Warning: Permanently added '[localhost]:10017' (ECDSA) to the list of known hosts. 2025/01/22 21:59:28 fuzzer started 2025/01/22 21:59:29 dialing manager at localhost:38529 syzkaller login: [ 68.884300] cgroup: Unknown subsys name 'net' [ 68.982917] cgroup: Unknown subsys name 'cpuset' [ 69.050589] cgroup: Unknown subsys name 'rlimit' [ 74.346469] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.406331] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 21:59:47 syscalls: 202 2025/01/22 21:59:47 code coverage: enabled 2025/01/22 21:59:47 comparison tracing: enabled 2025/01/22 21:59:47 extra coverage: enabled 2025/01/22 21:59:47 setuid sandbox: enabled 2025/01/22 21:59:47 namespace sandbox: enabled 2025/01/22 21:59:47 Android sandbox: enabled 2025/01/22 21:59:47 fault injection: enabled 2025/01/22 21:59:47 leak checking: enabled 2025/01/22 21:59:47 net packet injection: enabled 2025/01/22 21:59:47 net device setup: enabled 2025/01/22 21:59:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 21:59:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 21:59:47 USB emulation: enabled 2025/01/22 21:59:47 hci packet injection: enabled 2025/01/22 21:59:47 wifi device emulation: enabled 2025/01/22 21:59:47 802.15.4 emulation: enabled 2025/01/22 21:59:47 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 21:59:49 starting 8 fuzzer processes 21:59:49 executing program 0: clone3(&(0x7f0000000340)={0x1080400, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, {0x2f}, &(0x7f0000000140)=""/186, 0xba, &(0x7f0000000200)=""/245, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x80, 0xe0, 0x0, 0x0, 0xfffffffffffffff9, 0x33090, 0x17, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x81, 0x4}, 0x3202, 0x0, 0xcb1, 0x5, 0x5, 0x7, 0x200, 0x0, 0x6, 0x0, 0xf3}, r1, 0x7, 0xffffffffffffffff, 0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/pcmcia', 0x220080, 0x4) openat$cgroup_devices(r3, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r4 = getpgrp(r1) clone3(&(0x7f0000000740)={0x100000400, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x1a}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/223, &(0x7f0000000700)=[r4, r1], 0x2, {r3}}, 0x58) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x7f, 0x4, 0x8, 0x0, 0x0, 0x8, 0x10420, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9d7109, 0x2, @perf_config_ext={0xb4, 0x800}, 0x8000, 0x1, 0xdab8, 0x5, 0xfffffffffffffe78, 0x1000, 0xa0f, 0x0, 0x1000, 0x0, 0x7ff}, r0, 0x2, r2, 0x0) r5 = fork() syz_open_procfs$namespace(r5, &(0x7f0000000840)='ns/ipc\x00') r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x28}}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000a00)='devices.allow\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a40)='devices.allow\x00', 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x6c, 0x8, 0x0, 0xe4, 0x0, 0x2, 0x8c808, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x20}, 0x40000, 0x20, 0xd, 0x8, 0x6c, 0x7, 0xfd1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x5) openat$cgroup_freezer_state(r3, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40080) select(0x40, &(0x7f0000000c80)={0x86, 0x0, 0x61f, 0x1, 0xfed, 0x1, 0x19, 0x1}, &(0x7f0000000cc0)={0x68fe0386, 0x0, 0x2, 0x8c4, 0x200, 0x6, 0x0, 0x6}, &(0x7f0000000d00)={0x49a, 0x7, 0xa0d3, 0x8, 0x100, 0x3133bba8, 0x1}, &(0x7f0000000d40)) 21:59:49 executing program 1: r0 = socket(0x26, 0x800, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x880}, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x34}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0xa0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/138, 0x8a}], 0x8, &(0x7f00000007c0)=""/102, 0x66}, 0x103) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8051}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1bc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x773}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x75b}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7ffd}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c5}, 0x20000000) 21:59:49 executing program 2: sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044801}, 0x50) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0xc2b7690c1754253a) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4805) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20000041) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000b00)={0x2, 0x80, 0x7f, 0x7, 0x7, 0x8, 0x0, 0xffffffff80000001, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000ac0), 0x2}, 0x43080, 0x4, 0x2, 0x6, 0xff, 0x7, 0x101, 0x0, 0x100, 0x0, 0xd57}, r3, 0xa, 0xffffffffffffffff, 0xd) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000) r4 = openat$cgroup(r3, &(0x7f0000000bc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000c00), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004810}, 0x81) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 88.927130] audit: type=1400 audit(1737583189.602:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:59:49 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x120000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x122a1a01}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x904, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x6004c001) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x84001}, 0x4008080) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x4000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000580), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/227, 0xe3}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/171, 0xab}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/137, 0x89}, {&(0x7f0000000c40)=""/199, 0xc7}, {&(0x7f0000000d40)=""/51, 0x33}], 0xa, &(0x7f0000000e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x2000) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x71a21026668040c9}, 0x4000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x40045}, 0x8c0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0x100, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x90}, 0x80) r6 = socket(0x29, 0x4, 0x5) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xe0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa11}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffe}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000060) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x200040a5) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004094}, 