Warning: Permanently added '[localhost]:26721' (ECDSA) to the list of known hosts. 2025/01/28 03:33:15 fuzzer started 2025/01/28 03:33:15 dialing manager at localhost:40883 syzkaller login: [ 57.374247] cgroup: Unknown subsys name 'net' [ 57.468702] cgroup: Unknown subsys name 'cpuset' [ 57.496920] cgroup: Unknown subsys name 'rlimit' [ 62.069806] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 03:33:30 syscalls: 202 2025/01/28 03:33:30 code coverage: enabled 2025/01/28 03:33:30 comparison tracing: enabled 2025/01/28 03:33:30 extra coverage: enabled 2025/01/28 03:33:30 setuid sandbox: enabled 2025/01/28 03:33:30 namespace sandbox: enabled 2025/01/28 03:33:30 Android sandbox: enabled 2025/01/28 03:33:30 fault injection: enabled 2025/01/28 03:33:30 leak checking: enabled 2025/01/28 03:33:30 net packet injection: enabled 2025/01/28 03:33:30 net device setup: enabled 2025/01/28 03:33:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 03:33:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 03:33:30 USB emulation: enabled 2025/01/28 03:33:30 hci packet injection: enabled 2025/01/28 03:33:30 wifi device emulation: enabled 2025/01/28 03:33:30 802.15.4 emulation: enabled 2025/01/28 03:33:30 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 03:33:31 starting 8 fuzzer processes 03:33:31 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x40090) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x51}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0xa02, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200080c1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000800)={0xfffffff7, [0x3, 0x1], 0x35b}, 0x10) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffe00}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x253}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffa75}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x40851}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000980)={{0x3, 0x7f}, 'port1\x00', 0x4, 0x40011, 0x8, 0x400, 0x4e15, 0x544, 0x7, 0x0, 0x0, 0x6}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a40)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b80), 0x28280, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000bc0)={'\x00', 0x8b, 0x0, 0x4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000c80)) 03:33:31 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x741080, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$CDROMRESET(r1, 0x5312) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0xe1, 0x40}, {0x40, 0x9}, 0x3, 0x4, 0x8}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xaded}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1a8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x84050) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000200)={@msf={0x9d, 0xe0, 0x8}, 0x1, 0x1}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf106}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004011) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000340)=0x8) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "174b0439ace8e033140424a6233241a23f416c0c48a943e1d2362293b28f151d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xa0204708}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x800) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r3) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r5, 0x12c, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) 03:33:32 executing program 2: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x2, 0x1}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x8, 0x2, 0x9d}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000100)) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) write$cgroup_int(r0, &(0x7f0000000180)=0x9, 0x12) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x103001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000200)={0x8, 0xfffffff8, 0x0, 'queue1\x00', 0x8}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000300)={{0xfffffffffffffffe, 0x6}, {0x2, 0x7fff}, 0xffff}) write$cgroup_int(r0, &(0x7f0000000340)=0x2a4b, 0x12) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8ce2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x4001) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x420202, 0x0) openat$cgroup_int(r2, &(0x7f0000000540)='memory.swap.max\x00', 0x2, 0x0) ioctl$sock_bt_hci(r1, 0x8002245b, &(0x7f0000000580)="ddb55f11c208ba71b2fb5e0e5b257c842f1efa2ffa2f0ff99afd91d7a54bf5bd13b66a161d8296a0efa83b5b2619dd716bbaa406da57abb1d871ec451a8740e183f27f88c5bd9bb737a4ade46786cdccf951c6b4d2459100128eeb4ae48dd3279b359c23646f3ea97ccddbad031f6251278e7017ddf8c02417448928554ab55af7c8583e02feff0193eab6dcba397ac0cb555affc28b809de94611dff0b05c4bb4477eb5ae8ae23fff406b165197547584dd16409446629e609c06e803a2aad96997f220b381b7e870b0f877f494ed0e1fff42f69513ab584a5b17d9cd584cdc7521462c7a68fc27a7a62383202fb8e2d909c9dd4d27e211") r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40fb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000002}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) [ 