Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:4291' (ECDSA) to the list of known hosts. 2025/01/30 07:41:32 fuzzer started 2025/01/30 07:41:32 dialing manager at localhost:36977 syzkaller login: [ 69.646160] cgroup: Unknown subsys name 'net' [ 69.790062] cgroup: Unknown subsys name 'cpuset' [ 69.828950] cgroup: Unknown subsys name 'rlimit' 2025/01/30 07:41:50 syscalls: 2217 2025/01/30 07:41:50 code coverage: enabled 2025/01/30 07:41:50 comparison tracing: enabled 2025/01/30 07:41:50 extra coverage: enabled 2025/01/30 07:41:50 setuid sandbox: enabled 2025/01/30 07:41:50 namespace sandbox: enabled 2025/01/30 07:41:50 Android sandbox: enabled 2025/01/30 07:41:50 fault injection: enabled 2025/01/30 07:41:50 leak checking: enabled 2025/01/30 07:41:50 net packet injection: enabled 2025/01/30 07:41:50 net device setup: enabled 2025/01/30 07:41:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 07:41:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 07:41:50 USB emulation: enabled 2025/01/30 07:41:50 hci packet injection: enabled 2025/01/30 07:41:50 wifi device emulation: enabled 2025/01/30 07:41:50 802.15.4 emulation: enabled 2025/01/30 07:41:50 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/30 07:41:50 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/30 07:41:50 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/30 07:41:50 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/30 07:41:50 fetching corpus: 0, signal 0/8878 (executing program) 2025/01/30 07:41:50 fetching corpus: 0, signal 0/8878 (executing program) 2025/01/30 07:41:53 starting 8 fuzzer processes 07:41:53 executing program 0: sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf001}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x221, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0xe300c05d5179270b, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040004) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000700)={0x2, 'sit0\x00', {0x80000000}, 0x40}) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8e9428dadf82a6bf}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x24001095) socketpair(0xb, 0x2, 0x101, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x4e24, 0x0, 0x4e24, 0x88b, 0x2, 0x3c5f5797225d9bb5, 0x20, 0x16, 0x0, 0xee00}, {0x44, 0x7, 0x2, 0x8, 0x2, 0x84, 0x2, 0x5}, {0xfffffffffffffff8, 0xffffffffffffffe0, 0x1000000000000, 0xffff}, 0x1, 0x6e6bb3, 0x2, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d4, 0xff}, 0xa, @in=@rand_addr=0x64010102, 0x3504, 0x1, 0x0, 0x0, 0x4, 0x7, 0x9}}, 0xe8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1ff}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4058801}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r7) 07:41:53 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0x10f, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mq_timedsend(r0, &(0x7f00000019c0)="d274efa7c6e46e97f703b551551ac8e50cd0ee8278b56c98e72bcece92f4929df5e7f395f5bfd760c759d854a03068d0c00ac1e7c2571e64099c7b882b4e3bf137f57dcac362341752023c5ad846bb46947147f1d4016ce8d9a68f7ebf7c1d3092582d737bf3e5f87e8eb9f1089117", 0x6f, 0x12, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001a40), 0x800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa8fa, 0x12}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000001bc0)='.pending_reads\x00', 0xc01, 0x82) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x100) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000001c00)) r4 = fork() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001c40)=0x0) setpgid(r4, r5) r6 = syz_open_dev$mouse(&(0x7f0000001c80), 0x3f, 0x20101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001cc0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000001ec0)={{0x1, 0x40}, 'port0\x00', 0x80, 0x418, 0x6a, 0x80000000, 0x6, 0x7, 0x81, 0x0, 0x5, 0x1}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000001f80)={'filter\x00', 0x4}, 0x68) r7 = socket$inet(0x2, 0x8, 0x20) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000002000)) r8 = openat(r6, &(0x7f0000002040)='./file0\x00', 0x240002, 0x4) flock(r8, 0x2) 07:41:53 executing program 2: connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000040)={{0x6, 0x4}, 0x100, './file0\x00'}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000180)={{0xcf}, {0xf8, 0xcc}, 0x18, 0x6, 0xff}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x604003, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x4, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40851) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000340)={'syzkaller0\x00', {0x2, 0x0, @local}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001b00), 0x40, 0x0) connect$inet(r2, &(0x7f0000001b40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r3 = openat$incfs(r2, &(0x7f0000001b80)='.log\x00', 0x104083, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "28a21621ef3713ca9d1e76c93b41f32b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "10bd12435d86f42bd52082bcd24d774e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "384b5a2eda1c749697e96f66f15dd111"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x17}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7ff}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x98}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4611261685"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2b1f2bd1c9"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40005) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000001ec0)) bind$bt_hci(r0, &(0x7f0000001f00), 