0x2004004) 21:59:49 executing program 4: sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x9044400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x78}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x10044000) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000e1) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044000}, 0x40004) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb8, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7ff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x100}}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x555f}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000408c}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x2d, 0x1, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x40001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x3c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x8000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000e00)={{0x0, 0x8000, 0xe15, 0x2, 0x3, 0x0, 0x931f, 0x4d, 0x7, 0x24, 0x10000, 0x1, 0x1, 0x8001, 0x8}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e40), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x400c040) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) 21:59:49 executing program 6: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0x8, 0x10100, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/8, 0x8}], 0x5, &(0x7f0000000340)=""/191, 0xbf}, 0x40018121) r1 = accept$unix(r0, 0x0, &(0x7f0000000440)) setxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='/sbin/dhclient\x00', 0xf, 0x1) r2 = accept4$unix(r0, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x800) r3 = accept4$unix(r2, &(0x7f0000000600), &(0x7f0000000680)=0x6e, 0x0) r4 = accept(r1, &(0x7f00000006c0)=@generic, &(0x7f0000000740)=0x80) recvmsg$unix(r0, &(0x7f0000001e80)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/95, 0x5f}, {&(0x7f0000000ac0)=""/109, 0x6d}, {&(0x7f0000000b40)=""/165, 0xa5}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x6, &(0x7f0000001d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x108}, 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/class/mdio_bus', 0x101000, 0x8) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001f00), 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$unix(r4, &(0x7f00000020c0)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="64569c82549ee0c51a81fa1c82fbf58360010812117e17b77a16abc628ca443ed20d1b69d512e8dfcc5a7522c6e8b5969e09470cc63344fc9cf8e74d71cc20100aad8915002f2a4b445f51c917807b05856d62fdbf34785773657012a7e5fa710365e710d3", 0x65}, {&(0x7f0000000880)="fe4d62ed20088a370165cb641768211868115649e8c59da6e4229f0efb90003d8c3a", 0x22}], 0x2, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r9, r0, r10]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r11, 0xffffffffffffffff, r3]}}], 0x78, 0x40850}, 0x24000000) r12 = openat$cgroup_ro(r7, &(0x7f0000002100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) getpeername(r2, &(0x7f0000002140)=@caif=@dbg, &(0x7f00000021c0)=0x80) accept(r3, &(0x7f0000002200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000002280)=0x80) r13 = perf_event_open(&(0x7f0000002380)={0x5, 0x80, 0x9, 0x20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000002340), 0x4}, 0x4, 0x1, 0x31, 0x7, 0x7f, 0xfffffffd, 0x7, 0x0, 0x6}, r6, 0xc, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000022c0)={0x4, 0x80, 0xff, 0x9, 0x9, 0xff, 0x0, 0x6e, 0x2a20a, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={0xffffffffffffffff, 0xc}, 0x14210, 0x6, 0x0, 0xd, 0x7, 0x9, 0x1, 0x0, 0x1}, r5, 0xa, r13, 0x8) recvmsg(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002400)=""/8, 0x8}, {&(0x7f0000002440)=""/100, 0x64}, {&(0x7f00000024c0)=""/58, 0x3a}, {&(0x7f0000002500)=""/135, 0x87}, {&(0x7f00000025c0)=""/38, 0x26}, {&(0x7f0000002600)=""/193, 0xc1}, {&(0x7f0000002700)=""/250, 0xfa}], 0x7, &(0x7f0000002880)=""/195, 0xc3}, 0x0) openat$cgroup_procs(r12, &(0x7f00000029c0)='tasks\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002a40)={[{0x2d, 'devices'}, {0x2d, 'io'}, {0x2d, 'cpuacct'}]}, 0x16) 21:59:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) syz_io_uring_setup(0x1cf6, &(0x7f00000000c0)={0x0, 0x42fa, 0x0, 0x1, 0x13c, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x8, 0xe2, 0x0, 0x5, 0x0, 0x6, 0x800, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x4, 0x8}, 0x1030, 0x6, 0x8, 0x6, 0x9, 0x8001, 0x3ff, 0x0, 0x7, 0x0, 0x100000001}, r1, 0xd, 0xffffffffffffffff, 0x7) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x4, 0x2004, @fd_index, 0xffffffff, &(0x7f0000000400)=[{&(0x7f0000000240)="accbc1fd08436d450c8eb2f1fb9ec1fd6cfc842800374d5a0b630877aab34a86d0d7b942f12cda542ab1c84d664d60330d26ebd00e1f31d315538fa0c67f8f3f778df2d3ee69c9c2841d7984f9e7c4f4f70d0a4f064d9bb361f6a980993b214db3cea5f4dae4f73cd74921137c5f6265c17da650311ed778853c1ca2027e64b6fcc0a61e91439e6cf3b7646a7a9bf93ec6209e1358b04821416d32bbb544f73592a9aa668a4f8c89f0d0bf0814ab87d06445bd", 0xb3}, {&(0x7f0000000300)="f148506db63eeeb587eeb99fc0e616415c79884a097501f2925dba4c07d7cedf008fdf03dae214cf8a8629948bed8e88fadcb9ae9879c1fd48d39ce897aa332888bbeddd75e226c8cfff4e80c481f9dcc76930fe8923d201374f1c1b5683de9d352d2a42f0423234a92e1a599eb4125d9f8917aa844ac39100e0bbd0554b850264d556348eb5ea7a45053ed42049af74e2503d12e036594facee0e7ccec7586619650e557cba866f5aca0d2fb4ed9c4222aebda7ed42e63051b2272f7faac648fb9b4b2025ea223dae5708030aad411a1c5a3df8d04006d9d0a33eb47711a453598d27965a6814a3bec86753b03e99fbf21bc3ea07", 0xf5}], 0x2, 0x1}, 0x401) epoll_create1(0x80000) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) epoll_pwait(r3, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f0000000500)={[0x401]}, 0x8) r4 = openat$cgroup_ro(r0, &(0x7f0000000540)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000580)=""/149, &(0x7f0000000640)=0x95) openat$cgroup_freezer_state(r0, &(0x7f0000000680), 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9a8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf4ca}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffe0}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) recvmsg$unix(r0, &(0x7f0000000d40)={&(0x7f0000000a40), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/196, 0xc4}], 0x2, &(0x7f0000000c80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x84, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x834}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x3f7, 0x2, 0x70bd2b, 0x25dfdbfc, {0x7, 0x1, './file0', '.'