Warning: Permanently added '[localhost]:13018' (ECDSA) to the list of known hosts. 2025/01/19 21:21:59 fuzzer started 2025/01/19 21:22:00 dialing manager at localhost:44245 syzkaller login: [ 76.308044] cgroup: Unknown subsys name 'net' [ 76.375305] cgroup: Unknown subsys name 'cpuset' [ 76.395952] cgroup: Unknown subsys name 'rlimit' [ 81.719770] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 21:22:16 syscalls: 200 2025/01/19 21:22:16 code coverage: enabled 2025/01/19 21:22:16 comparison tracing: enabled 2025/01/19 21:22:16 extra coverage: enabled 2025/01/19 21:22:16 setuid sandbox: enabled 2025/01/19 21:22:16 namespace sandbox: enabled 2025/01/19 21:22:16 Android sandbox: enabled 2025/01/19 21:22:16 fault injection: enabled 2025/01/19 21:22:16 leak checking: enabled 2025/01/19 21:22:16 net packet injection: enabled 2025/01/19 21:22:16 net device setup: enabled 2025/01/19 21:22:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 21:22:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 21:22:16 USB emulation: enabled 2025/01/19 21:22:16 hci packet injection: enabled 2025/01/19 21:22:16 wifi device emulation: enabled 2025/01/19 21:22:16 802.15.4 emulation: enabled 2025/01/19 21:22:16 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 21:22:17 starting 8 fuzzer processes 21:22:17 executing program 1: r0 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x100000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x3c, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x3}, @dead_binder_done, @free_buffer={0x40086303, r0}, @enter_looper, @dead_binder_done], 0xe4, 0x0, &(0x7f0000000040)="68ebf2a78273f50e800711c416d472df8d845ba500399313ed2b732e133257f2927381c31f2e38d60cfbde0d2b41b84149884e97347287e99b6f778e77e9d377a48e2cd4058ed589222a9f2aa5c04d18341b5b507e75d45412ce51a8d96c90f332758b0682a5cd5891b7b3633229bcb7a5ff5ffde2ceb4583928dbc790ecff179beedaafbe3242a2333d0b3a9ef33e2b8a946a0368655051b4f23277ee4a1a374a34d75eac1de1243c2d2402771055e4dff77f8d44663e3d62dbb2cc42776eb9fe860521276d705f978959943e9e6d99ee01471ae0269a097def861d8566f451af2610fb"}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x24000081) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xc655) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x98, 0x0, &(0x7f0000000400)=[@free_buffer={0x40086303, r0}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/173, 0xad, 0x2, 0x8}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x40}, @dead_binder_done, @acquire={0x40046305, 0x2}, @exit_looper, @increfs, @increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r1}], 0x67, 0x0, &(0x7f00000004c0)="1fb4c072f1face0398842c408a2b5363c1514d2a38b51db95238b8707d84dcf2c580e0ed7223777423fdf2b35012dd28b5a05c6c96ccd985fe932f489cfde55aba780dc4ab330e3f4f1f168ce6801f5cc3ce5bc9e9cbcdfa1a20fac7dd24113858a280d863c992"}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x81) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xffff) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x6) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1e82e236}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffff84}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0x24000050) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0x741080, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x391166d9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x12}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x6800}, 0x10000884) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) connect$bt_l2cap(r2, &(0x7f0000000940)={0x1f, 0x1, @none, 0xfdd2, 0x2}, 0xe) r4 = syz_open_dev$loop(&(0x7f0000000980), 0x0, 0x307880) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) r5 = syz_open_dev$sg(&(0x7f00000009c0), 0x4, 0x100) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) 21:22:17 executing program 0: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x4d0, r0, 0x200, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f99dce9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b42}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x4680ce29) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000007c0), 0x40000, 0x0) ioctl$CDROMVOLREAD(r6, 0x5313, &(0x7f0000000800)) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0x902, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000ac0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001840)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000000ec0)={0x928, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x22c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0xfb, 0xcd, 0xdb}, {0x9, 0x8, 0x7f, 0x400}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf47}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r2}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x4}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1be0}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x928}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 21:22:17 executing program 3: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x911, 0x2, 0x0, 0x1, 0x2, 0x0, "2c1c20c649a9ccfc239a95694902e9950cf4bd625815b6f160d96d495e860aa37cb6127be5625427cf9473a28a2aaf0dddbda11c607e847cefd5064527ed0695", "289ee251e16505625e570cd84295168a38604f744e506d21abf577b6464802da014b74ef81242ed00b1b901f57704944f6fbc864ad4566c99f523be8d43ade53", "5563984eaa856103653f5ca180cb7844d49b2fa5de30eb48fa9fc49177f03e04", [0x100000001, 