0x6) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001f80), r3) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x30, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 07:41:53 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x20, 0x101840) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x6, 0x0, [0x3f, 0x1ff, 0x101, 0x7], &(0x7f0000000240)}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x2a, 0x1f3, 0x80000000, {0xc4e1, 0x400}, 0x1000, 0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0a4}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xc6}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x2, 0x8, 0x301, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xe8b5f16b955a689}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001) arch_prctl$ARCH_GET_CPUID(0x1011) r5 = pidfd_getfd(r0, r3, 0x0) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000840)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000880)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x0, 0x2, 0x3, 0x401, 0xf8c6}, &(0x7f00000008c0)=0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000900)=[0x7, 0x80000001]) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x45000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000980)={{0xfc, 0x8}, {0x7f, 0xf6}, 0x71, 0x3, 0x5}) 07:41:53 executing program 4: ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000000)={@lba=0x1f, 0x0, 0x3}) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0xfffffffffffffff8) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) r1 = fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000100)=0xb47f) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x200142, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='{^,$-:]\x00', 0x0, r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x411, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x7, 0x3, 0x0, 0x10000}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000081) r4 = syz_open_procfs(r1, &(0x7f00000002c0)='map_files\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x75}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4c, 0x7}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48044}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff0001, 0x64}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2da}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048801}, 0x4000015) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000006c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x11c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3692}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 07:41:53 executing program 5: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000100)={'trans=virtio,', {[{@cache_none}, {@debug}, {@uname={'uname', 0x3d, '+^{'}}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ')h)(+'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) r1 = dup(0xffffffffffffffff) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x49, 0x29, 0x2, {0x9, [{{0x4a, 0x1, 0x1}, 0x9, 0xc, 0x7, './file0'}, {{0x40, 0x2, 0x8}, 0x800, 0x0, 0x7, './file0'}]}}, 0x49) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cgroup_type(r2, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = syz_open_dev$usbmon(&(0x7f0000000380), 0x4, 0x10000) write$binfmt_elf64(r7, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x5, 0x81, 0x4, 0x0, 0x3d, 0x1a, 0x17f, 0x40, 0x294, 0x3, 0x4, 0x38, 0x1, 0x1, 0xffff, 0x8}, [{0x2, 0xfffffffd, 0x200, 0x200, 0x8, 0x1, 0x76, 0x200}], "b980f4a2b55f0066a864b2d4b3376a271a544d73f023b11d2d7f32e45cdcdc78bfb20d9850df9e005a735491116c5c582545af7aa2d4b3ca2be2a588c87ac5f65278185ddc41a1340ec834cbf2398bfe860d153e79b47bbc4eeaa6fcca7c19dd655a86086c491638c7528395cc690ad81d71ef39fe2b00afaa75e80967528f0acf171a3b92dd09fa9fe677972cfb19f6b0310646a0e10e7574aada45cd56f3fa7bbb727ec21928b699ab6e3292980f3e7af9f5b841ab52a672c0e5ac68cc0a4d38", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x839) fcntl$setstatus(r1, 0x4, 0x40800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendto$packet(r3, &(0x7f0000000d00)="1b76063d622d81483c3a527dd3fd973e963789dd69b3d88f4e9cf04efcdad28469a69b3d3eec896389fb8d94f2bf11a534ce609a6d8c477b890b57b0eca74a53c678fdb4971232bd162f016070cef8575799338149f8db5120a4eab615e71889696937e1526d786e5aba99e1697b1674c39fd404adfc32c526863b834e263910b8db2af0ae0c471efb071f9d2858675389ade1a7a168eb51fa961b979d49eace5d766155844c3a396683849a788765857e76925012329b189c46c4fb09b27220026ddee795ebf817b89942a0a96bdd8d", 0xd0, 0x8000, &(0x7f0000000e00)={0x11, 0x1c, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x7c, r8, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0x76}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xdd}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_IE={0x38, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @challenge={0x10, 0x1, 0x75}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @challenge={0x10, 0x1, 0xea}, @supported_rates={0x1, 0x5, [{0x36}, {0x4, 0x1}, {0x1b}, {0x3, 0x1}, {0xd9a9ed59180b90f0}]}, @sec_chan_ofs={0x3e, 