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001040)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001080), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x95}, 0x4000010) 21:59:49 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x350, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xc0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff81}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x6a97c538ab6e2d48}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_SEC_DEVKEY={0x124, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xb8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x350}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000800d}, 0x20004040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20000010) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x20}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xbb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004041) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r4) [ 90.161453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.164505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.166908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.172480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.175898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.178652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.473594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.476982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.479232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.497963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.503297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.505674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.510952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.513424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.513782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.522173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.538709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.539552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.541396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.546683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.555323] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.557494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.558454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.568778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.570729] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.571347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.579668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.581480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.582874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.591671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.599517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.600604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.618545] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.618590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.622188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.624098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.630571] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.634484] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.636565] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.637960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.639035] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.640881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.681144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.690337] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.693472] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.745651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.748357] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.749626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.247209] Bluetooth: hci0: command tx timeout [ 92.629684] Bluetooth: hci2: command tx timeout [ 92.630474] Bluetooth: hci1: command tx timeout [ 92.630779] Bluetooth: hci3: command tx timeout [ 92.694182] Bluetooth: hci4: command tx timeout [ 92.758225] Bluetooth: hci5: command tx timeout [ 92.758520] Bluetooth: hci6: command tx timeout [ 92.822341] Bluetooth: hci7: command tx timeout [ 94.294294] Bluetooth: hci0: command tx timeout [ 94.680137] Bluetooth: hci3: command tx timeout [ 94.680233] Bluetooth: hci1: command tx timeout [ 94.680318] Bluetooth: hci2: command tx timeout [ 94.742107] Bluetooth: hci4: command tx timeout [ 94.806364] Bluetooth: hci6: command tx timeout [ 94.806446] Bluetooth: hci5: command tx timeout [ 94.870183] Bluetooth: hci7: command tx timeout [ 96.341141] Bluetooth: hci0: command tx timeout [ 96.726939] Bluetooth: hci2: command tx timeout [ 96.728247] Bluetooth: hci1: command tx timeout [ 96.728497] Bluetooth: hci3: command tx timeout [ 96.789177] Bluetooth: hci4: command tx timeout [ 96.854290] Bluetooth: hci5: command tx timeout [ 96.855412] Bluetooth: hci6: command tx timeout [ 96.918271] Bluetooth: hci7: command tx timeout [ 98.390337] Bluetooth: hci0: command tx timeout [ 98.774134] Bluetooth: hci3: command tx timeout [ 98.774227] Bluetooth: hci1: command tx timeout [ 98.774311] Bluetooth: hci2: command tx timeout [ 98.838078] Bluetooth: hci4: command tx timeout [ 98.901108] Bluetooth: hci6: command tx timeout [ 98.901189] Bluetooth: hci5: command tx timeout [ 98.965177] Bluetooth: hci7: command tx timeout [ 150.236278] syz-executor.6 (282) used greatest stack depth: 23520 bytes left [ 