Warning: Permanently added '[localhost]:61066' (ECDSA) to the list of known hosts. 2025/01/23 03:38:12 fuzzer started 2025/01/23 03:38:13 dialing manager at localhost:38529 syzkaller login: [ 78.057998] cgroup: Unknown subsys name 'net' [ 78.146080] cgroup: Unknown subsys name 'cpuset' [ 78.176178] cgroup: Unknown subsys name 'rlimit' [ 84.195713] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 94.352212] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 03:38:30 syscalls: 215 2025/01/23 03:38:30 code coverage: enabled 2025/01/23 03:38:30 comparison tracing: enabled 2025/01/23 03:38:30 extra coverage: enabled 2025/01/23 03:38:30 setuid sandbox: enabled 2025/01/23 03:38:30 namespace sandbox: enabled 2025/01/23 03:38:30 Android sandbox: enabled 2025/01/23 03:38:30 fault injection: enabled 2025/01/23 03:38:30 leak checking: enabled 2025/01/23 03:38:30 net packet injection: enabled 2025/01/23 03:38:30 net device setup: enabled 2025/01/23 03:38:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 03:38:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 03:38:30 USB emulation: enabled 2025/01/23 03:38:30 hci packet injection: enabled 2025/01/23 03:38:30 wifi device emulation: enabled 2025/01/23 03:38:30 802.15.4 emulation: enabled 2025/01/23 03:38:30 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 03:38:31 starting 8 fuzzer processes 03:38:31 executing program 0: ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x14002) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x600000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x2) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000140)=0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x6, 0x0, {{0x27, 0x4, 0x0, 0x24, 0x9c, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast2, {[@generic={0x82, 0x5, "ea2c4e"}, @timestamp_prespec={0x44, 0xc, 0x48, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x5}]}, @timestamp_prespec={0x44, 0x4c, 0x18, 0x3, 0x6, [{@remote, 0x579}, {@remote, 0x5}, {@multicast2, 0x9}, {@remote, 0x1}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}, {@broadcast, 0x7}, {@local, 0x31}, {@empty, 0x9}]}, @end, @ssrr={0x89, 0x3, 0x64}, @cipso={0x86, 0x24, 0x1, [{0x5, 0x10, "8c5f4a4f32b8309eaa66277cfe93"}, {0x5, 0xa, "549b6a8c15397fd2"}, {0x2, 0x4, "241b"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x474, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdab}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3c7beed}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0x81, 0x7}, {0x2, 0x6, 0x1, 0x101}, {0x1, 0x5, 0x5, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x0, 0x402, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1e}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000940)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x3c}}, 0x11) read$rfkill(r1, &(0x7f0000000ac0), 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x80800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000b40)) syz_open_dev$sg(&(0x7f0000000b80), 0x3, 0x40600) recvmsg(r1, &(0x7f0000001000)={&(0x7f0000000c00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c80)=""/103, 0x67}, {&(0x7f0000000d00)=""/222, 0xde}, {&(0x7f0000000e00)=""/227, 0xe3}], 0x3, &(0x7f0000000f40)=""/180, 0xb4}, 0x40000001) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001400)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x18c, 0x0, 0xb30, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40181}, 0x801) 03:38:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x800, 0x12) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20004000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) r2 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x0, 0x40200) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) recvmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000600)=""/146, 0x92}], 0x7}, 0x10221) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x60010101) read$hidraw(r4, &(0x7f00000018c0)=""/6, 0x6) write$hidraw(r4, &(0x7f0000001900)="6515fbe5482d2059c0a3f5acc923fc7bc1b53d8d3c6e90c74f21ab0c6fe818116c23e8c57d3a626be4e126742a0ce4e7ff5b4b5079f74e14374fb6adb08a9b2c31cfb91d32d05bd003c8525512cbc92e63e9bd8279f57c31f4ce02cb62e6404b1715893c3ace85f8b4611e9dac4815aeb406192db53231194112da87dd81bb85831eac62cc501f27f9742cdef159018234208b9bc2ac927f137b7661364a", 0x9e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a40)=""/34, 0x22}, {&(0x7f0000001a80)=""/131, 0x83}, {&(0x7f0000001b40)=""/249, 0xf9}], 0x3, &(0x7f0000001c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000160) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000001d00)) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f0000001d40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x38, 0x0, 0x401, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004021}, 0x8004) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000001ec0)) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000001f00)) 03:38:31 executing program 2: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x1, 0x3}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x100) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000140), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/194, 0xc2}], 