0x1}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0x2}}, @gcr_ga={0xbd, 0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x4004840) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d6}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0xc020) [ 90.300437] audit: type=1400 audit(1738222913.677:7): avc: denied { execmem } for pid=282 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:41:53 executing program 6: setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)="7281af20871bf47c701167b2e2fd0978d5a7191b7c9763c1496a86b695ea65bd796800e75ecc17e7164faf15104731e3cff234c73d6a89db7a5ed9d23b73e18d723144ec98c82409cd31d5c3484202ed985c7a07691408fec56e84d559d17d36f626994bd2f0a745ac860ed42d16c531d959adb5b3649ea917233efc53cdd989bbcbd42d58097d41234db1870c9e665df09862dfb08da8a1343a40511d2b7325655dfefaca737af6ef792b9e0d1ddef7a71a49fe2093f32400c9b55528e1a0cd9d3267c0043f93ff412a4503bddac68c6725bdab59c02df0c95f5f176f8c09d580f7a38eac023628da5f2c9396327817400dd83b040afec6", 0xf8, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) quotactl(0x8, &(0x7f00000001c0)='./file0\x00', 0xee00, &(0x7f0000000200)="0ac17a5e1609d1eb35d74fffe7ed89ea8011ae0d9cf79007482cffd78a044df6b44535f84d6408eefed3ce243fed7180acf436c231f7021abdc5d5e6eab231aafe887529d450f83d4c6a00c3f87fccadb7f0c1a0c603a3e3fc74d73ad7e237b81ffac3047fcef20e16b119da90e478fb674c7f0fbde830c024935128edcd0472a842e5beb4d45fec0515cafa8e5ee9d30a7526c56bd753") lsetxattr$trusted_overlay_nlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'L-', 0x7fffffff}, 0x16, 0x3) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) r0 = socket(0xf, 0x2, 0x4) mknod(&(0x7f00000003c0)='./file0\x00', 0x8000, 0x101) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setxattr$incfs_metadata(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)="4ee037e61fb7d15ab9bea96a952b49ddc17044dce8281f58a742d12c44087317fb08e1795b7cec874e2dd5eab6f8543b1cea09efed1f466836f4567f6958845e103b80073df6ea", 0x47, 0x3) truncate(&(0x7f0000000540)='./file0\x00', 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'team_slave_0\x00', &(0x7f0000000580)=@ethtool_cmd={0x47, 0xfff, 0x6, 0x7f, 0x7f, 0x1f, 0x4, 0x20, 0x95, 0x0, 0xe7d8, 0x6, 0xaa, 0x1, 0x5, 0x1, [0x4, 0xc1d]}}) mknodat$null(r1, &(0x7f0000000600)='./file0/file1\x00', 0x0, 0x103) quotactl(0x4678e76d, &(0x7f0000000640)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000680)="39b2a116e398acf4c0c277f90c6e2be6b24e2d960bd8b462fd9d9137cf0c81ea004c39a6aef7a772298d51515c4c566ccc53233cee04da0f613f5f66807ed53743cec76a26aa510b370a71eda6bcf0a855da32579e66b65b21d1a30b12e60e774d0a802a845f2604a8c40d8f92bf449626388d636d5a949e6c22b19ec49f65598c9db7a39c01045c2a32c12cb6c1806d38d5ab5c32d7adc341780a60498d14a5") open_tree(r1, &(0x7f0000000740)='./file0/file1\x00', 0x80000) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bbf459c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e62ee70}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64a1082}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2526ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c7eff9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f0d6148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cc721fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf35d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77efd1f4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x5000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000ac0)={0x40, 0x1, 0x3}) 07:41:53 executing program 7: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) ioctl$FIOCLEX(r0, 0x5451) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x12}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = dup2(r0, r0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000140)=0x2) r3 = pidfd_getfd(r1, r0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@cache_mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x31, 0x38, 0x30, 0x39, 0x62, 0x63], 0x2d, [0x39, 0x66, 0x30, 0x63], 0x2d, [0x39, 0x35, 0x64, 0x34], 0x2d, [0x66, 0x61, 0x39, 0x5b], 0x2d, [0x0, 0x9, 0x30, 0x66, 0x58, 0x66, 0x36, 0x34]}}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ']'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_type}]}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) fsetxattr$security_ima(r1, &(0x7f0000000380), &(0x7f00000003c0)=@sha1={0x1, "e0b393ef4451d4764ffda453a550bd2f0643914d"}, 0x15, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000400)={0x6, 0x6, 0xfffffffd, 0x0, 0x5, 0x3}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x91) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x118, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x63}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x4040) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000840)=""/16) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000e80)) [ 