73.787212] audit: type=1400 audit(1738035212.051:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:33:32 executing program 3: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = socket(0x27, 0x4, 0x9) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4004011) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000001c0)="0f64767da01252ccdd66222419100ffa08c976cf011573ab3f2c5acdc4089a5a6a70213417cf9fb62042391d17ea9a7eedd3079096c41f4489dcb2f3f82e6d15488a496d62e7cdf7599c9fd5f50030c11e99a094d9ff46be563f5c8be9d81e7f25e19656476d531da1fa71ced324d55920b2bbb84dd13532678cb2c81547b598c4d162227f6233755f61ee83069481f68c2cc6ec3ef73c72c7") r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x200900, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x3, 0x5, 0x2}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000440)=@bca={0x3, 0xbc, "8bab9e033fe0bbbed8e9ef46b23c6ef61d47af793fdf57ccdc5cca0d72e8f0ec8660b6abec5b10d5711d6a0b53daf44fe0930967fc6cd20464000ff0b64272a518f0a25afb193ae33214ed9889ac30cea557fd666192f914aff3b7614f28520f48b0f131b8d885b6fccb29f1f289942e87300ef0444c90460366fd1e73ddbee362208da7faa233c2aa1e5df823bb06626c27f35199fab606bd08e7e4edf9f43280e55b99bc62ecf9f1f70a263b49a9738296d4f2abf187f98f44248c"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000d80)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/62, 0x3e, 0x1, &(0x7f0000000cc0)=""/136, 0x88}, &(0x7f0000000dc0)=0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x60, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd9a20b9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f80), 0xa22002, 0x0) ioctl$CDROMVOLREAD(r5, 0x5313, &(0x7f0000000fc0)) 03:33:32 executing program 4: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) sendmsg$802154_raw(r0, &(0x7f00000010c0)={&(0x7f0000000040), 0x14, &(0x7f0000001080)={&(0x7f0000000080)="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", 0x1000}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x509040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001140)={0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000011c0)={r2, 0x0, r3, 0xb6}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001200), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000001240)=r2) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000012c0)={0x535, 0x6, 0x0, {0x9, 0x9ad4}, 0x9, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001340)={{0x0, 0x9}, {0xf8, 0x61}, 0x4, 0xb2068f6cfa9ef90f, 0x3}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000013c0)={0x8, 0x1, 'client1\x00', 0xffffffff80000002, "986ec3b0a3fe1a60", "79f954f66cfda644e37e3532d09183a1d3108f009e54532a0f43baa907076bbd", 0x8, 0x6}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001480), 0x80840, 0x0) ioctl$CDROM_DEBUG(r6, 0x5330, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f00000014c0)=r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b93}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4004080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'vxcan0\x00'}) 03:33:32 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x100010, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000000)={@lba=0x3, 0x0, 0x1}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$CDROMRESET(r1, 0x5312) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000000c0)={0x100, 0x1}) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000100)=@hsc={0x1, 0x1, "b0b9b760e379f409fbd5"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/198, 0xc6, 0x0, &(0x7f0000000240)=""/251, 0xfb}, &(0x7f0000000380)=0x40) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000400)={0xc}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000008c0)={'\x00', 0x9, 0x3, 0x9}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x20000, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000980)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000e40)={0x0, 0x1, 0xfff}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 03:33:32 executing program 6: r0 = fork() getpgid(r0) shmget(0x3, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/253, 0xfd, 0x1, &(0x7f0000000180)=""/176, 0xb0}, &(0x7f0000000280)=0x40) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = getpgid(r0) move_pages(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x6) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) read$ptp(r3, &(0x7f0000000380)=""/26, 0x1a) wait4(r0, &(0x7f00000003c0), 0x8, 0x0) waitid(0x0, r0, 0x0, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x2001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0xa18, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4894) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x4042, 0x3, 0x8000}) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f00000007c0)) 03:33:32 executing program 7: ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SG_IO(r0, 0x2285, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0xf9, 