Warning: Permanently added '[localhost]:51420' (ECDSA) to the list of known hosts. 2025/01/21 04:04:42 fuzzer started 2025/01/21 04:04:42 dialing manager at localhost:44833 syzkaller login: [ 61.230180] cgroup: Unknown subsys name 'net' [ 61.318887] cgroup: Unknown subsys name 'cpuset' [ 61.349300] cgroup: Unknown subsys name 'rlimit' [ 68.384584] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 78.510496] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 04:05:00 syscalls: 201 2025/01/21 04:05:00 code coverage: enabled 2025/01/21 04:05:00 comparison tracing: enabled 2025/01/21 04:05:00 extra coverage: enabled 2025/01/21 04:05:00 setuid sandbox: enabled 2025/01/21 04:05:00 namespace sandbox: enabled 2025/01/21 04:05:00 Android sandbox: enabled 2025/01/21 04:05:00 fault injection: enabled 2025/01/21 04:05:00 leak checking: enabled 2025/01/21 04:05:00 net packet injection: enabled 2025/01/21 04:05:00 net device setup: enabled 2025/01/21 04:05:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 04:05:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 04:05:00 USB emulation: enabled 2025/01/21 04:05:00 hci packet injection: enabled 2025/01/21 04:05:00 wifi device emulation: enabled 2025/01/21 04:05:00 802.15.4 emulation: enabled 2025/01/21 04:05:00 fetching corpus: 0, signal 0/0 (executing program) 2025/01/21 04:05:02 starting 8 fuzzer processes 04:05:02 executing program 0: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "94032ae83068b802", "1a37c49605afa73481ed9b7ee0a08e99ad240826ba555403f88815c3826d500f", "f0cbd45c", "7404c88a553b170a"}, 0x38) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x80, &(0x7f0000000040)={[{0x7c, 0x4e00, "7d1665fe1c11d60796384b5b0f590db99310c4160de8eadeb10f29cb58135c18136a07097bc0637d04a4841cb6ac84c1ca9892c11405719332cdc71716435f68caf69e81ed639d799fceaf2837ff86f7f15e2481ba0153bc9b52b47f111fd33403b766a0a55d8183d45ffdd0375c6ab978af326e3dde47d61b0cb1b8"}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000000c0)=0x7fff, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "bde1256dfb9754ab", "9e324f383d311aca888027e9d363cff5", "f0b5f170", "33717e580f5e7187"}, 0x28) geteuid() ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000140)={0x9, 0x1, 0xd7, 0x6}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4f, 0x0, "38db425b44836f5b7f51266b2296dbfe035d0c05204ade3e3279007fcd5ec376552abed1a9d76c99044751c0442797bf209ce52afca5944764b69bc96aaa4d3bf490229ba3640fc2bfd28afbfe51e121"}, 0xd8) r2 = syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000003c0)) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000400)=@lstk={0x7, 0x0, "e15fac9016", 0x1, 0x0, 0x0, 0x3}) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f00000004c0)={@lba=0x9, 0x0, 0x49, &(0x7f0000000440)=""/73}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) ioctl$CDROM_DISC_STATUS(r3, 0x5327) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000540)={0x0, {}, 0x0, {}, 0x1, 0x1, 0x1, 0x1, "04cf85dc6774683fa65ec02fa3129f3917d9a9a2446419ce31158e52f9c258a6c0e6b6649caac071f0943c634fa1c7700139247e19712df9694de1551ca46f40", "c528a616b80800d7d0831ab0c15daee6951c9ce4af922c595eaff717e4cb7ad4", [0x1, 0x5]}) r4 = syz_io_uring_complete(0x0) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000600), 0x0, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000640)) 04:05:02 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x91442483}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x24000045) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000900) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000884) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x44}}, 0x1) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x9}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hald_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000051}, 0x48891) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r6) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4044010) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r5) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 04:05:02 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x800, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000800}, 0x4000000) 04:05:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) r1 = socket$inet(0x2, 0x6, 