91.606484] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.612209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.617103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.625090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.631139] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.635032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.679325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.684960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.687850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.693277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.695295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.697194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.697968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.699209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.700178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.706098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.709867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.712092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.733832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.748941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.760344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.764792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.765985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.769740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.770726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.774789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.775021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.776089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.784916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.785404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.803724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.803814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.806102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.807498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.808165] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.810480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.811851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.815435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.817420] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.817448] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.819658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.826145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.827255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.829107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.830439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.836270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.838988] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.840252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.689001] Bluetooth: hci0: command tx timeout [ 93.752764] Bluetooth: hci1: command tx timeout [ 93.753069] Bluetooth: hci2: command tx timeout [ 93.817311] Bluetooth: hci3: command tx timeout [ 93.880648] Bluetooth: hci5: command tx timeout [ 93.880936] Bluetooth: hci6: command tx timeout [ 93.881493] Bluetooth: hci7: command tx timeout [ 93.944759] Bluetooth: hci4: command tx timeout [ 95.738619] Bluetooth: hci0: command tx timeout [ 95.800650] Bluetooth: hci2: command tx timeout [ 95.801114] Bluetooth: hci1: command tx timeout [ 95.864687] Bluetooth: hci3: command tx timeout [ 95.928871] Bluetooth: hci7: command tx timeout [ 95.928930] Bluetooth: hci6: command tx timeout [ 95.929749] Bluetooth: hci5: command tx timeout [ 95.992779] Bluetooth: hci4: command tx timeout [ 97.784794] Bluetooth: hci0: command tx timeout [ 97.848707] Bluetooth: hci1: command tx timeout [ 97.849183] Bluetooth: hci2: command tx timeout [ 97.913683] Bluetooth: hci3: command tx timeout [ 97.976681] Bluetooth: hci7: command tx timeout [ 97.977149] Bluetooth: hci6: command tx timeout [ 97.977721] Bluetooth: hci5: command tx timeout [ 98.040651] Bluetooth: hci4: command tx timeout [ 99.833027] Bluetooth: hci0: command tx timeout [ 99.896711] Bluetooth: hci1: command tx timeout [ 99.897504] Bluetooth: hci2: command tx timeout [ 99.960741] Bluetooth: hci3: command tx timeout [ 100.025146] Bluetooth: hci5: command tx timeout [ 100.027380] Bluetooth: hci6: command tx timeout [ 100.027694] Bluetooth: hci7: command tx timeout [ 100.090717] Bluetooth: hci4: command tx timeout [ 155.045408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.048922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.051026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.055497] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.058277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.060267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.077509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.085266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.089872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.101043] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.107109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.111044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.145993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.148904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.150242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.160649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.165376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.167639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.228787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.233240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.235861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.246658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