0x1, @buffer={0x0, 0x1000, &(0x7f0000000080)=""/4096}, &(0x7f0000001080)="5611ff6e821fb92c656996907bc67148286a65742e6f1f15780ecd6ebf94b0cdb19ff3e81d0fbf6e6d6b742798f77a26a7d9f175b27725898e9683e30dd67df1618e9b0b64fbd2e6a17b5ff49a27f2911767a744ae49c118a280838d29fa5ec6d941a84b52334309cec82bb457dd983afffda3de68b2fa9977bc1c7a435e0b7305fa5730b1edd2911c7ce383162a03d3ed5bb87b794ed86a71236acfb32cbc80e4ae19c6d038f6c448b22c53e65180002fb1e4bd5c6e48a3a055d91f26c2c95718e0489d50aa02b4310a6522bb2bfdd1632e08226b24ab6bdb3c3590b566476bf07916632909f69bb68d0bead5cb62d3baf18f0bc678d25c15", &(0x7f0000001180)=""/4096, 0x6, 0x11, 0x1, &(0x7f0000002180)}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000002240)) r1 = syz_open_dev$sg(&(0x7f0000002280), 0x10001, 0x200400) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002540)={0x53, 0xffffffffffffffff, 0x9f, 0xb2, @buffer={0x0, 0xaa, &(0x7f00000022c0)=""/170}, &(0x7f0000002380)="5fc5a04810afb6e83cfc50bec3540f6efce194415bb46d910651b33838180358d92a0bb525302b641c61f3eec8833e00c17463ddb26021abb15d3191c1482d01b1e58fe2a18e7263ef7b828546528264ea43400e1d0af2ed1290c5099dc54ee7a4860867b4e0bde2a48ff363231d262280fc8238fa97ea20d2586e8ac76d20ef58140991e319027a677ef7286d070c19ac5abfd7ebe9615e53287aa97169a3", &(0x7f0000002440)=""/168, 0x7, 0x10006, 0x3, &(0x7f0000002500)}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000025c0)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002600), 0x400000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000002640)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000002680)) r3 = syz_open_dev$sg(&(0x7f00000026c0), 0xfff, 0x101000) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000002700)) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000002740)) r4 = syz_open_dev$sg(&(0x7f0000002780), 0x9, 0x125040) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f00000027c0)) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000002800)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x30, 0xffffffffffffffff, 0x8000000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) [ 75.325196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.330919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.332937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.335513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.337904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.339570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.342315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.345914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.347651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.353482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.360588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.365976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.373630] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.375104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.376466] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.378795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.380688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.380727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.402968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.407751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.412858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.424344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.427639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.452686] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.458913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.461214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.464236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.470446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.473898] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.482562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.487453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.490213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.496151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.498251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.501485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.503925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.508157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.508366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.512429] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.514547] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.532786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.541223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.544277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.546439] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.549881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.558964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.566355] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.568338] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.464754] Bluetooth: hci1: command tx timeout [ 77.464849] Bluetooth: hci0: command tx timeout [ 77.528100] Bluetooth: hci3: command tx timeout [ 77.529331] Bluetooth: hci2: command tx timeout [ 77.592218] Bluetooth: hci4: command tx timeout [ 77.592857] Bluetooth: hci5: command tx timeout [ 77.656137] Bluetooth: hci6: command tx timeout [ 77.656167] Bluetooth: hci7: command tx timeout [ 79.512173] Bluetooth: hci0: command tx timeout [ 79.512823] Bluetooth: hci1: command tx timeout [ 79.576155] Bluetooth: hci3: command tx timeout [ 79.576197] Bluetooth: hci2: command tx timeout [ 79.640120] Bluetooth: hci5: command tx timeout [ 79.641118] Bluetooth: hci4: command tx timeout [ 79.704482] Bluetooth: hci7: command tx timeout [ 79.704681] Bluetooth: hci6: command tx timeout [ 81.562135] Bluetooth: hci1: command tx timeout [ 81.563039] Bluetooth: hci0: command tx timeout [ 81.624399] Bluetooth: hci3: command tx timeout [ 81.625301] Bluetooth: hci2: command tx timeout [ 81.689414] Bluetooth: hci4: command tx timeout [ 81.689907] Bluetooth: hci5: command tx timeout [ 81.752191] Bluetooth: hci6: command tx timeout [ 81.753519] Bluetooth: hci7: command tx timeout [ 83.608076] Bluetooth: hci0: command tx timeout [ 83.608166] Bluetooth: hci1: command tx timeout [ 83.672232] Bluetooth: hci2: command tx timeout [ 83.672399] Bluetooth: hci3: command tx timeout [ 83.736234] Bluetooth: hci4: command tx timeout [ 83.739010] Bluetooth: hci5: command tx timeout [ 83.800183] Bluetooth: hci7: command tx timeout [ 83.800675] Bluetooth: hci6: command tx timeout [ 132.899679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.901023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.185041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.185688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.419012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.419677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.601058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.601712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.931557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.932249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.721032] [ 134.721248] ====================================================== [ 134.721763] WARNING: possible circular locking dependency detected [ 134.722286] 6.13.0-next-20250124 #1 Not tainted [ 134.722680] ------------------------------------------------------ [ 134.723502] kworker/u8:1/64 is trying to acquire lock: [ 134.724542] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 134.726726] [ 134.726726] but task is already holding lock: [ 134.728385] ffff888016ad8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 134.730472] [ 134.730472] which lock already depends on the new lock. [ 134.730472] [ 134.731996] [ 134.731996] the existing dependency chain (in reverse order) is: [ 134.732678] [ 134.732678] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 134.733292] __mutex_lock+0x13d/0xb50 [ 134.733698] wiphy_register+0x1b2e/0x25d0 [ 134.734131] ieee80211_register_hw+0x23a4/0x3d60 [ 134.734601] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 134.735098] init_mac80211_hwsim+0x389/0x870 [ 134.735566] do_one_initcall+0xf9/0x640 [ 134.735993] kernel_init_freeable+0x53d/0x7a0 [ 134.736457] kernel_init+0x1e/0x2d0 [ 134.736846] ret_from_fork+0x48/0x80 [ 134.737226] ret_from_fork_asm+0x1a/0x30 [ 134.737653] [ 134.737653] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 134.738190] __lock_acquire+0x29fd/0x4580 [ 134.738620] lock_acquire+0x19b/0x520 [ 134.739016] __mutex_lock+0x13d/0xb50 [ 134.739423] unregister_netdevice_many_notify+0x1612/0x1c80 [ 134.739963] unregister_netdevice_queue+0x224/0x2e0 [ 134.740448] _cfg80211_unregister_wdev+0x57b/0x700 [ 134.740958] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 134.741452] ieee80211_unregister_hw+0x55/0x3a0 [ 134.741911] hwsim_exit_net+0x3a0/0x730 [ 134.742319] ops_exit_list+0xb3/0x180 [ 134.742711] cleanup_net+0x546/0xad0 [ 134.743100] process_one_work+0x8ee/0x1a10 [ 134.743546] worker_thread+0x674/0xe70 [ 134.743964] kthread+0x3ab/0x720 [ 134.744346] ret_from_fork+0x48/0x80 [ 134.744720] ret_from_fork_asm+0x1a/0x30 [ 134.745174] [ 134.745174] other info that might help us debug this: [ 134.745174] [ 134.745902] Possible unsafe locking scenario: [ 134.745902] [ 134.746457] CPU0 CPU1 [ 134.746850] ---- ---- [ 134.747244] lock(&rdev->wiphy.mtx); [ 134.747599] lock(rtnl_mutex); [ 134.748102] lock(&rdev->wiphy.mtx); [ 134.748643] lock(rtnl_mutex); [ 134.748980] [ 134.748980] *** DEADLOCK *** [ 134.748980] [ 134.749513] 4 locks held by kworker/u8:1/64: [ 134.749893] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 134.750771] #1: ffff88800f36fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 134.751621] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 134.752416] #3: ffff888016ad8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 134.753332] [ 134.753332] stack backtrace: [ 134.753749] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 134.753789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 134.753811] Workqueue: netns cleanup_net [ 134.753852] Call Trace: [ 134.753861] [ 134.753873] dump_stack_lvl+0xca/0x120 [ 134.753931] print_circular_bug+0x47b/0x750 [ 134.753977] check_noncircular+0x2e9/0x3c0 [ 134.754020] ? __pfx_check_noncircular+0x10/0x10 [ 134.754061] ? hlock_class+0x4e/0x130 [ 134.754092] ? mark_lock+0xac/0xed0 [ 134.754131] ? srso_return_thunk+0x5/0x5f [ 134.754187] ? sched_clock+0x37/0x60 [ 134.754243] ? lockdep_lock+0xba/0x1b0 [ 134.754301] ? __pfx_lockdep_lock+0x10/0x10 [ 134.754363] __lock_acquire+0x29fd/0x4580 [ 134.754417] ? __pfx___lock_acquire+0x10/0x10 [ 134.754460] ? lock_release+0x20f/0x6f0 [ 134.754504] ? __pfx_lock_release+0x10/0x10 [ 134.754552] lock_acquire+0x19b/0x520 [ 134.754595] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 134.754644] ? __pfx_lock_acquire+0x10/0x10 [ 134.754688] ? srso_return_thunk+0x5/0x5f [ 134.754743] ? lock_release+0x20f/0x6f0 [ 134.754787] ? srso_return_thunk+0x5/0x5f [ 134.754842] ? lock_is_held_type+0x9e/0x120 [ 134.754897] ? srso_return_thunk+0x5/0x5f [ 134.754955] __mutex_lock+0x13d/0xb50 [ 134.755007] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 134.755052] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 134.755098] ? srso_return_thunk+0x5/0x5f [ 134.755153] ? synchronize_rcu_expedited+0x38a/0x420 [ 134.755198] ? __pfx___mutex_lock+0x10/0x10 [ 134.755251] ? __pfx_autoremove_wake_function+0x10/0x10 [ 134.755306] ? srso_return_thunk+0x5/0x5f [ 134.755361] ? kasan_quarantine_put+0x84/0x1e0 [ 134.755422] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.755457] ? srso_return_thunk+0x5/0x5f [ 134.755516] unregister_netdevice_many_notify+0x1612/0x1c80 [ 134.755561] ? __virt_addr_valid+0x2e8/0x5d0 [ 134.755614] ? __pfx_lock_release+0x10/0x10 [ 134.755659] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 134.755705] ? find_held_lock+0x2c/0x110 [ 134.755763] ? srso_return_thunk+0x5/0x5f [ 134.755820] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 134.755881] ? srso_return_thunk+0x5/0x5f [ 134.755936] ? lock_release+0x20f/0x6f0 [ 134.755980] ? __pfx_lock_release+0x10/0x10 [ 134.756023] ? srso_return_thunk+0x5/0x5f [ 134.756078] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 134.756125] ? srso_return_thunk+0x5/0x5f [ 134.756186] unregister_netdevice_queue+0x224/0x2e0 [ 134.756229] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 134.756272] ? up_write+0x195/0x520 [ 134.756327] _cfg80211_unregister_wdev+0x57b/0x700 [ 134.756379] ? srso_return_thunk+0x5/0x5f [ 134.756438] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 134.756477] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 134.756515] ? srso_return_thunk+0x5/0x5f [ 134.756570] ? srso_return_thunk+0x5/0x5f [ 134.756625] ? synchronize_rcu+0x1ff/0x260 [ 134.756668] ieee80211_unregister_hw+0x55/0x3a0 [ 134.756712] hwsim_exit_net+0x3a0/0x730 [ 134.756754] ? __pfx_hwsim_exit_net+0x10/0x10 [ 134.756811] ? srso_return_thunk+0x5/0x5f [ 134.756870] ? netdev_run_todo+0x788/0x1040 [ 134.756919] ? __pfx_hwsim_exit_net+0x10/0x10 [ 134.756962] ops_exit_list+0xb3/0x180 [ 134.757004] cleanup_net+0x546/0xad0 [ 134.757049] ? __pfx_cleanup_net+0x10/0x10 [ 134.757102] process_one_work+0x8ee/0x1a10 [ 134.757168] ? __pfx_lock_acquire+0x10/0x10 [ 134.757212] ? __pfx_process_one_work+0x10/0x10 [ 134.757271] ? srso_return_thunk+0x5/0x5f [ 134.757331] ? move_linked_works+0x172/0x270 [ 134.757376] ? srso_return_thunk+0x5/0x5f [ 134.757431] ? assign_work+0x196/0x240 [ 134.757488] worker_thread+0x674/0xe70 [ 134.757546] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 134.757598] ? srso_return_thunk+0x5/0x5f [ 134.757653] ? __pfx_worker_thread+0x10/0x10 [ 134.757713] kthread+0x3ab/0x720 [ 134.757764] ? __pfx_kthread+0x10/0x10 [ 134.757816] ? srso_return_thunk+0x5/0x5f [ 134.757871] ? finish_task_switch.isra.0+0x206/0x840 [ 134.757922] ? __pfx_kthread+0x10/0x10 [ 134.757976] ret_from_fork+0x48/0x80 [ 134.758007] ? __pfx_kthread+0x10/0x10 [ 134.758060] ret_from_fork_asm+0x1a/0x30 [ 134.758127] [ 137.015649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.017639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.020340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.021909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.025189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.026937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.032331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.035057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.036469] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.040487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.044282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.046777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.060141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.060267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