0x40) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfffffffa}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @private}, &(0x7f0000000300)=0xc) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4041) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r4, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004040) openat$cgroup_type(r2, &(0x7f00000005c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20010800) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x1ff, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socketpair(0x1f, 0x3, 0x200, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x6, &(0x7f0000001080)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x88d5, r8, &(0x7f00000009c0)="6064cd92a9ae1d6c7aae2d5013ae7ab4825ab98889b37fb2a950092c3ba97ed3d95b5a3491ff7696c212805d96c3cb59b699d1f65b2b373f932f6bf12c27f73e5954d95142baec69b6d08459baeb933564d25bd38319f5c74a47402dd0dd5878c6e3f28d791ccb26448e7abace78a223d3ae23e69bf7e97ab46ee66e6b9735ccfd0bd35710f54c478a5599b66c7e6c305584665499bceb82df3055fbb349d6d028ce9b1a7143c77f0f000cd2ec4d0fae843449457e4ff3667154392ac76a41c99bcb33960fd3224409d3dc2ea3d9f7e410d0e6421d4fb4da0130", 0xda, 0x5}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x8, 0x1f, r0, &(0x7f0000000b00)="76f727b3c237fa83c2b4dcd9b058e4f74942feaefc329143addf511921d44f612842a1826d8f0a41618e2e05f7d0ab8487de953c16db8395f62addb45b7d30d764e69170d6b72a2fd418dc9f5c1a099fa9305ca968158453c057a53d337b884c8c8a158c45c9fdaec364dc5ab1b355a55231aad6513ad3027aaaed17d78ef74ea0ce1606947c5987e31fad0588b84c5512e48737188656175e1ed693fa259fee238ece69e114a4a696346ba1e7697af1ff85ed2689ccb37c87", 0xb9, 0x8, 0x0, 0x0, r7}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x6, 0x7fff, 0xffffffffffffffff, &(0x7f0000000c40)="500e06bc5748059f617f275bc612737617a82a2a228da980929678d1f94129277a03465757df7c296c724bdbf37c4387d17f362a01740288392edffe2dd2ae5dad3498acf80c35041dcb851ee26f8c8ef824b62c5ec6605141bb1635bcdc632e35f57cf7d9e2328b0460bda413f786ce33ea88ae78406cefc4b7bd16aa0bd6b82932ce74da00f6bc043ccc3e3366967205a62c963d38b5e545551be9f3bc56afd096ced46186e8ceea2386e061457186a9817e227801ded9fa07427b9b58bb714141aa9382a8efcda8b8e4ebd915a90ee581fe0efa4f9475e297bd25ca7ba1449b2c1eaa392c98709c8d68a44f8f1ffe376aa959833b63a66cf3c97a3c", 0xfd, 0x4, 0x0, 0x1}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x5, 0x7, r5, &(0x7f0000000d80)="64b7d8ae57d6efffe189df424d7b53eee5450ff222131339409590e4c759712baa771a3bd25a44a689e3b9005dbddd624efc2a72bf90e7a330e8cb687dbb07495dd76c6948a4d539917f47ade7595298ee64670dbce0b7457b57e558d62e8152f69f64", 0x63, 0xae}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x3, 0x20, r0, &(0x7f0000000e80)="e779a4379e25036e3fc501994fd1b623771a3543fa771fdfa6bca8", 0x1b, 0x80000001, 0x0, 0x2}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x6, r7, &(0x7f0000000f00)="0e51d88f192ee68b1b89dad603ca394f3a47cd4f79cc905f11102a33cdf493d2c2eaca354c37576c6d297daa18d21a4dc87c6b759f417e11906bf19d72254d95be8088b49f149eeb61bd92d70e985a0deb690b5473785ff266cb8caededbf4d2af7387faf913c8366bb2627889d70ed456de45bb478ae64d2991564b629b5dff018821a0d889b1d280c50b268e7304eb9c95820a2dc300f111a34c60dc4e2feec56a939421fc864a1c8002ef8c8a38cecfc1bf9a8dba48087963f31d0fd70631863d2b119b2ec4df9f36bbe2aafcbc9772", 0xd1, 0x7, 0x0, 0x2}]) 04:05:02 executing program 4: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x6, 0x8, "1647ef6f520f6098036ec4c1d466d375bde6d87d8bbf17c01bc8d7af271d753c2f597d318bb4ded8130daccdf94a5d4a643d9c4b4395badf51cb99382e54d9ee", "76eead5083200e26cd5900eef92d80492c200106d90e77428e4b1189f99b46be09a3ac8d97495d5837c37cb251a387089031a33ba0c0f2a42112fe4dbcb115a6", "46fdc72e2aebd30c873585aea4620998b60c4766ca83a867b43313700994a3e0", [0x5, 0x8000]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000340)={"a2d78ac8c4050ae24a781dcc", &(0x7f0000000240)="04c112cb2ac712c24ae9ee53f505f980d30c1c74523b0f7bbea1c258ef9366bf325102adac4a0cf910d8e3f14805191f2eead69673e69d01349f7032929763ba1113b6ed9e3988501b4cce54a8d1e83d", 0x50, 0xffffffe0, &(0x7f00000002c0)={0x3a, 0x0, 0x2, 0x2, 0x0, 0x1, 0x0, "f78aa9ec", 0x3, "2f71c161", 0x4, 0x0, 0x2, "c5ed7d", "cf44569fe43825acb0a96f17fee8c2076a9a58dce6e1f923e9779ac753d8f9ea1d5c6079ded87468e3bad1cf0553"}, 0x2, 0x6, 0x4, &(0x7f0000000300)}) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x7ff, 0x1) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xde, 0x3, 0x0, 0x4, 0x13, 0x1, "0892e3effea8c2e528d3e0bfd00a41919a5898ee141f7d8250d66a8ef69fc77e5689ad09ca9d467b38164415c9bc97339c2da44240d6af02a7f851c688b2cc8b", "7acad3a61ae109594b8480d3c92a1f052c5a45f460b65b3a176f726a32460767c0c00be5ebad7a76ccf07d617338e4be1106a58674ef0721e97e94d7d7978015", "85885f8f61b70f4ac7559a121b87eb59c389f146e9d8c3f1ec09538ae188052d", [0x9, 