0x5]}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000140)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa3) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x480200, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x6, 0x7ff, 0x0, @mcast2, @private2, 0x7800, 0x20, 0x8, 0x8}}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x9, 0xdea4, 0x200, 0x1, 0xb, "ea75e6ceb40360a35d6b55262d12f9b719402d"}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000002c0)) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x1000, 0x428300) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x101800, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0xc20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48e0}, 0x20008004) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000480)={0xfffb, 0x3, 0x401}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xf9, 0x80, 0x6, 0x2, 0x0, 0x8001, 0x20, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000004c0), 0xe}, 0x8844, 0xfffffffffffffff9, 0x0, 0x2, 0x8, 0xc111, 0x7, 0x0, 0xed7c, 0x0, 0xfffffffffffffc00}, 0x0, 0xc, r1, 0x1) 21:22:17 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x6, 0x801, 0x0, 0x0, {0xe, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) r2 = add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="eef4e1204d764cc4d056fbd5ef18dd7933882e00babfd2502befab4776a172e4bfa3de07018cd20ecc2c7193a24bfe1bb0f1afde872852fb2239bebc2886adefecd69dc9a529b8d26f2e36c86cfd12ab28750b8f62c02a1910a43962faaf2bfbbb911e84979db62eab387ba52430ae235ea17c0f7f27dbe898c2b019e369ea048db8f76b966fbfa9d43c6deb4b12e775a2321836532b13d23019c33e91d3abcccbf369f32d5db9f8e431f9ecf865c5165d09728504d17e69eee5e5b03bc8aea8730d98e6bae66915e440c663206497879429678aed08e85349de88e22ed69e51243232f55fc0d558053f31cc79c18093", 0xf0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r2, r3) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x3, 0x14, "2db09c3240f9d159f234c06c25daf93315030d38722173287aff3913c81b8dedba0246199c63c613d5e1ee2636f714559b169a500f246741b1ca1d6ac1cfe7fe", "3695d85d88bd872f8c75ec8bd0d8c31475c713d129e21ae00340622dcb71a2cbc727d6744438b57926e5d716a0488889d5c0145a28e956eda2c1719492625a9b", "234550d1482141f4db4e7dadbe75e4a68a105e49d755c2715ea5078ee4696a96", [0x1, 0xfffffffffffffe00]}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3df}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$CDROMRESUME(r1, 0x5302) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000700)="ee74aabb0e8ea63e7d480ece07296b7019089ffb41560c5c98088517356986d97b6f77e438ac7ecdf9d4efe62c062c60c282d73983442940ee15f6cad1e4c6063ef23dcea12e48e15544c4738fa6b85923043bcd378f1262a11c72f37ffe35e077a002f1a4d843dbf88fcc676a15ce5258eb4a8386f7fcd885fa072777513379be024aff78c55f7e9da211d5d4b59f4b732563e8555897fc8ee2ecddda43d7b4e50fabacfd1c3021ca14ae") sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x80000, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000900)) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) [ 93.593966] audit: type=1400 audit(1737321737.678:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:22:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x708, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5e36}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c011) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x200008c0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x81) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', r3, 0x29, 0x7, 0x1c, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x8, 0x4, 0xac1b}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x274, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff797b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x3c}}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x8000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000dc0)) 21:22:17 executing program 5: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000040)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000000c0)={0x1f, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x2, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x402080, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008807}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4409c) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000440)) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = semget$private(0x0, 0x3, 0xf6) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x7, 0x409, 0x7, 0x1, 0xd, "24504e2a70a2b36ae0bdea9a0caae313632243"}) 21:22:17 executing program 6: socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create(0x10000) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x8, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8800) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x50b002, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x34, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa86}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044010}, 0x20041000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x715cb24d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x2, 0x1, 