyctl$instantiate_iov(0x14, r6, &(0x7f0000001d80)=[{&(0x7f0000001a80)="94a85dd9a74bbb2c645b897fa88cf498ad322c714f5e07158f74c4d364b59308289e43fbc6dba928d6c44d4c5a9a3622212a74cf2c89c5046d3dfa339eccc7845825683d2f3fb7d73db0", 0x4a}, {&(0x7f0000001b00)="ad8c4fffbe6942e893c7f7a4034556645b7e21a4da43eeeab07463dcd4abdf96305ebaecb792078ca9b0eb2aa7e66d5c28c95028f27bf58f373afaa25acc274ebe9c8ae80a043d527e5c9be1323d45e8e4333b985dd141c1747f7ce02ddb9a3cc722b6aeefd73facc1032d6499a5579191aaaa0f14fb2fdd4772561cb849063fc74a3063487e30f21d872aa9604643bb4cb03d268aa0862ca5fdb02bb9d42364703e9fdf81366a08e7247e57be63db0c1bf906ecd2ca14898a1332c55f6dc44f45d4fbd347e90dd6fa1e43", 0xcb}, {&(0x7f0000001c00)="e1c843fae7e9357fe2154b81ff67f6e6fae09a35d2461927468d60d56eb0c46061af03f7bc0deccc71fe0d94e2878ac017a926134a84f2d67563851ff90ae408d19c42887d641ee81a5f5d28679f3e29e417e821afccd12e308037a26ed6530b7d98156f7c3cb29038f1c189c8e98c0e1ea1ce9242702e32c2903a86f79b44fc79fa7edf3f79a1164660bc69fb372b2973d9bdf1fb931ea0e9cae0", 0x9b}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="3ddfdc64c2a840da538e1ef9787047fd8846f1618dc6687d216e65fb5e1ad6b1017c6973c2d4ac8c641dc2238c3ef87b03fd797bff1e85e2cf7108317d97ebd7bd877f5e9fd0853241589f2592acce011c22c060ee", 0x55}], 0x5, 0x0) add_key(&(0x7f0000001e00)='.request_key_auth\x00', &(0x7f0000001e40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001e80)={r2, 0xe8, 0x4}, &(0x7f0000001ec0)={'enc=', 'oaep', ' hash=', {'blake2b-256\x00'}}, &(0x7f0000001f40)="1ef75fdaea82fe3d62c687482ac6a2df9c0b7f476572c8dfbfc713c343d2fd2ffcaa6e5b0557df2b86b97bfda58970a8f2e2cb7ec01fb283549464b05e91da36b0908f37786773b7dc64128d9aaaf14a4d10cdf40c2a5f783324a06618ce3791a7b082bcc2b7c6f705e4bfadea6853ea67d86b62024712c4a8c193c72687cddffde3e3feda27b40dff7d828ecf57de95d6d60d8b9a3f43233fd68c04869c9ac81b55afcc83047a49a05fdea3265196195309bbf7b45c6908552b4224709d07517ec711fe0ac0b9a456c983e05f363811d9d05f46564eeee85e5831289fdf3e2e4e760f32f3458604", &(0x7f0000002040)=""/4) r7 = request_key(&(0x7f0000002180)='.dead\x00', &(0x7f00000021c0)={'syz', 0x3}, &(0x7f0000002200)='\'\x00', r4) add_key$user(&(0x7f0000002080), &(0x7f00000020c0)={'syz', 0x1}, &(0x7f0000002100)="0d4ccc6278283cc4c1b2b6a110ee4c75b5f505210394357afa395373bf7e8b7fe7332af737eaebb868668161d375872f89f1209d23a220df3cd9e901c7bef8e5198aa48bf47ecb43", 0x48, r7) 21:21:14 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000010}, 0x84) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x25}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5f}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x20}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xb947]}, 0x8, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r2, 0x502, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x7a}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x22, 0x0, @random="40f2f9f1778d33b505c6316f85d0a9eadee2250eebc784f2351c414a943b"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4ee}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="9eb30c70fe4ef148738842"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) recvmmsg$unix(r1, &(0x7f0000003400)=[{{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c40)=""/136, 0x88}, {&(0x7f0000002d00)=""/105, 0x69}, {&(0x7f0000002d80)=""/169, 0xa9}], 0x3}}, {{&(0x7f0000002e80), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002f00)=""/29, 0x1d}], 0x1, &(0x7f0000002f80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003240)=[{&(0x7f0000003180)=""/60, 0x3c}, {&(0x7f00000031c0)=""/113, 0x71}], 0x2, &(0x7f0000003280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003340), 0x0, &(0x7f0000003380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x4, 0x40000100, &(0x7f0000003500)={0x0, 0x989680}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003580), r1) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000003680)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x4c, r10, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x33}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x10000001) r11 = syz_open_dev$vcsa(&(0x7f00000037c0), 0x400, 0x282800) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000003800)={0x3f, 0x3, 0x7, 0x1000, 0x8}) r12 = dup3(r8, r5, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r12, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x30aa, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0), r7) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x4c, r13, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x29}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x24000004) bind$unix(0xffffffffffffffff, &(0x7f0000003b00)=@file={0x1, './file0\x00'}, 0x6e) poll(&(0x7f0000003bc0)=[{r8, 0x5048}, {0xffffffffffffffff, 0x20}, {r9, 0x4220}, {0xffffffffffffffff, 