0x3, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x101) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000680)={r2, 0x1, 0x80000000}) recvmsg$unix(r3, &(0x7f0000002c40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/215, 0xd7}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/57, 0x39}, {&(0x7f0000002ac0)=""/170, 0xaa}], 0x8, &(0x7f0000002c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2) read$eventfd(r6, &(0x7f0000002c80), 0x8) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000002cc0), 0x200000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000003f40)={0x94, 0x0, &(0x7f0000002e80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002d00)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x20a, 0x3}}, &(0x7f0000002d80)={0x0, 0x18, 0x30}}, 0x1000}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002dc0)={@flat=@binder={0x73622a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000002e40)={0x0, 0x18, 0x30}}}], 0x1000, 0x0, &(0x7f0000002f40)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000003f80)={0x73622a85, 0x1000, 0x1}) r9 = socket(0x21, 0xa, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000003fc0)={'batadv_slave_0\x00'}) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000040c0)={'batadv_slave_1\x00'}) syz_open_dev$sg(&(0x7f0000004100), 0x3, 0x400041) r11 = socket(0x2b, 0x2, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f0000004140)={0x1}, 0x4) wait4(r1, &(0x7f0000004180), 0x1000000, &(0x7f00000041c0)) 03:38:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x20, 0x1, 0x0, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0x1d, 0x0, 0x2, [0xf1af, 0xffffff80]}, @lsrr={0x83, 0xf, 0x70, [@local, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socketpair(0x6, 0xa, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r3, 0x11, 0xf9f97fde5da54a9, &(0x7f0000000100)=0x1f, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'gre0\x00', r1, 0x80, 0x40, 0x80a, 0x7a, {{0x1e, 0x4, 0x3, 0x2a, 0x78, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0x12, "d5e40eb81a7ea8ab5bbfda54d5646b25"}, {0x2, 0xb, "248da72a6c1b22e64f"}]}, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x1, [{@multicast2, 0x1}, {@broadcast, 0x6}, {@local, 0x4}, {@multicast1}]}, @end, @end, @ssrr={0x89, 0xf, 0xd1, [@dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @multicast2]}, @end, @noop, @generic={0x83, 0x7, "b0881036a5"}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0xd36843a9736e8ff4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x74}}, 0x20000000) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000380)) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) accept(r5, &(0x7f0000000400)=@sco={0x1f, @none}, &(0x7f0000000480)=0x80) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x1, 0x10, 0x3, 0x100, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x64, 0x0, 0x0, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x34}, {[@noop, @generic={0x44, 0x5, "8b8618"}]}}}}}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) recvfrom$packet(r5, &(0x7f0000000580)=""/14, 0xe, 0x40000000, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r6, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x40084) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001340), 0x7538b85292444d41, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001500)={'gre0\x00', &(0x7f0000001480)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x400, 0x40, {{0x18, 0x4, 0x3, 0x9, 0x60, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@noop, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0x0, [{@rand_addr=0x64010101}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x3}]}, @ssrr={0x89, 0xf, 0xb3, [@local, @multicast1, @private=0xa010102]}, @generic={0x44, 0xd, "a7ba6424b5e2ac87ee7efa"}, @generic={0x7, 0x9, "3bbc35df042783"}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001640)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x2) [ 96.350478] audit: type=1400 audit(1737603511.733:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:38:31 executing program 4: socketpair(0x2b, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3472}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = accept(r2, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) connect(r3, &(0x7f0000000200)=@isdn={0x22, 0x20, 0x40, 0x6, 0x81}, 0x80) r4 = accept(r1, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000300)=0x80) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)={0x618, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x598, 0x8, 0x0, 0x1, [{0x378, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x358, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c8b9815703ab3e4adb12de8a002b7030109b6b129d727a059cfe7c78d581ed0"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xe9bb}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x618}, 0x1, 0x0, 0x0, 0x80}, 0x20000041) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000bc0)=0x9, 0x12) r8 = socket(0x22, 0x5, 0x152ddd41) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d40)={'gretap0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0x7fffffff, 0x3f, {{0x31, 0x4, 0x3, 0x8, 0xc4, 0x65, 0x0, 0xdf, 0x29, 0x0, @empty, @private=0xa010102, {[@lsrr={0x83, 0x17, 