0xe9]}) pipe2(&(0x7f00000004c0), 0x84800) syz_io_uring_complete(0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000500)={0x1, 0x5, 0xf6, 0x0, 0x5, 0x9}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000f80)) r2 = getpid() tgkill(r2, 0xffffffffffffffff, 0x35) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x3, 0x4, 0x9, &(0x7f0000001040)={0xffffffffffffffff}) getsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f0000001080)=""/247, &(0x7f0000001180)=0xf7) setgid(0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r3) get_robust_list(r2, &(0x7f0000001300)=&(0x7f00000012c0)={&(0x7f0000001240)={&(0x7f0000001200)}, 0x0, &(0x7f0000001280)}, &(0x7f0000001340)=0x18) [ 80.243212] audit: type=1400 audit(1737432302.201:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:05:02 executing program 5: recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/79, 0x4f, 0x2, &(0x7f0000000080)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x4}, 0x4) ioctl$CDROMRESET(r0, 0x5312) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000140)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1, 0x1, 0x1, 0x9, 0x7fff, 0x4, 0xb96}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req={0x2, 0x5, 0x8, 0x4}, 0x10) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000200)={0x20, 0x8d, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000280)={0x2, 0xc8, 0x8, 0xff}) ioctl$CDROMPAUSE(r1, 0x5301) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000300)={@lba=0x30, 0x1, 0x1e, &(0x7f00000002c0)=""/30}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x43, 0x0) ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000000380)) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000400)={0x1, 0x3f, 0x1e, 0x3, 0x1, 0x6}) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) 04:05:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x80000001, 0x955, 0x9, 0xffff}, 0x14) getuid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x8, 0x3, 0xffff, 0xffff, 0x8}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, "33c2605352bfc45f", "25590f4f2bbbf92211fc4fac100c81019219fa68b75454797c4c6e277ff60896", "1c970cfd", "6150ea73fb0867ab"}, 0x38) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81800) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x8) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x101, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6f, 0x7c32, 0x6, 0x8001}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000040) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000001, 0x9, 0x0, 0x5, 0x12, 0x0, "e41d2eea65b7a9de3279ea544a5fe4e6792250d8f3ff85e6a246ec79f05d8bc1d5f98d589e802bdc271146602503dab0504b6223d09b7d3cafb2eba948f45b0a", "953c7ff50f2163ff8437143b9f7f296d45dc0e700c6db9deadc6843c81c658c0f00ddefb377926df3a99866e75e783d43ce75783969e68b41e23675ac6a19ba7", "c39029130972a0ff87225545bdd38e71a1d1a215ff856916dc8204e340c17897", [0x42e, 0x10000]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000680)='bbr\x00', 0x4) 04:05:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x2000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x200, @bearer=@l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x3000c000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x32e, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:policy_config_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x81) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008020}, 0x4040) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0xb965fe24db7c979, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4841}, 0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x4000014) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r1) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000dc0)={0x0, 0x1, 0x6}, 0x10) [ 