.248801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.250614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.263983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.270877] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.272400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.291531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.299264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.311892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.372477] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.385715] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.404127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.420468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.426346] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.431922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.527202] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.551860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.554519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.556647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.563441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.569359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.577958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.585660] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.592744] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.606804] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.607865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.613834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.112763] Bluetooth: hci0: command tx timeout [ 157.176716] Bluetooth: hci1: command tx timeout [ 157.240832] Bluetooth: hci2: command tx timeout [ 157.368790] Bluetooth: hci3: command tx timeout [ 157.432806] Bluetooth: hci4: command tx timeout [ 157.560724] Bluetooth: hci6: command tx timeout [ 157.688705] Bluetooth: hci7: command tx timeout [ 157.689617] Bluetooth: hci5: command tx timeout [ 159.160789] Bluetooth: hci0: command tx timeout [ 159.224730] Bluetooth: hci1: command tx timeout [ 159.289001] Bluetooth: hci2: command tx timeout [ 159.416697] Bluetooth: hci3: command tx timeout [ 159.480684] Bluetooth: hci4: command tx timeout [ 159.608679] Bluetooth: hci6: command tx timeout [ 159.736636] Bluetooth: hci5: command tx timeout [ 159.739601] Bluetooth: hci7: command tx timeout [ 161.208667] Bluetooth: hci0: command tx timeout [ 161.272635] Bluetooth: hci1: command tx timeout [ 161.336621] Bluetooth: hci2: command tx timeout [ 161.464848] Bluetooth: hci3: command tx timeout [ 161.528687] Bluetooth: hci4: command tx timeout [ 161.658752] Bluetooth: hci6: command tx timeout [ 161.785248] Bluetooth: hci7: command tx timeout [ 161.785878] Bluetooth: hci5: command tx timeout [ 163.258780] Bluetooth: hci0: command tx timeout [ 163.320626] Bluetooth: hci1: command tx timeout [ 163.384777] Bluetooth: hci2: command tx timeout [ 163.512833] Bluetooth: hci3: command tx timeout [ 163.576734] Bluetooth: hci4: command tx timeout [ 163.704709] Bluetooth: hci6: command tx timeout [ 163.832641] Bluetooth: hci5: command tx timeout [ 163.833136] Bluetooth: hci7: command tx timeout [ 213.408159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.408920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.665150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.665843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.520889] [ 215.521326] ====================================================== [ 215.522572] WARNING: possible circular locking dependency detected [ 215.523815] 6.13.0-next-20250129 #1 Not tainted [ 215.529706] ------------------------------------------------------ [ 215.530968] kworker/u8:1/66 is trying to acquire lock: [ 215.532036] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.534145] [ 215.534145] but task is already holding lock: [ 215.535335] ffff888037ac8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.537358] [ 215.537358] which lock already depends on the new lock. [ 215.537358] [ 215.538970] [ 215.538970] the existing dependency chain (in reverse order) is: [ 215.540437] [ 215.540437] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 215.541801] __mutex_lock+0x13d/0xb50 [ 215.542811] wiphy_register+0x1b2e/0x25d0 [ 215.543844] ieee80211_register_hw+0x23a4/0x3d60 [ 215.544973] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 215.546177] init_mac80211_hwsim+0x389/0x870 [ 215.547296] do_one_initcall+0xf9/0x640 [ 215.548331] kernel_init_freeable+0x53d/0x7a0 [ 215.549427] kernel_init+0x1e/0x2d0 [ 215.550319] ret_from_fork+0x48/0x80 [ 215.551243] ret_from_fork_asm+0x1a/0x30 [ 215.552286] [ 215.552286] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 215.553575] __lock_acquire+0x29fd/0x4580 [ 215.554601] lock_acquire+0x19b/0x520 [ 215.555568] __mutex_lock+0x13d/0xb50 [ 215.556548] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.557857] unregister_netdevice_queue+0x224/0x2e0 [ 215.559039] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.560227] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.561391] ieee80211_unregister_hw+0x55/0x3a0 [ 215.562495] hwsim_exit_net+0x3a0/0x730 [ 215.563506] ops_exit_list+0xb3/0x180 [ 215.564482] cleanup_net+0x546/0xad0 [ 215.565464] process_one_work+0x8ee/0x1a10 [ 