0x40}, {r4, 0x1208}], 0x5, 0x1) 21:21:14 executing program 7: ptrace$getregset(0x4204, 0xffffffffffffffff, 0x3, &(0x7f0000000080)={&(0x7f0000000000)=""/91, 0x5b}) process_vm_readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/72, 0x48}], 0x2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/79, 0x4f}], 0x1, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/232, 0xe8}, {&(0x7f0000000540)=""/175, 0xaf}], 0x4) preadv2(r0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/133, 0x85}, {&(0x7f00000007c0)=""/188, 0xbc}, {&(0x7f0000000880)=""/174, 0xae}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/92, 0x5c}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x7, 0x8, 0xdf5f, 0x10) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) tee(r0, r0, 0x1, 0x8) r1 = openat$cgroup_subtree(r0, &(0x7f0000001b40), 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/226, 0xe2}], 0x2, &(0x7f0000002100)=[{&(0x7f0000001d80)=""/72, 0x48}, {&(0x7f0000001e00)=""/18, 0x12}, {&(0x7f0000001e40)=""/60, 0x3c}, {&(0x7f0000001e80)=""/60, 0x3c}, {&(0x7f0000001ec0)=""/99, 0x63}, {&(0x7f0000001f40)=""/190, 0xbe}, {&(0x7f0000002000)=""/128, 0x80}, {&(0x7f0000002080)=""/73, 0x49}], 0x8, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x204001, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000021c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sync_file_range(r2, 0xe00000, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000002400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002440), 0x10001, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002480), 0xd00, 0x0) r6 = fcntl$dupfd(r4, 0x406, r5) preadv2(r6, &(0x7f00000025c0)=[{&(0x7f00000024c0)=""/58, 0x3a}, {&(0x7f0000002500)=""/160, 0xa0}], 0x2, 0x6, 0x81, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000004b80), 0x102800, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x20, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) [ 80.072219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.073489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.076039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.079144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.083522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.086713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.088650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.090636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.091938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.120645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.125621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.128655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.186011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.191881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.194134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.210633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.214603] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.225604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.286856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.294831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.306593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.334657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.345304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.348269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.386154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.409512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.422068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.426783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.430465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.436546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.440539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.446102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.456465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.456737] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.459035] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.469576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.472574] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.474921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.509050] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.518433] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.520050] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.524340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.557740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.594887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.596197] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.622643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.651913] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 