0x8000, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000006c0)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r5, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x2, 0x1, 0x23, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40, 0x7, 0x3, 0x34}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa4, 0x0, 0x410, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x93, 0x3f, 0x0, 0x1f}, {0x2b8, 0x41, 0x7, 0x3}, {0xfff, 0x9, 0x3, 0x527}]}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c5}, 0x1) 21:22:17 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x200000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000080)={0x8a, 0xf8, 0xa4, 0x7f, 0x3f, 0x5}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000b00)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x9, 0x1f, 0x18, "37c89d6422700caae5f6bfb81e0ad11d005dddd33173e0d49f788c1c04b0745af777d11b3158a33a7ce1da5d6a48a1565482bc5152cedfe82bd21ce08e31a44b", "3cf61915ee98d4ed3bf748afdb84b91c2d94271b1be2319f5b3bf807d67083088a3571225057c35dd7c3010e27ca5604d18a2236b20c06be8ee7196ca07e7b07", "3a08aabd0ef8f076054fc4d89cf49c9e82be0b6fa7c32989e3658886d73ec2de", [0x1f, 0x6]}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000c40)={0x7f}) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000c80)={@lba, 0x0, 0x2}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1008002}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x410e}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}]}, 0x34}}, 0x240408d1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x76e04e695a1d5add}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000f40)={0x4, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x30e3, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000f00), 0x4}, 0xa002, 0x1b, 0x100, 0x7, 0x2, 0x5, 0xebb, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x2, r0, 0x9) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x109040, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xb4, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc35}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x102dc00}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x4044) r4 = syz_open_dev$loop(&(0x7f0000001180), 0x0, 0x511000) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000011c0)={0x1, 0x8}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x100, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000001240)={0xffe1, 0xf12, 0x8}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000012c0)={0x0, {}, 0x0, {}, 0x76f, 0x9, 0x16, 0xc, "c293eb7c3cbd50678bce0ced2676e72f4c68d1cc1544b64cab0db8041351f1d6014047fb467a1a711bf6405570220c148babfc7d79f716039254ddd20bc6e0e7", "bb8edd2270ec850e9d3d87133b0256bc90f1f028dbd44ed471645010f44815b6", [0x10000, 0x8]}) [ 94.881498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.884960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.888077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.892333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.895038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.897802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.090972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.093963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.104112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.105129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.111522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.118029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.132380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.138716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.139053] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.147721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.148368] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.152577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.157836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.179453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.195364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.212409] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.215606] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.217820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.326077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.368636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.378452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.388624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.399818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.400128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.401854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.412466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.436437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.446529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.454633] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.471027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.484279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.492542] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.495566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.497600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.508446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.510188] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.510894] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.511732] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.520297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.542100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.547344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.552339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.973561] Bluetooth: hci0: command tx timeout [ 97.228680] Bluetooth: hci2: command tx timeout [ 97.229686] Bluetooth: hci1: command tx timeout [ 97.292246] Bluetooth: hci3: command tx timeout [ 97.485230] Bluetooth: hci4: command tx timeout [ 97.613641] Bluetooth: hci6: command tx timeout [ 97.614415] Bluetooth: hci7: command tx timeout [ 97.614763] Bluetooth: hci5: command tx timeout [ 99.020451] Bluetooth: hci0: command tx timeout [ 99.276395] Bluetooth: hci1: command tx timeout [ 99.278000] Bluetooth: hci2: command tx timeout [ 99.340452] Bluetooth: hci3: command tx timeout [ 99.533228] Bluetooth: hci4: command tx timeout [ 99.662207] Bluetooth: hci5: command tx timeout [ 99.662315] Bluetooth: hci7: command tx timeout [ 99.662419] Bluetooth: hci6: command tx timeout [ 101.068421] Bluetooth: hci0: command tx timeout [ 101.324372] Bluetooth: hci2: command tx timeout [ 101.324953] Bluetooth: hci1: command tx timeout [ 101.389183] Bluetooth: hci3: command tx timeout [ 101.580375] Bluetooth: hci4: command tx timeout [ 101.708275] Bluetooth: hci6: command tx timeout [ 101.708942] Bluetooth: hci7: command tx timeout [ 101.709057] Bluetooth: hci5: command tx timeout [ 103.116551] Bluetooth: hci0: command tx timeout [ 103.374203] Bluetooth: hci2: command tx timeout [ 103.374296] Bluetooth: hci1: command tx timeout [ 103.436308] Bluetooth: hci3: command tx timeout [ 103.630188] Bluetooth: hci4: command tx timeout [ 103.756261] Bluetooth: hci5: command tx timeout [ 103.756860] Bluetooth: hci7: command tx timeout [ 103.756906] Bluetooth: hci6: command tx timeout [ 152.769489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.769610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.934773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.934863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.097787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.097869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.220540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.220636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.351037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.351117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.531685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.531792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.672175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.672252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.407134] [ 154.407405] ====================================================== [ 154.408069] WARNING: possible circular locking dependency detected [ 154.408719] 6.13.0-rc7-next-20250117 #1 Not tainted [ 154.409253] ------------------------------------------------------ [ 154.409904] kworker/u8:1/66 is trying to acquire lock: [ 154.410458] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.411567] [ 154.411567] but task is already holding lock: [ 154.412200] ffff888034058768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 154.413242] [ 154.413242] which lock already depends on the new lock. [ 154.413242] [ 154.414055] [ 154.414055] the existing dependency chain (in reverse order) is: [ 154.414803] [ 154.414803] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 154.415502] __mutex_lock+0x13d/0xb50 [ 154.416001] wiphy_register+0x1b2e/0x25d0 [ 154.416837] ieee80211_register_hw+0x23a4/0x3d60 [ 154.418129] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 154.419440] init_mac80211_hwsim+0x389/0x870 [ 154.423534] do_one_initcall+0xf9/0x640 [ 154.424031] kernel_init_freeable+0x53d/0x7a0 [ 154.424553] kernel_init+0x1e/0x2d0 [ 154.424951] ret_from_fork+0x48/0x80 [ 154.425352] ret_from_fork_asm+0x1a/0x30 [ 154.425808] [ 154.425808] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 154.426384] __lock_acquire+0x29fd/0x4580 [ 154.426835] lock_acquire+0x19b/0x520 [ 154.427260] __mutex_lock+0x13d/0xb50 [ 154.427691] unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.430032] unregister_netdevice_queue+0x224/0x2e0 [ 154.430683] _cfg80211_unregister_wdev+0x57b/0x700 [ 154.431310] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 154.431936] ieee80211_unregister_hw+0x55/0x3a0 [ 154.432519] hwsim_exit_net+0x3a0/0x730 [ 154.433035] ops_exit_list+0xb3/0x180 [ 154.433529] cleanup_net+0x546/0xad0 [ 154.434033] process_one_work+0x8ee/0x1a10 [ 154.434614] worker_thread+0x674/0xe70 [ 154.435154] kthread+0x3ab/0x720 [ 154.435641] ret_from_fork+0x48/0x80 [ 154.436162] ret_from_fork_asm+0x1a/0x30 [ 154.436745] [ 154.436745] other info that might help us debug this: [ 154.436745] [ 154.437580] Possible unsafe locking scenario: [ 154.437580] [ 154.438227] CPU0 CPU1 [ 154.438743] ---- ---- [ 154.439287] lock(&rdev->wiphy.mtx); [ 154.439755] lock(rtnl_mutex); [ 154.440444] lock(&rdev->wiphy.mtx); [ 154.441175] lock(rtnl_mutex); [ 154.441597] [ 154.441597] *** DEADLOCK *** [ 154.441597] [ 154.442266] 4 locks held by kworker/u8:1/66: [ 154.442776] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 154.443974] #1: ffff88800bf6fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 154.445139] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 154.446207] #3: ffff888034058768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 154.447342] [ 154.447342] stack backtrace: [ 154.447867] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 154.448813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 154.449723] Workqueue: netns cleanup_net [ 154.450217] Call Trace: [ 154.450518] [ 154.450791] dump_stack_lvl+0xca/0x120 [ 154.451281] print_circular_bug+0x47b/0x750 [ 154.451815] check_noncircular+0x2e9/0x3c0 [ 154.452324] ? __pfx_check_noncircular+0x10/0x10 [ 154.452882] ? hlock_class+0x4e/0x130 [ 154.453334] ? mark_lock+0xac/0xed0 [ 154.453777] ? srso_return_thunk+0x5/0x5f [ 154.454303] ? lockdep_lock+0x183/0x1b0 [ 154.454808] ? __pfx_lockdep_lock+0x10/0x10 [ 154.455348] __lock_acquire+0x29fd/0x4580 [ 154.455875] ? __pfx___lock_acquire+0x10/0x10 [ 154.456380] ? lock_release+0x20f/0x6f0 [ 154.456841] ? __pfx_lock_release+0x10/0x10 [ 154.457332] lock_acquire+0x19b/0x520 [ 154.457768] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.458409] ? __pfx_lock_acquire+0x10/0x10 [ 154.458937] ? srso_return_thunk+0x5/0x5f [ 154.459463] ? lock_release+0x20f/0x6f0 [ 154.459968] ? srso_return_thunk+0x5/0x5f [ 154.460475] ? lock_is_held_type+0x9e/0x120 [ 154.461004] ? srso_return_thunk+0x5/0x5f [ 154.461533] __mutex_lock+0x13d/0xb50 [ 154.462011] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.462691] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.463368] ? srso_return_thunk+0x5/0x5f [ 154.463893] ? synchronize_rcu_expedited+0x38a/0x420 [ 154.464488] ? __pfx___mutex_lock+0x10/0x10 [ 154.465011] ? __pfx_autoremove_wake_function+0x10/0x10 [ 154.465650] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 154.466191] unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.466849] ? __virt_addr_valid+0x2e8/0x5d0 [ 154.467394] ? __pfx_lock_release+0x10/0x10 [ 154.467927] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 154.468622] ? find_held_lock+0x2c/0x110 [ 154.469127] ? srso_return_thunk+0x5/0x5f [ 154.469636] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 154.470228] ? srso_return_thunk+0x5/0x5f [ 154.470717] ? lock_release+0x20f/0x6f0 [ 154.471176] ? __pfx_lock_release+0x10/0x10 [ 154.471665] ? srso_return_thunk+0x5/0x5f [ 154.472228] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 154.472851] ? srso_return_thunk+0x5/0x5f [ 154.473371] unregister_netdevice_queue+0x224/0x2e0 [ 154.473949] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 154.474592] ? up_write+0x195/0x520 [ 154.475057] _cfg80211_unregister_wdev+0x57b/0x700 [ 154.475652] ? srso_return_thunk+0x5/0x5f [ 154.476188] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 154.476787] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 154.477431] ? srso_return_thunk+0x5/0x5f [ 154.477944] ? srso_return_thunk+0x5/0x5f [ 154.478456] ? synchronize_rcu+0x1ff/0x260 [ 154.478966] ieee80211_unregister_hw+0x55/0x3a0 [ 154.479526] hwsim_exit_net+0x3a0/0x730 [ 154.480019] ? __pfx_hwsim_exit_net+0x10/0x10 [ 154.480557] ? srso_return_thunk+0x5/0x5f [ 154.481068] ? netdev_run_todo+0x788/0x1040 [ 154.481588] ? __pfx_hwsim_exit_net+0x10/0x10 [ 154.482118] ops_exit_list+0xb3/0x180 [ 154.482575] cleanup_net+0x546/0xad0 [ 154.483032] ? __pfx_cleanup_net+0x10/0x10 [ 154.483550] process_one_work+0x8ee/0x1a10 [ 154.484098] ? __pfx_lock_acquire+0x10/0x10 [ 154.484626] ? __pfx_process_one_work+0x10/0x10 [ 154.485186] ? srso_return_thunk+0x5/0x5f [ 154.485708] ? move_linked_works+0x172/0x270 [ 154.486236] ? srso_return_thunk+0x5/0x5f [ 154.486741] ? assign_work+0x196/0x240 [ 154.487216] worker_thread+0x674/0xe70 [ 154.487710] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 154.488359] ? srso_return_thunk+0x5/0x5f [ 154.488889] ? __pfx_worker_thread+0x10/0x10 [ 154.489461] kthread+0x3ab/0x720 [ 154.489915] ? __pfx_kthread+0x10/0x10 [ 154.490414] ? srso_return_thunk+0x5/0x5f [ 154.490936] ? finish_task_switch.isra.0+0x206/0x840 [ 154.491559] ? __pfx_kthread+0x10/0x10 [ 154.492072] ret_from_fork+0x48/0x80 [ 154.492531] ? __pfx_kthread+0x10/0x10 [ 154.492925] ret_from_fork_asm+0x1a/0x30 [ 154.493497] [ 156.757391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.759598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.762515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.766792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.772782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.774905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.841560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.849309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.849466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.850706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.850962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.855938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.861364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.861830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.863310