0xc0, [@broadcast, @multicast1, @empty, @loopback, @rand_addr=0x64010101]}, @generic={0x86, 0x9, "78b33b2f00ae22"}, @timestamp={0x44, 0x14, 0x60, 0x0, 0xe, [0x81, 0x5, 0x1000, 0x5]}, @rr={0x7, 0xb, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x17, 0x12, [@multicast2, @multicast1, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x57, 0x0, [{0x2, 0x5, "22e1a0"}, {0x1, 0xe, "2b239d96937691d5ebaebf87"}, {0x0, 0x6, "87e7b09c"}, {0x6, 0x9, "ef057ac465302e"}, {0x7, 0x12, "33552fcab9df60a370785fad42f9fecc"}, {0x7, 0x6, "057fb87f"}, {0x6, 0x10, "0dff8485ea02352cb03ba10b73d3"}, {0x5, 0x7, "d81eb6a3af"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x3ff8000, 0xfffff051, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@lsrr={0x83, 0x13, 0xb4, [@empty, @local, @empty, @multicast2]}, @lsrr={0x83, 0x2b, 0xd4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @loopback, @local, @loopback]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000001200)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000000e40)={0x36c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f54}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x36c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000001240)={0x10000001}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r11, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x7c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) 03:38:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf29762dee1f262d1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x20000050) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4044) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20083000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000800}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x2f, 0x5e, 0xdd, 0xf3a2, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0x1ff, 0x7f}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x1cc1, 0x10001, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @end, @noop, @lsrr={0x83, 0x1b, 0x16, [@empty, @broadcast, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010100]}, @end, @timestamp={0x44, 0x18, 0x26, 0x0, 0x4, [0xbe88, 0x3, 0x3f8, 0x1, 0x50f]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0xfffff801, 0xc4700000, {{0x20, 0x4, 0x3, 0x3d, 0x80, 0x65, 0x0, 0x8e, 0x0, 0x0, @private=0xa010102, @local, {[@generic={0x82, 0x2}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0xa, "b859d5c16d36b938"}, @timestamp_prespec={0x44, 0xc, 0xfd, 0x3, 0x4, [{@empty, 0x5}]}, @timestamp={0x44, 0x1c, 0xf8, 0x0, 0x2, [0xdf, 0x9, 0x10000, 0x0, 0x7f, 0x0]}, @timestamp_addr={0x44, 0x2c, 0xbd, 0x1, 0xf, [{@loopback, 0x6}, {@local, 0x5}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@loopback, 0x8000}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x1, 0x1, {{0x11, 0x4, 0x2, 0x0, 0x44, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast2, @remote, {[@generic={0x82, 0x8, "2050ab0d77d8"}, @timestamp_addr={0x44, 0x14, 0x1f, 0x1, 0xb, [{@rand_addr=0x64010101, 0xa62}, {@empty, 0x5}]}, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "f0f390ba3768e4a2f8"}]}, @end]}}}}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a80)={0x4cc, 0x0, 0x28, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xffe0, 0x4, 0x2, 0x8993}, {0xe2d, 0x9, 0x5, 0x7}, {0xff99, 0x81, 0x19, 0xdd05}, {0x2, 0x81, 0xa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x73e0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x4cc}}, 0x4004040) 03:38:31 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x4040014) socketpair(0x1a, 0x3, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x891) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x105400, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x98200, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x970f30c3c328ab5e, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x40102, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x1, 0x40, 0x2, 0x3b, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x66, 0xa848, 0x8, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x17, 0x24, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @private=0xa010102]}, @lsrr={0x83, 0xb, 0xa, [@loopback, @multicast2]}, @generic={0x86, 0xe, "d11c9d91fa417a2fa157b67f"}, @noop, @timestamp={0x44, 0x1c, 0xed, 0x0, 0xc, [0x9, 0x7, 0x0, 0x800, 0x1, 0x3]}, @timestamp_addr={0x44, 0x4c, 0xf7, 0x1, 0x5, [{@loopback, 0x4}, {@multicast1, 0x3c}, {@multicast1}, {@empty, 0x9}, {@loopback, 0xd73}, {@rand_addr=0x64010102, 0x475}, {@loopback, 0x5}, {@multicast2, 0xfe}, {@loopback, 0x9}]}, @rr={0x7, 0x13, 0x2f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r7 = syz_open_dev$sg(&(0x7f0000000680), 0x1e, 0x481) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f00000006c0)=0x404) r8 = accept(r1, &(0x7f0000000700)=@alg, &(0x7f0000000780)=0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}}, 0x20004004) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000900)={0x10}) syz_genetlink_get_family_id$fou(&(0x7f0000000940), r1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000009c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) 03:38:31 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x80}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socketpair(0x2a, 0xa, 