80.662578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.156885] Bluetooth: hci0: command tx timeout [ 82.158427] Bluetooth: hci1: command tx timeout [ 82.284364] Bluetooth: hci2: command tx timeout [ 82.413598] Bluetooth: hci3: command tx timeout [ 82.605395] Bluetooth: hci4: command tx timeout [ 82.668313] Bluetooth: hci5: command tx timeout [ 82.733419] Bluetooth: hci7: command tx timeout [ 82.797305] Bluetooth: hci6: command tx timeout [ 84.204306] Bluetooth: hci1: command tx timeout [ 84.204797] Bluetooth: hci0: command tx timeout [ 84.334322] Bluetooth: hci2: command tx timeout [ 84.460419] Bluetooth: hci3: command tx timeout [ 84.652390] Bluetooth: hci4: command tx timeout [ 84.717533] Bluetooth: hci5: command tx timeout [ 84.780508] Bluetooth: hci7: command tx timeout [ 84.844367] Bluetooth: hci6: command tx timeout [ 86.252368] Bluetooth: hci0: command tx timeout [ 86.254281] Bluetooth: hci1: command tx timeout [ 86.382189] Bluetooth: hci2: command tx timeout [ 86.508409] Bluetooth: hci3: command tx timeout [ 86.700450] Bluetooth: hci4: command tx timeout [ 86.765531] Bluetooth: hci5: command tx timeout [ 86.829309] Bluetooth: hci7: command tx timeout [ 86.892686] Bluetooth: hci6: command tx timeout [ 88.301318] Bluetooth: hci1: command tx timeout [ 88.301666] Bluetooth: hci0: command tx timeout [ 88.428348] Bluetooth: hci2: command tx timeout [ 88.556696] Bluetooth: hci3: command tx timeout [ 88.748359] Bluetooth: hci4: command tx timeout [ 88.812473] Bluetooth: hci5: command tx timeout [ 88.876379] Bluetooth: hci7: command tx timeout [ 88.942447] Bluetooth: hci6: command tx timeout [ 141.380594] [ 141.380966] ====================================================== [ 141.381938] WARNING: possible circular locking dependency detected [ 141.382892] 6.13.0-next-20250128 #1 Not tainted [ 141.383609] ------------------------------------------------------ [ 141.386002] kworker/u8:0/11 is trying to acquire lock: [ 141.388008] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.391577] [ 141.391577] but task is already holding lock: [ 141.393064] ffff888039b18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 141.394546] [ 141.394546] which lock already depends on the new lock. [ 141.394546] [ 141.395736] [ 141.395736] the existing dependency chain (in reverse order) is: [ 141.396819] [ 141.396819] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 141.397834] __mutex_lock+0x13d/0xb50 [ 141.398553] wiphy_register+0x1b2e/0x25d0 [ 141.399339] ieee80211_register_hw+0x23a4/0x3d60 [ 141.400164] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 141.401056] init_mac80211_hwsim+0x389/0x870 [ 141.401875] do_one_initcall+0xf9/0x640 [ 141.402618] kernel_init_freeable+0x53d/0x7a0 [ 141.403451] kernel_init+0x1e/0x2d0 [ 141.404117] ret_from_fork+0x48/0x80 [ 141.404785] ret_from_fork_asm+0x1a/0x30 [ 141.405549] [ 141.405549] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 141.406482] __lock_acquire+0x29fd/0x4580 [ 141.407259] lock_acquire+0x19b/0x520 [ 141.407967] __mutex_lock+0x13d/0xb50 [ 141.408683] unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.409641] unregister_netdevice_queue+0x224/0x2e0 [ 141.410507] _cfg80211_unregister_wdev+0x57b/0x700 [ 141.411387] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 141.412245] ieee80211_unregister_hw+0x55/0x3a0 [ 141.413076] hwsim_exit_net+0x3a0/0x730 [ 141.413815] ops_exit_list+0xb3/0x180 [ 141.414508] cleanup_net+0x546/0xad0 [ 141.415198] process_one_work+0x8ee/0x1a10 [ 141.416002] worker_thread+0x674/0xe70 [ 141.416739] kthread+0x3ab/0x720 [ 141.417390] ret_from_fork+0x48/0x80 [ 141.418057] ret_from_fork_asm+0x1a/0x30 [ 141.418822] [ 141.418822] other info that might help us debug this: [ 141.418822] [ 141.419956] Possible unsafe locking scenario: [ 141.419956] [ 141.420821] CPU0 CPU1 [ 141.421529] ---- ---- [ 141.422232] lock(&rdev->wiphy.mtx); [ 141.422874] lock(rtnl_mutex); [ 141.423796] lock(&rdev->wiphy.mtx); [ 141.424769] lock(rtnl_mutex); [ 141.425343] [ 141.425343] *** DEADLOCK *** [ 141.425343] [ 141.426241] 4 locks held by kworker/u8:0/11: [ 141.426936] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 141.428539] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 141.430053] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 141.431497] #3: ffff888039b18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 141.433097] [ 141.433097] stack backtrace: [ 141.433796] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250128 #1 [ 141.433864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 141.433902] Workqueue: netns cleanup_net [ 141.433974] Call Trace: [ 141.433990] [ 141.434010] dump_stack_lvl+0xca/0x120 [ 141.434111] print_circular_bug+0x47b/0x750 [ 141.434191] check_noncircular+0x2e9/0x3c0 [ 141.434266] ? __pfx_check_noncircular+0x10/0x10 [ 141.434339] ? hlock_class+0x4e/0x130 [ 141.434392] ? mark_lock+0xac/0xed0 [ 141.434464] ? __pfx___resched_curr+0x10/0x10 [ 141.434546] ? lockdep_lock+0xba/0x1b0 [ 141.434647] ? __pfx_lockdep_lock+0x10/0x10 [ 141.434757] __lock_acquire+0x29fd/0x4580 [ 141.434851] ? __pfx___lock_acquire+0x10/0x10 [ 141.434927] ? lock_release+0x20f/0x6f0 [ 141.435005] ? __pfx_lock_release+0x10/0x10 [ 141.435090] lock_acquire+0x19b/0x520 [ 141.435166] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.435265] ? __pfx_lock_acquire+0x10/0x10 [ 141.435348] ? srso_return_thunk+0x5/0x5f [ 141.435447] ? lock_release+0x20f/0x6f0 [ 141.435524] ? srso_return_thunk+0x5/0x5f [ 141.435622] ? lock_is_held_type+0x9e/0x120 [ 141.435719] ? srso_return_thunk+0x5/0x5f [ 141.435823] __mutex_lock+0x13d/0xb50 [ 141.435916] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.435996] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.436077] ? srso_return_thunk+0x5/0x5f [ 141.436176] ? synchronize_rcu_expedited+0x38a/0x420 [ 141.436252] ? __pfx___mutex_lock+0x10/0x10 [ 141.436352] ? __pfx_autoremove_wake_function+0x10/0x10 [ 141.436447] ? srso_return_thunk+0x5/0x5f [ 141.436546] ? kasan_quarantine_put+0x84/0x1e0 [ 141.436652] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 141.436713] ? srso_return_thunk+0x5/0x5f [ 141.436819] unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.436899] ? __virt_addr_valid+0x2e8/0x5d0 [ 141.436992] ? __pfx_lock_release+0x10/0x10 [ 141.437071] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 141.437152] ? find_held_lock+0x2c/0x110 [ 141.437255] ? srso_return_thunk+0x5/0x5f [ 141.437357] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 141.437463] ? srso_return_thunk+0x5/0x5f [ 141.437561] ? lock_release+0x20f/0x6f0 [ 141.437639] ? __pfx_lock_release+0x10/0x10 [ 141.437715] ? srso_return_thunk+0x5/0x5f [ 141.437813] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 141.437897] ? srso_return_thunk+0x5/0x5f [ 141.438004] unregister_netdevice_queue+0x224/0x2e0 [ 141.438081] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 141.438158] ? up_write+0x195/0x520 [ 141.438255] _cfg80211_unregister_wdev+0x57b/0x700 [ 141.438350] ? srso_return_thunk+0x5/0x5f [ 141.438453] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 141.438521] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 141.438589] ? srso_return_thunk+0x5/0x5f [ 141.438686] ? srso_return_thunk+0x5/0x5f [ 141.438783] ? synchronize_rcu+0x1ff/0x260 [ 141.438858] ieee80211_unregister_hw+0x55/0x3a0 [ 141.438936] hwsim_exit_net+0x3a0/0x730 [ 141.439009] ? __pfx_hwsim_exit_net+0x10/0x10 [ 141.439080] ? srso_return_thunk+0x5/0x5f [ 141.439177] ? netdev_run_todo+0x788/0x1040 [ 141.439273] ? __pfx_hwsim_exit_net+0x10/0x10 [ 141.439350] ops_exit_list+0xb3/0x180 [ 141.439426] cleanup_net+0x546/0xad0 [ 141.439505] ? __pfx_cleanup_net+0x10/0x10 [ 141.439598] process_one_work+0x8ee/0x1a10 [ 141.439713] ? __pfx_lock_acquire+0x10/0x10 [ 141.439791] ? __pfx_process_one_work+0x10/0x10 [ 141.439893] ? srso_return_thunk+0x5/0x5f [ 141.439990] ? move_linked_works+0x172/0x270 [ 141.440067] ? srso_return_thunk+0x5/0x5f [ 141.440164] ? assign_work+0x196/0x240 [ 141.440265] worker_thread+0x674/0xe70 [ 141.440366] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 141.440458] ? __pfx_worker_thread+0x10/0x10 [ 141.440562] kthread+0x3ab/0x720 [ 141.440652] ? __pfx_kthread+0x10/0x10 [ 141.440743] ? srso_return_thunk+0x5/0x5f [ 141.440840] ? finish_task_switch.isra.0+0x206/0x840 [ 141.440928] ? __pfx_kthread+0x10/0x10 [ 141.441022] ret_from_fork+0x48/0x80 [ 141.441076] ? __pfx_kthread+0x10/0x10 [ 141.441168] ret_from_fork_asm+0x1a/0x30 [ 141.441284] [ 143.486021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.489051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.494061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.500276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.505301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.510836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.553091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.555755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.558558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.568909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.571941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.573614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.614707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.618514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.620100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.623018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.626530