syzkaller login: [ 59.816052] sshd (229) used greatest stack depth: 23848 bytes left Warning: Permanently added '[localhost]:36051' (ECDSA) to the list of known hosts. 2025/01/28 02:56:30 fuzzer started 2025/01/28 02:56:31 dialing manager at localhost:40883 [ 62.730227] cgroup: Unknown subsys name 'net' [ 62.790682] cgroup: Unknown subsys name 'cpuset' [ 62.805540] cgroup: Unknown subsys name 'rlimit' [ 67.125277] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 02:56:48 syscalls: 202 2025/01/28 02:56:48 code coverage: enabled 2025/01/28 02:56:48 comparison tracing: enabled 2025/01/28 02:56:48 extra coverage: enabled 2025/01/28 02:56:48 setuid sandbox: enabled 2025/01/28 02:56:48 namespace sandbox: enabled 2025/01/28 02:56:48 Android sandbox: enabled 2025/01/28 02:56:48 fault injection: enabled 2025/01/28 02:56:48 leak checking: enabled 2025/01/28 02:56:48 net packet injection: enabled 2025/01/28 02:56:48 net device setup: enabled 2025/01/28 02:56:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 02:56:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 02:56:48 USB emulation: enabled 2025/01/28 02:56:48 hci packet injection: enabled 2025/01/28 02:56:48 wifi device emulation: enabled 2025/01/28 02:56:48 802.15.4 emulation: enabled 2025/01/28 02:56:48 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 02:56:50 starting 8 fuzzer processes 02:56:50 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x800, 0x70bd2b, 0x20000, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c818}, 0x8000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x208, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x41) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000640)={'tunl0\x00', r1, 0x7800, 0x80, 0x0, 0x8, {{0x29, 0x4, 0x1, 0x7, 0xa4, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@cipso={0x86, 0x63, 0x1, [{0x0, 0xc, "635fa31a38cede22b05e"}, {0x2, 0xd, "18163fea9f44676b9dd221"}, {0x0, 0x9, "31075cb3a7da1d"}, {0x5, 0x9, "5dfda96f3decec"}, {0x5, 0x10, "8b983add782738fe23c3a02a7b75"}, {0x1, 0xe, "bd12494978799beba797f527"}, {0x5, 0xe, "5e958662bebfbfd13044c39e"}, {0x7, 0x6, "3275df3b"}]}, @cipso={0x86, 0x26, 0x1, [{0x2, 0xc, "9209ded94cf3389ddab6"}, {0x0, 0x4, "f32e"}, {0x0, 0x10, "1f7bf0043293429ab9e230b3138c"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2, {0x7, 0x7}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000980)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl1\x00', r0, 0x8000, 0x8000, 0x19, 0x0, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x24, 0x92, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x100}, {@local}, {@remote, 0x5}, {@multicast2}]}, @timestamp_addr={0x44, 0x3c, 0x27, 0x1, 0xa, [{@multicast2, 0x401}, {@rand_addr=0x64010101, 0x6}, {@local, 0x6}, {@private=0xa010101, 0xa7d}, {@broadcast, 0x4}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa6, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@local, 0x7}, {@local, 0x10001}, {@loopback, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@multicast1, 0x6}]}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 02:56:50 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb84}}, './file0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4, 0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r6 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xee01, r6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {r7, r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file1\x00'}) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000200)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r10, 0x4, 0x1, 0x48, 0x46dc65e7, 0x25, @empty, @local, 0x8, 0x20, 0xf0, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r9, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc884}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r12, {0xb142, 0x8000}}, './file1\x00'}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000004) 02:56:50 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = socket$inet6(0xa, 0x80000, 0xffffffff) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000080)={@local}, 0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) r7 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xa00, 0x7fff}}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x40, 0x7, 0x0, 0x5, 0x400, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0xfffffffffffffc01, 0x80000001}, 0x402, 0x6, 0x123a, 0x8, 0x100000000, 0x80000001, 0x5, 0x0, 0xc89}, 0x0, 0xa, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 02:56:50 executing program 3: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x3ff, 0x3, 0xe4}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x78}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000180)={'\x00', 0x7fff, 0x2, 0xb3d}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000240)={0x16}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000005c0)={'\x00', 0x5, 0x2, 0x4}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000640)={'\x00', 0x3cae, 0x3}) ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, &(0x7f00000006c0)={'\x00', 0x2, 0x0, 0x401}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000880)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001800}, 0x40) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {r7, r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r9, {r10, r3}}, './file0\x00'}) write$char_usb(r2, &(0x7f0000000ac0)="5753b0bae31e344105e005aca42f31e07d561e64b793827e1e43eac318ef5df433600be7f4cf8698b73647506057261e7fdc3c8bbc7d009b3fdd4799a11164db971a0124e635fbc9c4d21703dbaef64a72a85ed8ba6027b0cbfd5def28c41b18d6ddcad6c485205e4c8a1eab945040cd8432cfea3bbd0cbe4ce8af4537541a99cf369cd4cba3404ee0b363e46ae49eff1914ace47817b985d9f3deb922ae08f6aee3e95f17743b6da9ec74ea49c92fd01c625b99b4a008abd601eb", 