81.678238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.684891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.687232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.694646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.700719] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.703639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.746757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.756941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.761828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.773628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.778793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.781597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.818807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.821832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.822731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.825219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.828345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.829272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.830888] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.831810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.836770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.838736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.839835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.844647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.845496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.847464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.848156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.850054] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.850890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.852788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.857020] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.865644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.867027] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.868694] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.873335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.876184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.886814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.889306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.893079] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.896787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.897191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.919941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.920969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.928106] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.933764] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.937076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.987888] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.990078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.763794] Bluetooth: hci0: command tx timeout [ 83.891474] Bluetooth: hci2: command tx timeout [ 83.892322] Bluetooth: hci1: command tx timeout [ 83.955639] Bluetooth: hci7: command tx timeout [ 84.019679] Bluetooth: hci4: command tx timeout [ 84.020353] Bluetooth: hci6: command tx timeout [ 84.021541] Bluetooth: hci5: command tx timeout [ 84.022139] Bluetooth: hci3: command tx timeout [ 85.812469] Bluetooth: hci0: command tx timeout [ 85.940335] Bluetooth: hci2: command tx timeout [ 85.940535] Bluetooth: hci1: command tx timeout [ 86.003631] Bluetooth: hci7: command tx timeout [ 86.067665] Bluetooth: hci3: command tx timeout [ 86.069340] Bluetooth: hci5: command tx timeout [ 86.069829] Bluetooth: hci6: command tx timeout [ 86.069911] Bluetooth: hci4: command tx timeout [ 87.859551] Bluetooth: hci0: command tx timeout [ 87.987846] Bluetooth: hci1: command tx timeout [ 87.987993] Bluetooth: hci2: command tx timeout [ 88.051731] Bluetooth: hci7: command tx timeout [ 88.115938] Bluetooth: hci4: command tx timeout [ 88.116245] Bluetooth: hci6: command tx timeout [ 88.116718] Bluetooth: hci3: command tx timeout [ 88.116823] Bluetooth: hci5: command tx timeout [ 89.907452] Bluetooth: hci0: command tx timeout [ 90.035858] Bluetooth: hci2: command tx timeout [ 90.035949] Bluetooth: hci1: command tx timeout [ 90.100557] Bluetooth: hci7: command tx timeout [ 90.163512] Bluetooth: hci5: command tx timeout [ 90.164073] Bluetooth: hci3: command tx timeout [ 90.164638] Bluetooth: hci6: command tx timeout [ 90.164709] Bluetooth: hci4: command tx timeout [ 138.169652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.169774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.313549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.313627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.571580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.571663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.833501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.833585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.206537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.206621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.460251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.460335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 