0x40, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x60080}, 0x0) accept$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x11}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r10, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x16) [ 97.892018] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.896546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.899053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.904482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.910111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.914734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.018015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.024561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.030101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.038768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.048677] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.050795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.097236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.101056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.103043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.110718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.114005] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.116123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.118315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.125067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.140489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.162687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.169760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.170396] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.174964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.192589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.204127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.206479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.222897] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.265570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.271674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.303492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.306457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.312460] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.315969] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.318838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.337317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.353465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.359649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.359891] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.366068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.368963] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.371190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.374527] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.376863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.380972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.383922] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.386054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.985392] Bluetooth: hci0: command tx timeout [ 100.112509] Bluetooth: hci1: command tx timeout [ 100.176446] Bluetooth: hci3: command tx timeout [ 100.240319] Bluetooth: hci2: command tx timeout [ 100.303433] Bluetooth: hci4: command tx timeout [ 100.367491] Bluetooth: hci5: command tx timeout [ 100.431542] Bluetooth: hci6: command tx timeout [ 100.432010] Bluetooth: hci7: command tx timeout [ 102.031554] Bluetooth: hci0: command tx timeout [ 102.159448] Bluetooth: hci1: command tx timeout [ 102.223887] Bluetooth: hci3: command tx timeout [ 102.288368] Bluetooth: hci2: command tx timeout [ 102.351503] Bluetooth: hci4: command tx timeout [ 102.415432] Bluetooth: hci5: command tx timeout [ 102.479591] Bluetooth: hci6: command tx timeout [ 102.479770] Bluetooth: hci7: command tx timeout [ 104.079700] Bluetooth: hci0: command tx timeout [ 104.208438] Bluetooth: hci1: command tx timeout [ 104.271345] Bluetooth: hci3: command tx timeout [ 104.335431] Bluetooth: hci2: command tx timeout [ 104.400286] Bluetooth: hci4: command tx timeout [ 104.463398] Bluetooth: hci5: command tx timeout [ 104.527370] Bluetooth: hci7: command tx timeout [ 104.528001] Bluetooth: hci6: command tx timeout [ 106.127540] Bluetooth: hci0: command tx timeout [ 106.255371] Bluetooth: hci1: command tx timeout [ 106.319392] Bluetooth: hci3: command tx timeout [ 106.383315] Bluetooth: hci2: command tx timeout [ 106.447347] Bluetooth: hci4: command tx timeout [ 106.511364] Bluetooth: hci5: command tx timeout [ 106.575630] Bluetooth: hci6: command tx timeout [ 106.575763] Bluetooth: hci7: command tx timeout [ 