0xbb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 02:56:50 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048880}, 0x800) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x91) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) write$cgroup_int(r3, &(0x7f0000000400), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0xe43ec8a177f93afc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000600)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x20080, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x9002}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x4040) accept$packet(r6, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ac0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x4040) [ 82.134275] audit: type=1400 audit(1738033010.746:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:56:50 executing program 5: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x14004040) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x56017c13}}, './file1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) recvfrom$packet(r3, &(0x7f0000000300)=""/57, 0x39, 0x10000, &(0x7f0000000480)={0x11, 0xef, r4, 0x1, 0x80, 0x6, @broadcast}, 0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffb}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5c}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) recvfrom$packet(r2, &(0x7f0000000840)=""/144, 0x90, 0x100, &(0x7f0000000900)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) r7 = syz_io_uring_setup(0x6c3, &(0x7f0000000940)={0x0, 0xa0d9, 0x4, 0x0, 0xa5, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000a40)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x61bc, 0x9, 0x0, {0x0, 0x0, r0}}, 0xffff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a80), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r9, {0x9}}, './file1\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x90a81, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x445}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x24048001) syz_io_uring_setup(0x1e03, &(0x7f0000000cc0)={0x0, 0x8a54, 0x0, 0x0, 0x275, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000d40), &(0x7f0000000d80)) 02:56:50 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) socketpair(0x2b, 0x80000, 0x8000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x35, 0x86, 0xfc, 0x7, 0x0, 0x3, 0x8, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x600, 0x7, 0x8, 0x3, 0x200, 0x0, 0x84, 0x0, 0x4c3f, 0x0, 0x5}, 0xffffffffffffffff, 0x10, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x80010, r6, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r10 = socket$inet(0x2, 0x804, 0x6bb9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r11) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x99}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r12, {0xae1}}, '\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'gretap0\x00', r13, 0x0, 0x8000, 0x3, 0x9, {{0xd, 0x4, 0x1, 0x6, 0x34, 0x65, 0x0, 0x2, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x1f, 0x6e, [@broadcast, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}]}}}}}) setsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f00000005c0)={r15, @broadcast, @remote}, 0xc) 02:56:50 executing program 6: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd2a, 0x355, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x24040004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80a4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x93}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x2004c800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x36d4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffc62}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x4, 0x0, {{0x30, 0x4, 0x1, 0x3, 0xc0, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x1f, 0x2d, [@remote, @private=0xa010102, @multicast2, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}]}, @cipso={0x86, 0xb, 0x0, [{0xd179aa922c6e1dcd, 0x5, "6304b8"}]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x23, 0x65, [@multicast1, @rand_addr=0x64010101, @local, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @loopback, @empty]}, @generic={0x44, 0xa, "7e15ef2e1683e03b"}, @timestamp_prespec={0x44, 0x44, 0x94, 0x3, 0x9, [{@empty}, {@multicast1, 0x40}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010102, 0xc8eb}, {@broadcast, 0xcdf}, {@loopback, 0xffff}, {@multicast1, 0x9}, {@remote, 0x4}]}, @ssrr={0x89, 0xb, 0xd9, [@remote, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x248, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "70cf25b2c93201dcdebcb83a6d39b6d1a768689143de7f07d63846fd3d"}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "6bbe"}, @ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "ec953908008b67470cadc50e53f7686f0bcade2cd212bc17"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "7b1e30"}, @ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "669537ade41c97e4d4175bb636444fb4d4cf9b5e2f0db2ee1e03dfba634823e1ffcd7ec0b6925b14333bc4fa481832d025c8ebd794d38dbc527d91a2ab0ad0b6adaeeefd76"}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffc9d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) socketpair(0x26, 0x5, 0x4, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'syztnl1\x00', r4, 0x0, 0x2, 0x6d, 0x5, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x20, 0x20, 0x8, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000001a40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001180)={0x86c, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe9}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1b0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa03f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}]}}, {{0x8, 