04:06:01 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x800, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000800}, 0x4000000) 04:06:02 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x800, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000800}, 0x4000000) 04:06:02 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x800, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000800}, 0x4000000) [ 140.582798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.582876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.703966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.704039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.875585] [ 140.875847] ====================================================== [ 140.876445] WARNING: possible circular locking dependency detected [ 140.877047] 6.13.0-rc7-next-20250120 #1 Not tainted [ 140.877524] ------------------------------------------------------ [ 140.878899] kworker/u8:0/11 is trying to acquire lock: [ 140.880043] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.881956] [ 140.881956] but task is already holding lock: [ 140.883358] ffff8880350b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 140.885091] [ 140.885091] which lock already depends on the new lock. [ 140.885091] [ 140.886473] [ 140.886473] the existing dependency chain (in reverse order) is: [ 140.887958] [ 140.887958] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 140.888606] __mutex_lock+0x13d/0xb50 [ 140.889064] wiphy_register+0x1b2e/0x25d0 [ 140.889559] ieee80211_register_hw+0x23a4/0x3d60 [ 140.890088] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 140.890647] init_mac80211_hwsim+0x389/0x870 [ 140.891163] do_one_initcall+0xf9/0x640 [ 140.891660] kernel_init_freeable+0x53d/0x7a0 [ 140.892178] kernel_init+0x1e/0x2d0 [ 140.892603] ret_from_fork+0x48/0x80 [ 140.893026] ret_from_fork_asm+0x1a/0x30 [ 140.893506] [ 140.893506] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 140.894117] __lock_acquire+0x29fd/0x4580 [ 140.894595] lock_acquire+0x19b/0x520 [ 140.895038] __mutex_lock+0x13d/0xb50 [ 140.895497] unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.896114] unregister_netdevice_queue+0x224/0x2e0 [ 140.896661] _cfg80211_unregister_wdev+0x57b/0x700 [ 140.897214] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 140.897760] ieee80211_unregister_hw+0x55/0x3a0 [ 140.898342] hwsim_exit_net+0x3a0/0x730 [ 140.898803] ops_exit_list+0xb3/0x180 [ 140.899246] cleanup_net+0x546/0xad0 [ 140.899692] process_one_work+0x8ee/0x1a10 [ 140.900187] worker_thread+0x674/0xe70 [ 140.900656] kthread+0x3ab/0x720 [ 140.901071] ret_from_fork+0x48/0x80 [ 140.901501] ret_from_fork_asm+0x1a/0x30 [ 140.901982] [ 140.901982] other info that might help us debug this: [ 140.901982] [ 140.902725] Possible unsafe locking scenario: [ 140.902725] [ 140.903298] CPU0 CPU1 [ 140.903760] ---- ---- [ 140.904211] lock(&rdev->wiphy.mtx); [ 140.904618] lock(rtnl_mutex); [ 140.905205] lock(&rdev->wiphy.mtx); [ 140.905831] lock(rtnl_mutex); [ 140.906191] [ 140.906191] *** DEADLOCK *** [ 140.906191] [ 140.906767] 4 locks held by kworker/u8:0/11: [ 140.907207] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 140.908238] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 140.909226] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 140.910138] #3: ffff8880350b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 140.911170] [ 140.911170] stack backtrace: [ 140.911622] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1 [ 140.912430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.913210] Workqueue: netns cleanup_net [ 140.913629] Call Trace: [ 140.913883] [ 140.914111] dump_stack_lvl+0xca/0x120 [ 140.914533] print_circular_bug+0x47b/0x750 [ 140.914976] check_noncircular+0x2e9/0x3c0 [ 140.915401] ? __pfx_check_noncircular+0x10/0x10 [ 140.915880] ? hlock_class+0x4e/0x130 [ 140.916257] ? mark_lock+0xac/0xed0 [ 140.916626] ? srso_return_thunk+0x5/0x5f [ 140.917058] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 140.917518] ? lockdep_lock+0xba/0x1b0 [ 140.917937] ? __pfx_lockdep_lock+0x10/0x10 [ 140.918385] __lock_acquire+0x29fd/0x4580 [ 140.918814] ? __pfx___lock_acquire+0x10/0x10 [ 140.919261] ? lock_release+0x20f/0x6f0 [ 140.919676] ? __pfx_lock_release+0x10/0x10 [ 140.920112] lock_acquire+0x19b/0x520 [ 