215.566566] worker_thread+0x674/0xe70 [ 215.567597] kthread+0x3ab/0x720 [ 215.568502] ret_from_fork+0x48/0x80 [ 215.569420] ret_from_fork_asm+0x1a/0x30 [ 215.570448] [ 215.570448] other info that might help us debug this: [ 215.570448] [ 215.572054] Possible unsafe locking scenario: [ 215.572054] [ 215.573272] CPU0 CPU1 [ 215.574245] ---- ---- [ 215.575120] lock(&rdev->wiphy.mtx); [ 215.575890] lock(rtnl_mutex); [ 215.577113] lock(&rdev->wiphy.mtx); [ 215.578453] lock(rtnl_mutex); [ 215.579224] [ 215.579224] *** DEADLOCK *** [ 215.579224] [ 215.580419] 4 locks held by kworker/u8:1/66: [ 215.581351] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 215.583498] #1: ffff88800eca7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 215.585570] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 215.587492] #3: ffff888037ac8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.589649] [ 215.589649] stack backtrace: [ 215.590565] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250129 #1 [ 215.590659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 215.590713] Workqueue: netns cleanup_net [ 215.590829] Call Trace: [ 215.590853] [ 215.590882] dump_stack_lvl+0xca/0x120 [ 215.591020] print_circular_bug+0x47b/0x750 [ 215.591138] check_noncircular+0x2e9/0x3c0 [ 215.591240] ? srso_return_thunk+0x5/0x5f [ 215.591373] ? __pfx_check_noncircular+0x10/0x10 [ 215.591476] ? hlock_class+0x4e/0x130 [ 215.591553] ? mark_lock+0xac/0xed0 [ 215.591656] ? __pfx___resched_curr+0x10/0x10 [ 215.591773] ? lockdep_lock+0xba/0x1b0 [ 215.591916] ? __pfx_lockdep_lock+0x10/0x10 [ 215.592074] __lock_acquire+0x29fd/0x4580 [ 215.592211] ? __pfx___lock_acquire+0x10/0x10 [ 215.592317] ? lock_release+0x20f/0x6f0 [ 215.592429] ? __pfx_lock_release+0x10/0x10 [ 215.592551] lock_acquire+0x19b/0x520 [ 215.592660] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.592781] ? __pfx_lock_acquire+0x10/0x10 [ 215.592895] ? srso_return_thunk+0x5/0x5f [ 215.593031] ? lock_release+0x20f/0x6f0 [ 215.593141] ? srso_return_thunk+0x5/0x5f [ 215.593275] ? lock_is_held_type+0x9e/0x120 [ 215.593409] ? srso_return_thunk+0x5/0x5f [ 215.593557] __mutex_lock+0x13d/0xb50 [ 215.593685] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.593796] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.593908] ? srso_return_thunk+0x5/0x5f [ 215.594045] ? synchronize_rcu_expedited+0x38a/0x420 [ 215.594154] ? __pfx___mutex_lock+0x10/0x10 [ 215.594280] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.594415] ? srso_return_thunk+0x5/0x5f [ 215.594552] ? kasan_quarantine_put+0x84/0x1e0 [ 215.594703] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 215.594808] ? srso_return_thunk+0x5/0x5f [ 215.594957] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.595071] ? __virt_addr_valid+0x2e8/0x5d0 [ 215.595197] ? __pfx_lock_release+0x10/0x10 [ 215.595302] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.595417] ? find_held_lock+0x2c/0x110 [ 215.595564] ? srso_return_thunk+0x5/0x5f [ 215.595706] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 215.595851] ? srso_return_thunk+0x5/0x5f [ 215.595987] ? lock_release+0x20f/0x6f0 [ 215.596099] ? __pfx_lock_release+0x10/0x10 [ 215.596207] ? srso_return_thunk+0x5/0x5f [ 215.596344] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.596464] ? srso_return_thunk+0x5/0x5f [ 215.596614] unregister_netdevice_queue+0x224/0x2e0 [ 215.596720] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.596827] ? up_write+0x195/0x520 [ 215.596966] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.597096] ? srso_return_thunk+0x5/0x5f [ 215.597240] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.597336] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 215.597501] ? srso_return_thunk+0x5/0x5f [ 215.597637] ? srso_return_thunk+0x5/0x5f [ 215.597773] ? synchronize_rcu+0x1ff/0x260 [ 215.597877] ieee80211_unregister_hw+0x55/0x3a0 [ 215.597987] hwsim_exit_net+0x3a0/0x730 [ 215.598093] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.598193] ? srso_return_thunk+0x5/0x5f [ 215.598322] ? netdev_run_todo+0x788/0x1040 [ 215.598446] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.598552] ops_exit_list+0xb3/0x180 [ 215.598659] cleanup_net+0x546/0xad0 [ 215.598786] ? __pfx_cleanup_net+0x10/0x10 [ 215.598919] process_one_work+0x8ee/0x1a10 [ 215.599087] ? __pfx_lock_acquire+0x10/0x10 [ 215.599202] ? __pfx_process_one_work+0x10/0x10 [ 215.599338] ? srso_return_thunk+0x5/0x5f [ 215.599474] ? move_linked_works+0x172/0x270 [ 215.599587] ? srso_return_thunk+0x5/0x5f [ 215.599723] ? assign_work+0x196/0x240 [ 215.599867] worker_thread+0x674/0xe70 [ 215.600015] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.600144] ? srso_return_thunk+0x5/0x5f [ 215.600279] ? __pfx_worker_thread+0x10/0x10 [ 215.600429] kthread+0x3ab/0x720 [ 215.600562] ? __pfx_kthread+0x10/0x10 [ 215.600692] ? srso_return_thunk+0x5/0x5f [ 215.600824] ? finish_task_switch.isra.0+0x206/0x840 [ 215.600951] ? __pfx_kthread+0x10/0x10 [ 215.601088] ret_from_fork+0x48/0x80 [ 215.601167] ? __pfx_kthread+0x10/0x10 [ 215.601293] ret_from_fork_asm+0x1a/0x30 [ 215.601463] [ 