159.841090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.845834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.851895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.861741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.866781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.871894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.958348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.962607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.965359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.972953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.977486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.981464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.057105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.059593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.060518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.063676] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.067374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.074932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.079543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.080507] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.083085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.086836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.087017] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.089806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.236394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.245037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.247048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.249980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.254294] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.259453] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.261344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.265598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.269709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.274533] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.279674] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.284454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.302699] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.305419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.306668] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.307132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.340837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.353758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.415850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.431412] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.442737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.456488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.475361] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.478462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.935445] Bluetooth: hci0: command tx timeout [ 162.063444] Bluetooth: hci1: command tx timeout [ 162.127462] Bluetooth: hci3: command tx timeout [ 162.191421] Bluetooth: hci2: command tx timeout [ 162.383844] Bluetooth: hci6: command tx timeout [ 162.447508] Bluetooth: hci4: command tx timeout [ 162.450337] Bluetooth: hci5: command tx timeout [ 162.575596] Bluetooth: hci7: command tx timeout [ 163.983521] Bluetooth: hci0: command tx timeout [ 164.111459] Bluetooth: hci1: command tx timeout [ 164.177380] Bluetooth: hci3: command tx timeout [ 164.239385] Bluetooth: hci2: command tx timeout [ 164.433301] Bluetooth: hci6: command tx timeout [ 164.495536] Bluetooth: hci5: command tx timeout [ 164.495576] Bluetooth: hci4: command tx timeout [ 164.623326] Bluetooth: hci7: command tx timeout [ 166.032313] Bluetooth: hci0: command tx timeout [ 166.160297] Bluetooth: hci1: command tx timeout [ 166.223432] Bluetooth: hci3: command tx timeout [ 166.287364] Bluetooth: hci2: command tx timeout [ 166.480263] Bluetooth: hci6: command tx timeout [ 166.543435] Bluetooth: hci5: command tx timeout [ 166.544749] Bluetooth: hci4: command tx timeout [ 166.671365] Bluetooth: hci7: command tx timeout [ 168.079420] Bluetooth: hci0: command tx timeout [ 168.209336] Bluetooth: hci1: command tx timeout [ 168.274259] Bluetooth: hci3: command tx timeout [ 168.336470] Bluetooth: hci2: command tx timeout [ 168.527346] Bluetooth: hci6: command tx timeout [ 168.591373] Bluetooth: hci4: command tx timeout [ 168.591974] Bluetooth: hci5: command tx timeout [ 168.720579] Bluetooth: hci7: command tx timeout [ 222.234796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.237002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.238509] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.244320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.246981] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.248327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.587125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.588894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.591022] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.594952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.596374] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.597096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.687044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.712961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.726618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.743692] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.746543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.754900] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.763925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.772424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.821429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.821969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.844888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.851101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.863287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.881339] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 