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.863753] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.866341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.866793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.884212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.897626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.901562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.909573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.913423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.915049] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.917285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.918697] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.920463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.923067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.924958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.928827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.929376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.930082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.935440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.941399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.948039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.952525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.960238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.960565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.973726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.974580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.974886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.981640] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.981793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.985811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.985964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.989291] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.998763] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.017284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.796892] Bluetooth: hci0: command tx timeout [ 158.924216] Bluetooth: hci1: command tx timeout [ 158.924501] Bluetooth: hci4: command tx timeout [ 159.052197] Bluetooth: hci7: command tx timeout [ 159.052496] Bluetooth: hci5: command tx timeout [ 159.052558] Bluetooth: hci6: command tx timeout [ 159.052619] Bluetooth: hci3: command tx timeout [ 159.052669] Bluetooth: hci2: command tx timeout [ 160.845208] Bluetooth: hci0: command tx timeout [ 160.972182] Bluetooth: hci1: command tx timeout [ 160.972720] Bluetooth: hci4: command tx timeout [ 161.100285] Bluetooth: hci2: command tx timeout [ 161.100349] Bluetooth: hci3: command tx timeout [ 161.100414] Bluetooth: hci6: command tx timeout [ 161.100464] Bluetooth: hci5: command tx timeout [ 161.102205] Bluetooth: hci7: command tx timeout [ 162.893183] Bluetooth: hci0: command tx timeout [ 163.020327] Bluetooth: hci1: command tx timeout [ 163.020461] Bluetooth: hci4: command tx timeout [ 163.150269] Bluetooth: hci7: command tx timeout [ 163.150873] Bluetooth: hci5: command tx timeout [ 163.150948] Bluetooth: hci6: command tx timeout [ 163.150998] Bluetooth: hci3: command tx timeout [ 163.151046] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 21:23:18 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800bf6eb38 R8 =0000000000000001 R9 =ffffed10017edd57 R10=0000000000000030 R11=0000000020202020 R12=0000000000000030 R13=0000000000000001 R14=ffff888008fea020 R15=ffff88800bf6ee38 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbfbad64000 CR3=00000000166d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040f60a8000000000 XMM03=756d707876392e72656c6c616b7a7973 XMM04=000000c000144090000000c000144060 XMM05=000000c0001440f0000000c0001440c0 XMM06=000000c000144150000000c000144120 XMM07=000000c000143760000000c0000854d0 XMM08=000000c0001444b0000000c000144480 XMM09=000000c000144510000000c0001444e0 XMM10=000000c000144540000000c000085530 XMM11=000000c0001445a0000000c000144570 XMM12=000000c000144600000000c0001445d0 XMM13=000000c000144660000000c000144630 XMM14=000000c0001446c0000000c000144690 XMM15=000000c0000e5080000000c0001446f0 info registers vcpu 1 RAX=ffff88800bf2b780 RBX=ffff8880731ffcc0 RCX=ffffffff81429a4a RDX=1ffff11001817b00 RSI=0000000000000008 RDI=ffff88800c0bd800 RBP=ffffffffffffffff RSP=ffff88800f227dd0 R8 =0000000000000000 R9 =ffffed1001817b00 R10=ffff88800c0bd807 R11=0000000000000000 R12=ffff8880731ffff9 R13=ffffffff8864a430 R14=ffff88800bf2b780 R15=0000000000000086 RIP=ffffffff81aedd9a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0057a5000 CR3=00000000166d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=37323332363236353672696474736574 XMM02=2f373233323632363536726964747365 XMM03=5052503665632e72656c6c616b7a7973 XMM04=000000c000144090000000c000144060 XMM05=000000c0001440f0000000c0001440c0 XMM06=000000c000144150000000c000144120 XMM07=000000c000143760000000c0000854d0 XMM08=000000c0001444b0000000c000144480 XMM09=000000c000144510000000c0001444e0 XMM10=000000c000144540000000c000085530 XMM11=000000c0001445a0000000c000144570 XMM12=000000c000144600000000c0001445d0 XMM13=000000c000144660000000c000144630 XMM14=000000c0001446c0000000c000144690 XMM15=000000c0000e5080000000c0001446f0