217.174327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.177104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.179890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.184695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.191953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.194052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.228066] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.231188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.240168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.246028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.252662] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.254845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.367314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.382093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.383977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.400062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.414695] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.418839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.425755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.428986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.430731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.438337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.447906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.450693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.470797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.476759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.478430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.479993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.483685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.485631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.489968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.497379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.497491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.501340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.505072] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.507084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.513240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.518234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.522127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.539296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.544814] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.548924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.552206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.589858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.615885] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.630166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.638815] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.640460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.256726] Bluetooth: hci0: command tx timeout [ 219.321638] Bluetooth: hci1: command tx timeout [ 219.513590] Bluetooth: hci2: command tx timeout [ 219.576653] Bluetooth: hci6: command tx timeout [ 219.576700] Bluetooth: hci3: command tx timeout [ 219.641636] Bluetooth: hci5: command tx timeout [ 219.641655] Bluetooth: hci4: command tx timeout [ 219.769600] Bluetooth: hci7: command tx timeout [ 221.304705] Bluetooth: hci0: command tx timeout [ 221.369580] Bluetooth: hci1: command tx timeout [ 221.561086] Bluetooth: hci2: command tx timeout [ 221.626623] Bluetooth: hci6: command tx timeout [ 221.626659] Bluetooth: hci3: command tx timeout [ 221.688613] Bluetooth: hci5: command tx timeout [ 221.689643] Bluetooth: hci4: command tx timeout [ 221.816692] Bluetooth: hci7: command tx timeout [ 223.352676] Bluetooth: hci0: command tx timeout [ 223.416650] Bluetooth: hci1: command tx timeout [ 223.609960] Bluetooth: hci2: command tx timeout [ 223.674257] Bluetooth: hci6: command tx timeout [ 223.674622] Bluetooth: hci3: command tx timeout [ 223.738658] Bluetooth: hci4: command tx timeout [ 223.738686] Bluetooth: hci5: command tx timeout [ 223.865625] Bluetooth: hci7: command tx timeout [ 225.401633] Bluetooth: hci0: command tx timeout [ 225.466588] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 07:43:59 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffff88800f75d340 RCX=ffffffff81429b3f RDX=0000000000000000 RSI=0000000000200000 RDI=0000000000000000 RBP=0000000000200000 RSP=ffff88800bcefdb0 R8 =0000000000000000 R9 =ffffed1001da2a00 R10=ffff88800ed15007 R11=ffff88800f75d7f8 R12=ffffffff88244ff9 R13=ffff888008c504a0 R14=ffff88800f75d340 R15=0000000000000086 RIP=ffffffff81719fc8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005643ed130090 CR3=000000000c5de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041770c3600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800eca6d20 R8 =0000000000000000 R9 =ffffed1001723046 R10=0000000000000001 R11=6465746e69612e36 R12=000000000000000a R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580 RIP=ffffffff8283c5ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6c6f81f5c8 CR3=0000000009f06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6bdb3d8bef6fc68cd24f6a8c73a35726 XMM02=68a8aee3740b9fad00000000000fd958 XMM03=711fbe8126c5d34400000000001373c0 XMM04=fc964db460c8c01900000000000ae988 XMM05=3cc027b654ebc50600000000001403e0 XMM06=9f165a4fe6c971ad00000000001374c8 XMM07=711fbe8126c5d34400000000001373c0 XMM08=68a8aee3740b9fad00000000000fd958 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000