140.920503] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.921079] ? __pfx_lock_acquire+0x10/0x10 [ 140.921512] ? srso_return_thunk+0x5/0x5f [ 140.921943] ? lock_release+0x20f/0x6f0 [ 140.922343] ? srso_return_thunk+0x5/0x5f [ 140.922769] ? lock_is_held_type+0x9e/0x120 [ 140.923216] ? srso_return_thunk+0x5/0x5f [ 140.923658] __mutex_lock+0x13d/0xb50 [ 140.924054] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.924624] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.925195] ? srso_return_thunk+0x5/0x5f [ 140.925626] ? synchronize_rcu_expedited+0x38a/0x420 [ 140.926127] ? __pfx___mutex_lock+0x10/0x10 [ 140.926573] ? __pfx_autoremove_wake_function+0x10/0x10 [ 140.927105] ? srso_return_thunk+0x5/0x5f [ 140.927530] ? kasan_quarantine_put+0x84/0x1e0 [ 140.928016] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 140.928463] ? srso_return_thunk+0x5/0x5f [ 140.928896] unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.929447] ? __virt_addr_valid+0x2e8/0x5d0 [ 140.929898] ? __pfx_lock_release+0x10/0x10 [ 140.930325] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 140.930907] ? find_held_lock+0x2c/0x110 [ 140.931327] ? srso_return_thunk+0x5/0x5f [ 140.931765] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 140.932262] ? srso_return_thunk+0x5/0x5f [ 140.932694] ? lock_release+0x20f/0x6f0 [ 140.933093] ? __pfx_lock_release+0x10/0x10 [ 140.933518] ? srso_return_thunk+0x5/0x5f [ 140.933943] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 140.934455] ? srso_return_thunk+0x5/0x5f [ 140.934889] unregister_netdevice_queue+0x224/0x2e0 [ 140.935376] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 140.935913] ? up_write+0x195/0x520 [ 140.936295] _cfg80211_unregister_wdev+0x57b/0x700 [ 140.936785] ? srso_return_thunk+0x5/0x5f [ 140.937217] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 140.937712] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 140.938246] ? srso_return_thunk+0x5/0x5f [ 140.938676] ? srso_return_thunk+0x5/0x5f [ 140.939105] ? synchronize_rcu+0x1ff/0x260 [ 140.939529] ieee80211_unregister_hw+0x55/0x3a0 [ 140.940015] hwsim_exit_net+0x3a0/0x730 [ 140.940428] ? __pfx_hwsim_exit_net+0x10/0x10 [ 140.940887] ? srso_return_thunk+0x5/0x5f [ 140.941328] ? netdev_run_todo+0x788/0x1040 [ 140.941771] ? __pfx_hwsim_exit_net+0x10/0x10 [ 140.942231] ops_exit_list+0xb3/0x180 [ 140.942629] cleanup_net+0x546/0xad0 [ 140.943018] ? __pfx_cleanup_net+0x10/0x10 [ 140.943467] process_one_work+0x8ee/0x1a10 [ 140.943932] ? __pfx_lock_acquire+0x10/0x10 [ 140.944375] ? __pfx_process_one_work+0x10/0x10 [ 140.944864] ? srso_return_thunk+0x5/0x5f [ 140.945297] ? move_linked_works+0x172/0x270 [ 140.945747] ? srso_return_thunk+0x5/0x5f [ 140.946186] ? assign_work+0x196/0x240 [ 140.946605] worker_thread+0x674/0xe70 [ 140.947027] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 140.947560] ? __pfx_worker_thread+0x10/0x10 [ 140.948036] kthread+0x3ab/0x720 [ 140.948404] ? __pfx_kthread+0x10/0x10 [ 140.948812] ? srso_return_thunk+0x5/0x5f [ 140.949255] ? finish_task_switch.isra.0+0x206/0x840 [ 140.949776] ? __pfx_kthread+0x10/0x10 [ 140.950188] ret_from_fork+0x48/0x80 [ 140.950564] ? __pfx_kthread+0x10/0x10 [ 140.950980] ret_from_fork_asm+0x1a/0x30 [ 140.951417] [ 141.015684] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' 04:06:03 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) 04:06:03 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) 04:06:03 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) 04:06:03 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x800, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000800}, 0x4000000) [ 141.441866] syz-executor.6 (286) used greatest stack depth: 23248 bytes left 04:06:03 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10420}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x50}}, 0x40000c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x54}}, 0x24008054) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x314, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x800, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000800}, 0x4000000) [ 