222.882187] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.903903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.914652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.934832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 222.935591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.936199] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.939739] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.951733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.952113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 222.958861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.971806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.003674] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.006635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.036048] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.036518] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.036825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.068025] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.072655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.073018] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.073424] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.091635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.092574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.336950] Bluetooth: hci0: command tx timeout [ 224.719328] Bluetooth: hci1: command tx timeout [ 224.913963] Bluetooth: hci2: command tx timeout [ 225.104007] Bluetooth: hci3: command tx timeout [ 225.168307] Bluetooth: hci6: command tx timeout [ 225.168438] Bluetooth: hci4: command tx timeout [ 225.168706] Bluetooth: hci7: command tx timeout [ 225.232382] Bluetooth: hci5: command tx timeout [ 226.383292] Bluetooth: hci0: command tx timeout [ 226.767354] Bluetooth: hci1: command tx timeout [ 226.960997] Bluetooth: hci2: command tx timeout [ 227.151356] Bluetooth: hci3: command tx timeout [ 227.215344] Bluetooth: hci7: command tx timeout [ 227.216337] Bluetooth: hci4: command tx timeout [ 227.216434] Bluetooth: hci6: command tx timeout [ 227.280320] Bluetooth: hci5: command tx timeout [ 228.431332] Bluetooth: hci0: command tx timeout [ 228.815344] Bluetooth: hci1: command tx timeout [ 229.009278] Bluetooth: hci2: command tx timeout [ 229.199432] Bluetooth: hci3: command tx timeout [ 229.263377] Bluetooth: hci4: command tx timeout [ 229.263476] Bluetooth: hci6: command tx timeout [ 229.263566] Bluetooth: hci7: command tx timeout [ 229.327321] Bluetooth: hci5: command tx timeout [ 230.479423] Bluetooth: hci0: command tx timeout [ 230.865332] Bluetooth: hci1: command tx timeout [ 231.055304] Bluetooth: hci2: command tx timeout [ 231.247458] Bluetooth: hci3: command tx timeout [ 231.312494] Bluetooth: hci7: command tx timeout [ 231.314100] Bluetooth: hci6: command tx timeout [ 231.314188] Bluetooth: hci4: command tx timeout [ 231.375481] Bluetooth: hci5: command tx timeout [ 282.539756] [ 282.540015] ====================================================== [ 282.540614] WARNING: possible circular locking dependency detected [ 282.541212] 6.13.0-next-20250122 #1 Not tainted [ 282.541661] ------------------------------------------------------ [ 282.542506] kworker/u8:1/66 is trying to acquire lock: [ 282.543363] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.545513] [ 282.545513] but task is already holding lock: [ 282.546981] ffff888021d68768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 282.548561] [ 282.548561] which lock already depends on the new lock. [ 282.548561] [ 282.549815] [ 282.549815] the existing dependency chain (in reverse order) is: [ 282.550925] [ 282.550925] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 282.551557] __mutex_lock+0x13d/0xb50 [ 282.552000] wiphy_register+0x1b2e/0x25d0 [ 282.552459] ieee80211_register_hw+0x23a4/0x3d60 [ 282.552965] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 282.553494] init_mac80211_hwsim+0x389/0x870 [ 282.553982] do_one_initcall+0xf9/0x640 [ 282.554430] kernel_init_freeable+0x53d/0x7a0 [ 282.554963] kernel_init+0x1e/0x2d0 [ 282.555391] ret_from_fork+0x48/0x80 [ 282.555837] ret_from_fork_asm+0x1a/0x30 [ 282.556326] [ 282.556326] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 282.556949] __lock_acquire+0x29fd/0x4580 [ 282.557435] lock_acquire+0x19b/0x520 [ 282.557889] __mutex_lock+0x13d/0xb50 [ 282.558329] unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.558905] unregister_netdevice_queue+0x224/0x2e0 [ 282.559426] _cfg80211_unregister_wdev+0x57b/0x700 [ 282.559953] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 282.560494] ieee80211_unregister_hw+0x55/0x3a0 [ 282.561020] hwsim_exit_net+0x3a0/0x730 [ 282.561487] ops_exit_list+0xb3/0x180 [ 282.561940] cleanup_net+0x546/0xad0 [ 282.562381] process_one_work+0x8ee/0x1a10 [ 282.562890] worker_thread+0x674/0xe70 [ 282.563365] kthread+0x3ab/0x720 [ 282.563795] ret_from_fork+0x48/0x80 [ 282.564224] ret_from_fork_asm+0x1a/0x30 [ 282.564716] [ 282.564716] other info that might help us debug this: [ 282.564716] [ 282.565435] Possible unsafe locking scenario: [ 282.565435] [ 282.566007] CPU0 CPU1 [ 282.566461] ---- ---- [ 282.566914] lock(&rdev->wiphy.mtx); [ 282.567321] lock(rtnl_mutex); [ 282.567916] lock(&rdev->wiphy.mtx); [ 282.568541] lock(rtnl_mutex); [ 282.568900] [ 282.568900] *** DEADLOCK *** [ 282.568900] [ 282.569481] 4 locks held by kworker/u8:1/66: [ 282.569922] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 282.570951] #1: ffff88800e9d7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 282.571944] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 282.572862] #3: ffff888021d68768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 282.573897] [ 282.573897] stack backtrace: [ 282.574334] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250122 #1 [ 282.575051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 282.575782] Workqueue: netns cleanup_net [ 282.576172] Call Trace: [ 282.576408] [ 282.576619] dump_stack_lvl+0xca/0x120 [ 282.577038] print_circular_bug+0x47b/0x750 [ 282.577480] check_noncircular+0x2e9/0x3c0 [ 282.577916] ? __pfx_check_noncircular+0x10/0x10 [ 282.578390] ? hlock_class+0x4e/0x130 [ 282.578775] ? mark_lock+0xac/0xed0 [ 282.579153] ? srso_return_thunk+0x5/0x5f [ 282.579603] ? lockdep_lock+0xba/0x1b0 [ 282.580023] ? __pfx_lockdep_lock+0x10/0x10 [ 282.580483] __lock_acquire+0x29fd/0x4580 [ 282.580925] ? __pfx___lock_acquire+0x10/0x10 [ 282.581391] ? lock_release+0x20f/0x6f0 [ 282.581804] ? __pfx_lock_release+0x10/0x10 [ 282.582252] lock_acquire+0x19b/0x520 [ 282.582650] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.583239] ? __pfx_lock_acquire+0x10/0x10 [ 282.583659] ? srso_return_thunk+0x5/0x5f [ 282.584068] ? lock_release+0x20f/0x6f0 [ 282.584448] ? srso_return_thunk+0x5/0x5f [ 282.584856] ? lock_is_held_type+0x9e/0x120 [ 282.585276] ? srso_return_thunk+0x5/0x5f [ 282.585715] __mutex_lock+0x13d/0xb50 [ 282.586120] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.586663] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.587200] ? srso_return_thunk+0x5/0x5f [ 282.587631] ? synchronize_rcu_expedited+0x38a/0x420 [ 282.588141] ? __pfx___mutex_lock+0x10/0x10 [ 282.588589] ? __pfx_autoremove_wake_function+0x10/0x10 [ 282.589137] ? srso_return_thunk+0x5/0x5f [ 282.589575] ? kasan_quarantine_put+0x84/0x1e0 [ 282.590056] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 282.590510] ? srso_return_thunk+0x5/0x5f [ 282.590965] unregister_netdevice_many_notify+0x1612/0x1c80 [ 282.591530] ? __virt_addr_valid+0x2e8/0x5d0 [ 282.592016] ? __pfx_lock_release+0x10/0x10 [ 282.592456] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 282.593051] ? find_held_lock+0x2c/0x110 [ 282.593482] ? srso_return_thunk+0x5/0x5f [ 282.593923] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 282.594398] ? srso_return_thunk+0x5/0x5f [ 282.594813] ? lock_release+0x20f/0x6f0 [ 282.595224] ? __pfx_lock_release+0x10/0x10 [ 282.595674] ? srso_return_thunk+0x5/0x5f [ 282.596115] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 282.596647] ? srso_return_thunk+0x5/0x5f [ 282.597099] unregister_netdevice_queue+0x224/0x2e0 [ 282.597604] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 282.598152] ? up_write+0x195/0x520 [ 282.598541] _cfg80211_unregister_wdev+0x57b/0x700 [ 282.599047] ? srso_return_thunk+0x5/0x5f [ 282.599489] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 282.600004] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 282.600555] ? srso_return_thunk+0x5/0x5f [ 282.600997] ? srso_return_thunk+0x5/0x5f [ 282.601415] ? synchronize_rcu+0x1ff/0x260 [ 282.601815] ieee80211_unregister_hw+0x55/0x3a0 [ 282.602255] hwsim_exit_net+0x3a0/0x730 [ 282.602637] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.603064] ? srso_return_thunk+0x5/0x5f [ 282.603471] ? netdev_run_todo+0x788/0x1040 [ 282.603894] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.604328] ops_exit_list+0xb3/0x180 [ 282.604726] cleanup_net+0x546/0xad0 [ 282.605113] ? __pfx_cleanup_net+0x10/0x10 [ 282.605558] process_one_work+0x8ee/0x1a10 [ 282.606014] ? __pfx_lock_acquire+0x10/0x10 [ 282.606455] ? __pfx_process_one_work+0x10/0x10 [ 282.606946] ? srso_return_thunk+0x5/0x5f [ 282.607388] ? move_linked_works+0x172/0x270 [ 282.607845] ? srso_return_thunk+0x5/0x5f [ 282.608285] ? assign_work+0x196/0x240 [ 282.608674] worker_thread+0x674/0xe70 [ 282.609061] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 282.609552] ? srso_return_thunk+0x5/0x5f [ 282.609965] ? __pfx_worker_thread+0x10/0x10 [ 282.610404] kthread+0x3ab/0x720 [ 282.610748] ? __pfx_kthread+0x10/0x10 [ 282.611130] ? srso_return_thunk+0x5/0x5f [ 282.611562] ? finish_task_switch.isra.0+0x206/0x840 [ 282.612083] ? __pfx_kthread+0x10/0x10 [ 282.612493] ret_from_fork+0x48/0x80 [ 282.612873] ? __pfx_kthread+0x10/0x10 [ 282.613283] ret_from_fork_asm+0x1a/0x30 [ 282.613720] [ 