0x1, r4}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x246}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x66}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x300}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x31}}}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) [ 83.782059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.784271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.790701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.793243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.799809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.803003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.806361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.827883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.835976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.837823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.838792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.839528] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.848250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.856832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.861228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.863826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.869225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.871914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.876841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.878581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.880624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.897841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.899870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.907214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.928586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.931160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.935239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.940153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.941662] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.944085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.955730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.957092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.961850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.963174] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.965158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.995267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.004241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.030070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.055266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.057974] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.070994] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.072345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.078364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.090245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.104477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.118884] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.130228] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.132088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.859207] Bluetooth: hci0: command tx timeout [ 85.989505] Bluetooth: hci3: command tx timeout [ 85.989597] Bluetooth: hci1: command tx timeout [ 86.050543] Bluetooth: hci5: command tx timeout [ 86.050694] Bluetooth: hci4: command tx timeout [ 86.051560] Bluetooth: hci2: command tx timeout [ 86.178538] Bluetooth: hci7: command tx timeout [ 86.179225] Bluetooth: hci6: command tx timeout [ 87.908449] Bluetooth: hci0: command tx timeout [ 88.034566] Bluetooth: hci3: command tx timeout [ 88.035586] Bluetooth: hci1: command tx timeout [ 88.098524] Bluetooth: hci2: command tx timeout [ 88.098970] Bluetooth: hci4: command tx timeout [ 88.099388] Bluetooth: hci5: command tx timeout [ 88.226684] Bluetooth: hci6: command tx timeout [ 88.227154] Bluetooth: hci7: command tx timeout [ 89.954532] Bluetooth: hci0: command tx timeout [ 90.083607] Bluetooth: hci1: command tx timeout [ 90.084100] Bluetooth: hci3: command tx timeout [ 90.146572] Bluetooth: hci4: command tx timeout [ 90.147638] Bluetooth: hci5: command tx timeout [ 90.147933] Bluetooth: hci2: command tx timeout [ 90.274555] Bluetooth: hci7: command tx timeout [ 90.274659] Bluetooth: hci6: command tx timeout [ 92.003473] Bluetooth: hci0: command tx timeout [ 92.131448] Bluetooth: hci3: command tx timeout [ 92.131905] Bluetooth: hci1: command tx timeout [ 92.194687] Bluetooth: hci5: command tx timeout [ 92.194736] Bluetooth: hci2: command tx timeout [ 92.195153] Bluetooth: hci4: command tx timeout [ 92.322491] Bluetooth: hci6: command tx timeout [ 92.324463] Bluetooth: hci7: command tx timeout [ 140.141613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.142296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.472481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.473101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.754167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.754842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.036942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.038057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.040111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.040800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.323821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.324758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.923510] [ 142.923739] ====================================================== [ 142.924215] WARNING: possible circular locking