143.224962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.229563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.233194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.235261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.240964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.242164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.289060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.293005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.297742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.302998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.306019] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.307468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.417919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.420710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.422985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.432949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.433962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.435627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.440440] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.441313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.442231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.447786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.460557] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.463331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.513494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.515715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.524667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.534772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.554050] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.555241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.580584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.589135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.619521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.631933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.639630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.642560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.644025] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.645043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.647761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.690767] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 143.691898] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 143.692480] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.269405] Bluetooth: hci1: command tx timeout [ 145.331517] Bluetooth: hci2: command tx timeout [ 145.459436] Bluetooth: hci3: command tx timeout [ 145.524467] Bluetooth: hci4: command tx timeout [ 145.587517] Bluetooth: hci5: command tx timeout [ 145.716404] Bluetooth: hci6: command tx timeout [ 145.780584] Bluetooth: hci7: command tx timeout [ 147.315652] Bluetooth: hci1: command tx timeout [ 147.379429] Bluetooth: hci2: command tx timeout [ 147.507464] Bluetooth: hci3: command tx timeout [ 147.571611] Bluetooth: hci4: command tx timeout [ 147.635460] Bluetooth: hci5: command tx timeout [ 147.764452] Bluetooth: hci6: command tx timeout [ 147.827822] Bluetooth: hci7: command tx timeout [ 149.363405] Bluetooth: hci1: command tx timeout [ 149.428560] Bluetooth: hci2: command tx timeout [ 149.555525] Bluetooth: hci3: command tx timeout [ 149.620431] Bluetooth: hci4: command tx timeout [ 149.683506] Bluetooth: hci5: command tx timeout [ 149.811528] Bluetooth: hci6: command tx timeout [ 149.876409] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:06:03 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283e250 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb20 R8 =0000000000000000 R9 =fffffbfff0be1bdc R10=00000000000fe503 R11=3a6b636f6c206762 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10d3266 R15=dffffc0000000000 RIP=ffffffff8283e2a5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00585f760 CR3=000000000cbca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff812bf531ffffffff812bf4fc XMM01=ffffffff83ae5e81ffffffff812bf531 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880162f7de8 RCX=000000000000000c RDX=0000000000000002 RSI=ffffffff81b27464 RDI=ffff888013b73222 RBP=ffff888013b73160 RSP=ffff8880162f7ce0 R8 =0000000000000001 R9 =ffffed10011fb92f R10=0000000000000000 R11=0000000000000000 R12=00000000000007ff R13=00000000372efd61 R14=ffff888013b73188 R15=00000000678f1cc2 RIP=ffffffff81b27499 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f08b51b88c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff96feddf00 CR3=0000000014e18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000004000000090000563a93775530 XMM06=0000563a937343a00000000900000006 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000