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.632129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.637526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.641623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.643477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.647703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.659554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.665328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.680834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.687895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.726137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.734545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.737086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.739601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.831500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.840062] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.852833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.854713] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.887115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.898522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.899877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.917854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.924478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.929806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.941037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.953446] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.961604] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.962389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.970130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.978450] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.002536] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.027567] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.581429] Bluetooth: hci0: command tx timeout [ 145.644315] Bluetooth: hci1: command tx timeout [ 145.708448] Bluetooth: hci2: command tx timeout [ 145.709319] Bluetooth: hci3: command tx timeout [ 145.773298] Bluetooth: hci4: command tx timeout [ 146.028484] Bluetooth: hci5: command tx timeout [ 146.092415] Bluetooth: hci6: command tx timeout [ 146.156336] Bluetooth: hci7: command tx timeout [ 147.628466] Bluetooth: hci0: command tx timeout [ 147.693268] Bluetooth: hci1: command tx timeout [ 147.756301] Bluetooth: hci3: command tx timeout [ 147.756844] Bluetooth: hci2: command tx timeout [ 147.820261] Bluetooth: hci4: command tx timeout [ 148.076300] Bluetooth: hci5: command tx timeout [ 148.140293] Bluetooth: hci6: command tx timeout [ 148.204480] Bluetooth: hci7: command tx timeout [ 149.676260] Bluetooth: hci0: command tx timeout [ 149.740321] Bluetooth: hci1: command tx timeout [ 149.804284] Bluetooth: hci2: command tx timeout [ 149.804706] Bluetooth: hci3: command tx timeout [ 149.868264] Bluetooth: hci4: command tx timeout [ 150.124255] Bluetooth: hci5: command tx timeout [ 150.188262] Bluetooth: hci6: command tx timeout [ 150.252286] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:22:17 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800b619bc0 RCX=ffffffff81429a4f RDX=1ffff110016c3445 RSI=ffffffff81429a58 RDI=ffff88800b61a228 RBP=0000000000200000 RSP=ffff88800f4afdb8 R8 =0000000000000000 R9 =ffffed10016cc180 R10=0000000000200000 R11=00000000f5257d14 R12=ffff88807cf08ff9 R13=ffffffff88652bc8 R14=ffff88800b619bc0 R15=0000000000000086 RIP=ffffffff81429a74 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000305108 CR3=000000000cc04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=357717e8bef58c98824ead9eaa762dca XMM02=00000000000fd9b8a3797342f9eb3dd9 XMM03=000000000013376868a8aee3740b9fad XMM04=9bf896c57559e8f100000000000ae988 XMM05=9f165a4fe6c971ad0000000000137938 XMM06=faa99365e44538a00000000000137898 XMM07=f2f4e8d45e5ba9c900000000001337c0 XMM08=68a8aee3740b9fad00000000000fdad8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed100176e046 R10=0000000000000039 R11=3a6b636f6c206762 R12=0000000000000039 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6923074040 CR3=00000000193a4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000b4c040000000c000887740 XMM02=000000c0008f628000000000008e84e0 XMM03=000000c0008d80000000000000000400 XMM04=00000000000000080000000000b12868 XMM05=000000c0008f628000000000008e84e0 XMM06=00000000000003f0000000c0008d6000 XMM07=000000c0008d80000000000000000400 XMM08=000000000000040000000000000003f0 XMM09=000000000000000000000000000f5925 XMM10=000000c0008876c000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=000000c00069c840000000c000b8bd80 XMM14=000000c00075c480000000c00069c900 XMM15=000000c000aa4780000000c00075c580