284.511398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.514649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.516825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.519746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.522857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.535628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.536914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.537987] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.540004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.541047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.547387] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.548788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.632854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.635846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.641427] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.649979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.652736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.653913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.716752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.722052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.727565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.734590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.739111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.744103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.832689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.851801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.860794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.872017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.874180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.900567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.904569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.909067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.909867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.918179] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.925599] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.926066] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.926525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.932248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.934938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.947485] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.959647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.960289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.987547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.988994] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.001751] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.007834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.012866] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 285.017993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.607298] Bluetooth: hci1: command tx timeout [ 286.607342] Bluetooth: hci0: command tx timeout [ 286.672433] Bluetooth: hci2: command tx timeout [ 286.800560] Bluetooth: hci3: command tx timeout [ 286.991342] Bluetooth: hci5: command tx timeout [ 287.119631] Bluetooth: hci7: command tx timeout [ 287.119909] Bluetooth: hci6: command tx timeout [ 287.120041] Bluetooth: hci4: command tx timeout [ 288.655406] Bluetooth: hci0: command tx timeout [ 288.656558] Bluetooth: hci1: command tx timeout [ 288.719478] Bluetooth: hci2: command tx timeout [ 288.847343] Bluetooth: hci3: command tx timeout [ 289.039283] Bluetooth: hci5: command tx timeout [ 289.168288] Bluetooth: hci4: command tx timeout [ 289.168360] Bluetooth: hci6: command tx timeout [ 289.168398] Bluetooth: hci7: command tx timeout [ 290.704374] Bluetooth: hci1: command tx timeout [ 290.704542] Bluetooth: hci0: command tx timeout [ 290.767268] Bluetooth: hci2: command tx timeout [ 290.895287] Bluetooth: hci3: command tx timeout [ 291.087269] Bluetooth: hci5: command tx timeout [ 291.215270] Bluetooth: hci7: command tx timeout [ 291.215770] Bluetooth: hci6: command tx timeout [ 291.215827] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 03:41:38 Registers: info registers vcpu 0 RAX=0000000080010002 RBX=ffff88806ce2d3d8 RCX=ffffffff815fe8c5 RDX=ffff88800eae5340 RSI=00000041c308ad40 RDI=0000000000000000 RBP=00000000000f4240 RSP=ffff88806ce09d90 R8 =0000000000000000 R9 =fffffbfff0efeae9 R10=000000000000eaad R11=00000000fa83b2da R12=00000041c308ad40 R13=00000041c2f96b00 R14=0000000000000001 R15=00000041c2f96b00 RIP=ffffffff81719e68 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f17e4c268c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc947cba80 CR3=0000000015734000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000003ffffffff000055cfb37e1a10 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=4c414954494e495f4345535500313432 XMM06=59545645440068746f6f7465756c623d XMM07=63682f326963682f68746f6f7465756c XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800e9d6bb8 R8 =0000000000000001 R9 =ffffed1001d3ad67 R10=000000000000005b R11=7369786520656874 R12=000000000000005b R13=0000000000000001 R14=ffff888008fea001 R15=ffff88800e9d6eb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f10a34b3040 CR3=0000000033bba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000ff0000000000000000 XMM02=00007f100000000000007ffcad291d00 XMM03=00007f10a296f10033326c6c696b6672 XMM04=3020202020202020093a736567615062 XMM05=00000000000000000000000000000000 XMM06=2020092020202020093a0a4267203436 XMM07=00000000000000000000000000000000 XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000