.062658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.063627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.063672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.065903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.067894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.069069] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.070363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.071470] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.072887] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.076699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.088194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.091355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.092255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.094596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.096835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.099208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.137025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.143694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.146048] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.150748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.151891] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.153108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.253041] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.259063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.267046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.271237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.278074] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 137.283736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.334099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.344659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.350205] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.397776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.408315] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.416317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.096081] Bluetooth: hci1: command tx timeout [ 139.096101] Bluetooth: hci0: command tx timeout [ 139.160078] Bluetooth: hci3: command tx timeout [ 139.160116] Bluetooth: hci2: command tx timeout [ 139.224035] Bluetooth: hci5: command tx timeout [ 139.224054] Bluetooth: hci4: command tx timeout [ 139.352023] Bluetooth: hci7: command tx timeout [ 139.544020] Bluetooth: hci6: command tx timeout [ 141.144173] Bluetooth: hci0: command tx timeout [ 141.145061] Bluetooth: hci1: command tx timeout [ 141.208141] Bluetooth: hci2: command tx timeout [ 141.208371] Bluetooth: hci3: command tx timeout [ 141.272102] Bluetooth: hci5: command tx timeout [ 141.272882] Bluetooth: hci4: command tx timeout [ 141.400052] Bluetooth: hci7: command tx timeout [ 141.592237] Bluetooth: hci6: command tx timeout [ 143.192200] Bluetooth: hci1: command tx timeout [ 143.192219] Bluetooth: hci0: command tx timeout [ 143.256340] Bluetooth: hci2: command tx timeout [ 143.256374] Bluetooth: hci3: command tx timeout [ 143.320157] Bluetooth: hci5: command tx timeout [ 143.320587] Bluetooth: hci4: command tx timeout [ 143.448136] Bluetooth: hci7: command tx timeout [ 143.642022] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:34:33 Registers: info registers vcpu 0 RAX=0000000000000068 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f36ed20 R8 =0000000000000000 R9 =ffffed1001d66046 R10=0000000000000068 R11=3a6b636f6c206762 R12=0000000000000068 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557dc4872100 CR3=000000000eb02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=0000557dc48e34a00000557dc4911700 XMM05=00000000000000000000000000000000 XMM06=000000000000006563697665642e3369 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00002000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000009ac7b1 RBX=0000000000000009 RCX=0000000000040000 RDX=0000000001cfc940 RSI=000000000000cfd8 RDI=0000000000000003 RBP=000000c000041e10 RSP=000000c000041de8 R8 =00000000009ac7b1 R9 =0000000000000037 R10=0000000001f21248 R11=000000000000005b R12=0000000000000003 R13=000000000123be80 R14=0000000000000003 R15=0000000000000000 RIP=0000000000414764 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030410 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00030e000 CR3=000000000c672000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd0000000000000 XMM02=2f333839313331323138726964747365 XMM03=677a516a6f4b2e72656c6c616b7a7973 XMM04=00000000000000003fd3333333333333 XMM05=000000c00013c0f0000000c00013c0c0 XMM06=000000c00013c150000000c00013c120 XMM07=000000c00013b760000000c0000854d0 XMM08=000000c00013c4b0000000c00013c480 XMM09=000000c00013c510000000c00013c4e0 XMM10=000000c00013c540000000c000085530 XMM11=000000c00013c5a0000000c00013c570 XMM12=000000c00013c600000000c00013c5d0 XMM13=000000c00013c660000000c00013c630 XMM14=000000c00013c6c0000000c00013c690 XMM15=000000c0000dd080000000c00013c6f0