dependency detected [ 142.924696] 6.13.0-next-20250124 #1 Not tainted [ 142.925066] ------------------------------------------------------ [ 142.925851] kworker/u8:1/65 is trying to acquire lock: [ 142.926882] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.928925] [ 142.928925] but task is already holding lock: [ 142.930160] ffff88801b3f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.932242] [ 142.932242] which lock already depends on the new lock. [ 142.932242] [ 142.934027] [ 142.934027] the existing dependency chain (in reverse order) is: [ 142.934613] [ 142.934613] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 142.935160] __mutex_lock+0x13d/0xb50 [ 142.935540] wiphy_register+0x1b2e/0x25d0 [ 142.935981] ieee80211_register_hw+0x23a4/0x3d60 [ 142.936509] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 142.937052] init_mac80211_hwsim+0x389/0x870 [ 142.937561] do_one_initcall+0xf9/0x640 [ 142.938028] kernel_init_freeable+0x53d/0x7a0 [ 142.938543] kernel_init+0x1e/0x2d0 [ 142.938921] ret_from_fork+0x48/0x80 [ 142.939272] ret_from_fork_asm+0x1a/0x30 [ 142.939674] [ 142.939674] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 142.940181] __lock_acquire+0x29fd/0x4580 [ 142.940578] lock_acquire+0x19b/0x520 [ 142.940944] __mutex_lock+0x13d/0xb50 [ 142.941321] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.941822] unregister_netdevice_queue+0x224/0x2e0 [ 142.942271] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.942730] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.943181] ieee80211_unregister_hw+0x55/0x3a0 [ 142.943608] hwsim_exit_net+0x3a0/0x730 [ 142.943986] ops_exit_list+0xb3/0x180 [ 142.944369] cleanup_net+0x546/0xad0 [ 142.944797] process_one_work+0x8ee/0x1a10 [ 142.945285] worker_thread+0x674/0xe70 [ 142.945749] kthread+0x3ab/0x720 [ 142.946158] ret_from_fork+0x48/0x80 [ 142.946570] ret_from_fork_asm+0x1a/0x30 [ 142.947046] [ 142.947046] other info that might help us debug this: [ 142.947046] [ 142.947680] Possible unsafe locking scenario: [ 142.947680] [ 142.948136] CPU0 CPU1 [ 142.948500] ---- ---- [ 142.948859] lock(&rdev->wiphy.mtx); [ 142.949182] lock(rtnl_mutex); [ 142.949644] lock(&rdev->wiphy.mtx); [ 142.950141] lock(rtnl_mutex); [ 142.950428] [ 142.950428] *** DEADLOCK *** [ 142.950428] [ 142.950915] 4 locks held by kworker/u8:1/65: [ 142.951293] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 142.952159] #1: ffff88800c3efd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 142.952993] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 142.953769] #3: ffff88801b3f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.954641] [ 142.954641] stack backtrace: [ 142.955014] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 142.955052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.955074] Workqueue: netns cleanup_net [ 142.955116] Call Trace: [ 142.955125] [ 142.955137] dump_stack_lvl+0xca/0x120 [ 142.955196] print_circular_bug+0x47b/0x750 [ 142.955242] check_noncircular+0x2e9/0x3c0 [ 142.955284] ? __pfx_check_noncircular+0x10/0x10 [ 142.955326] ? hlock_class+0x4e/0x130 [ 142.955356] ? mark_lock+0xac/0xed0 [ 142.955396] ? srso_return_thunk+0x5/0x5f [ 142.955452] ? sched_clock+0x37/0x60 [ 142.955509] ? lockdep_lock+0xba/0x1b0 [ 142.955567] ? __pfx_lockdep_lock+0x10/0x10 [ 142.955629] __lock_acquire+0x29fd/0x4580 [ 142.955683] ? __pfx___lock_acquire+0x10/0x10 [ 142.955726] ? lock_release+0x20f/0x6f0 [ 142.955770] ? __pfx_lock_release+0x10/0x10 [ 142.955818] lock_acquire+0x19b/0x520 [ 142.955861] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.955910] ? __pfx_lock_acquire+0x10/0x10 [ 142.955955] ? srso_return_thunk+0x5/0x5f [ 142.956010] ? lock_release+0x20f/0x6f0 [ 142.956053] ? srso_return_thunk+0x5/0x5f [ 142.956108] ? lock_is_held_type+0x9e/0x120 [ 142.956164] ? srso_return_thunk+0x5/0x5f [ 142.956222] __mutex_lock+0x13d/0xb50 [ 142.956274] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.956319] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.956366] ? srso_return_thunk+0x5/0x5f [ 142.956421] ? synchronize_rcu_expedited+0x38a/0x420 [ 142.956465] ? __pfx___mutex_lock+0x10/0x10 [ 142.956519] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.956574] ? srso_return_thunk+0x5/0x5f [ 142.956629] ? kasan_quarantine_put+0x84/0x1e0 [ 142.956690] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.956726] ? srso_return_thunk+0x5/0x5f [ 142.956785] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.956831] ? __virt_addr_valid+0x2e8/0x5d0 [ 142.956884] ? __pfx_lock_release+0x10/0x10 [ 142.956929] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 142.956975] ? find_held_lock+0x2c/0x110 [ 142.957033] ? srso_return_thunk+0x5/0x5f [ 142.957090] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 142.957151] ? srso_return_thunk+0x5/0x5f [ 142.957206] ? lock_release+0x20f/0x6f0 [ 142.957250] ? __pfx_lock_release+0x10/0x10 [ 142.957293] ? srso_return_thunk+0x5/0x5f [ 142.957348] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.957396] ? srso_return_thunk+0x5/0x5f [ 142.957456] unregister_netdevice_queue+0x224/0x2e0 [ 142.957500] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 142.957543] ? up_write+0x195/0x520 [ 142.957598] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.957650] ? srso_return_thunk+0x5/0x5f [ 142.957709] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.957748] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 142.957786] ? srso_return_thunk+0x5/0x5f [ 142.957841] ? srso_return_thunk+0x5/0x5f [ 142.957896] ? synchronize_rcu+0x1ff/0x260 [ 142.957939] ieee80211_unregister_hw+0x55/0x3a0 [ 142.957984] hwsim_exit_net+0x3a0/0x730 [ 142.958026] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.958066] ? srso_return_thunk+0x5/0x5f [ 142.958121] ? netdev_run_todo+0x788/0x1040 [ 142.958171] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.958213] ops_exit_list+0xb3/0x180 [ 142.958256] cleanup_net+0x546/0xad0 [ 142.958300] ? __pfx_cleanup_net+0x10/0x10 [ 142.958354] process_one_work+0x8ee/0x1a10 [ 142.958419] ? __pfx_lock_acquire+0x10/0x10 [ 142.958464] ? __pfx_process_one_work+0x10/0x10 [ 142.958522] ? srso_return_thunk+0x5/0x5f [ 142.958577] ? move_linked_works+0x172/0x270 [ 142.958623] ? srso_return_thunk+0x5/0x5f [ 142.958678] ? assign_work+0x196/0x240 [ 142.958743] worker_thread+0x674/0xe70 [ 142.958801] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.958853] ? srso_return_thunk+0x5/0x5f [ 142.958908] ? __pfx_worker_thread+0x10/0x10 [ 142.958967] kthread+0x3ab/0x720 [ 142.959019] ? __pfx_kthread+0x10/0x10 [ 142.959071] ? srso_return_thunk+0x5/0x5f [ 142.959126] ? finish_task_switch.isra.0+0x206/0x840 [ 142.959177] ? __pfx_kthread+0x10/0x10 [ 142.959231] ret_from_fork+0x48/0x80 [ 142.959262] ? __pfx_kthread+0x10/0x10 [ 142.959315] ret_from_fork_asm+0x1a/0x30 [ 142.959382] [ 145.640286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.642278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.642759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.643512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.650003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.657958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.661119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.667252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.669340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.683463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.695880] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.698029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.714852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.726926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.729609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.741483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.746930] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.748943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.768073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.772544] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.780821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.789746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.790960] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.794439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.851086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.888735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.901715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.902307] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.908594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.911950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.915911] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.919961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.920692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.924539] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.926159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.929711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.932899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.933974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.936979] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.964071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.975016] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.984101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.746554] Bluetooth: hci1: command tx timeout [ 147.747043] Bluetooth: hci0: command tx timeout [ 147.811499] Bluetooth: hci3: command tx timeout [ 147.874904] Bluetooth: hci4: command tx timeout [ 148.002448] Bluetooth: hci7: command tx timeout [ 148.003680] Bluetooth: hci5: command tx timeout [ 148.131059] Bluetooth: hci6: command tx timeout [ 149.794465] Bluetooth: hci0: command tx timeout [ 149.794966] Bluetooth: hci1: command tx timeout [ 149.858461] Bluetooth: hci3: command tx timeout [ 149.922610] Bluetooth: hci4: command tx timeout [ 150.050506] Bluetooth: hci5: command tx timeout [ 150.050958] Bluetooth: hci7: command tx timeout [ 150.178813] Bluetooth: hci6: command tx timeout [ 151.842457] Bluetooth: hci0: command tx timeout [ 151.842916] Bluetooth: hci1: command tx timeout [ 151.907547] Bluetooth: hci3: command tx timeout [ 151.970524] Bluetooth: hci4: command tx timeout [ 152.098474] Bluetooth: hci7: command tx timeout [ 152.098954] Bluetooth: hci5: command tx timeout [ 152.226473] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 02:57:51 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800c55e400 RCX=ffffffff81429a4a RDX=1ffff110018abc80 RSI=0000000000000008 RDI=ffff88800c55e400 RBP=0000000000200000 RSP=ffff88800f177db8 R8 =0000000000000000 R9 =ffffed10018abc80 R10=ffff88800c55e407 R11=ffff88800f3884b8 R12=ffff88807d7f6ff9 R13=ffffffff88652f68 R14=ffff88800c3bb780 R15=0000000000000086 RIP=ffffffff81429a5f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00581f720 CR3=000000000bd18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416f574800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800c3eed20 R8 =0000000000000000 R9 =ffffed1001d48046 R10=0000000000000065 R11=6f6c206863696877 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b621dbc00e CR3=000000000d09c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000000000031706f6f6c2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055b621d27d00000055b621d6c580 XMM06=000055b621d53d900000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000