152.993449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.996458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.998005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.003879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.005703] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.007178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.069769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.073565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.078854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.085623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.089894] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.090867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.119145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.131163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.132468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.140627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.143367] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.145168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.200797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.209240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.222259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.224293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.226467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.228420] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.228862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.230542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.234597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.234943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.235374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.240548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.242468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.246817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.247516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.250170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.254456] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.255003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.255408] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.257627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.263568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.263856] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.268197] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.318469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.529803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.532590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.535726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.542298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.546477] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.547516] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.033884] Bluetooth: hci0: command tx timeout [ 155.157350] Bluetooth: hci1: command tx timeout [ 155.222129] Bluetooth: hci2: command tx timeout [ 155.349239] Bluetooth: hci4: command tx timeout [ 155.350604] Bluetooth: hci3: command tx timeout [ 155.351550] Bluetooth: hci6: command tx timeout [ 155.477288] Bluetooth: hci5: command tx timeout [ 155.605203] Bluetooth: hci7: command tx timeout [ 157.077117] Bluetooth: hci0: command tx timeout [ 157.205099] Bluetooth: hci1: command tx timeout [ 157.269458] Bluetooth: hci2: command tx timeout [ 157.398186] Bluetooth: hci4: command tx timeout [ 157.398286] Bluetooth: hci3: command tx timeout [ 157.398379] Bluetooth: hci6: command tx timeout [ 157.525089] Bluetooth: hci5: command tx timeout [ 157.653117] Bluetooth: hci7: command tx timeout [ 159.125145] Bluetooth: hci0: command tx timeout [ 159.254086] Bluetooth: hci1: command tx timeout [ 159.317199] Bluetooth: hci2: command tx timeout [ 159.446117] Bluetooth: hci6: command tx timeout [ 159.446156] Bluetooth: hci3: command tx timeout [ 159.446232] Bluetooth: hci4: command tx timeout [ 159.573238] Bluetooth: hci5: command tx timeout [ 159.701097] Bluetooth: hci7: command tx timeout [ 161.173121] Bluetooth: hci0: command tx timeout [ 161.301145] Bluetooth: hci1: command tx timeout [ 161.367060] Bluetooth: hci2: command tx timeout [ 161.493302] Bluetooth: hci3: command tx timeout [ 161.493901] Bluetooth: hci4: command tx timeout [ 161.493941] Bluetooth: hci6: command tx timeout [ 161.622090] Bluetooth: hci5: command tx timeout [ 161.749350] Bluetooth: hci7: command tx timeout [ 215.080741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.083617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.085640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.093508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.097614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.100431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.129896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.132972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.134440] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.139287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.143623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.145492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.204574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.213282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.230607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.237363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.240456] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.245134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.331785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.333746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.335760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.352060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.354185] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.355626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.394357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.404965] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.406769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.425188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.430315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.432673] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.435543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.436882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.438807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.452539] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.540484] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.549927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.556734] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.587829] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.590276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.592387] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.596565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.603490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.603936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.621206] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.622550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.627418] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.628798] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.629822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.173173] Bluetooth: hci1: command tx timeout [ 217.174564] Bluetooth: hci0: command tx timeout [ 217.302159] Bluetooth: hci2: command tx timeout [ 217.431098] Bluetooth: hci3: command tx timeout [ 217.557659] Bluetooth: hci4: command tx timeout [ 217.685451] Bluetooth: hci6: command tx timeout [ 217.685821] Bluetooth: hci7: command tx timeout [ 217.750112] Bluetooth: hci5: command tx timeout [ 219.221237] Bluetooth: hci1: command tx timeout [ 219.222485] Bluetooth: hci0: command tx timeout [ 219.349862] Bluetooth: hci2: command tx timeout [ 219.478052] Bluetooth: hci3: command tx timeout [ 219.605209] Bluetooth: hci4: command tx timeout [ 219.735043] Bluetooth: hci6: command tx timeout [ 219.735140] Bluetooth: hci7: command tx timeout [ 219.797091] Bluetooth: hci5: command tx timeout [ 221.269275] Bluetooth: hci0: command tx timeout [ 221.270853] Bluetooth: hci1: command tx timeout [ 221.398103] Bluetooth: hci2: command tx timeout [ 221.525141] Bluetooth: hci3: command tx timeout [ 221.653415] Bluetooth: hci4: command tx timeout [ 221.781262] Bluetooth: hci7: command tx timeout [ 221.781423] Bluetooth: hci6: command tx timeout [ 221.845202] Bluetooth: hci5: command tx timeout [ 223.317227] Bluetooth: hci0: command tx timeout [ 223.317913] Bluetooth: hci1: command tx timeout [ 223.445121] Bluetooth: hci2: command tx timeout [ 223.573105] Bluetooth: hci3: command tx timeout [ 223.701291] Bluetooth: hci4: command tx timeout [ 223.829145] Bluetooth: hci7: command tx timeout [ 223.829264] Bluetooth: hci6: command tx timeout [ 223.893092] Bluetooth: hci5: command tx timeout [ 277.152734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.156649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.161325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.167266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.171398] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.174599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.279249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.280859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.281913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.287049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.289332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.290426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.409429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.413335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.414787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.421767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.426854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.430312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.471729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.489451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.491482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.497265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.499815] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.502482] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.633960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.639474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.644956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.651219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.667231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.671272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.672777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.678325] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.683097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.697226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.703844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.705363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.710098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.712681] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.725667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.731894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.768884] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.773886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.787100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.788671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.794185] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.796772] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.797829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.830576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.189187] Bluetooth: hci0: command tx timeout [ 279.318185] Bluetooth: hci1: command tx timeout [ 279.509159] Bluetooth: hci2: command tx timeout [ 279.573100] Bluetooth: hci3: command tx timeout [ 279.765095] Bluetooth: hci6: command tx timeout [ 279.765466] Bluetooth: hci4: command tx timeout [ 279.829339] Bluetooth: hci5: command tx timeout [ 279.957247] Bluetooth: hci7: command tx timeout [ 281.237217] Bluetooth: hci0: command tx timeout [ 281.365116] Bluetooth: hci1: command tx timeout [ 281.557248] Bluetooth: hci2: command tx timeout [ 281.622190] Bluetooth: hci3: command tx timeout [ 281.813269] Bluetooth: hci4: command tx timeout [ 281.813304] Bluetooth: hci6: command tx timeout [ 281.879110] Bluetooth: hci5: command tx timeout [ 282.006070] Bluetooth: hci7: command tx timeout [ 283.285636] Bluetooth: hci0: command tx timeout [ 283.413808] Bluetooth: hci1: command tx timeout [ 283.606075] Bluetooth: hci2: command tx timeout [ 283.669058] Bluetooth: hci3: command tx timeout [ 283.861489] Bluetooth: hci6: command tx timeout [ 283.861578] Bluetooth: hci4: command tx timeout [ 283.925202] Bluetooth: hci5: command tx timeout [ 284.054088] Bluetooth: hci7: command tx timeout [ 285.334021] Bluetooth: hci0: command tx timeout [ 285.463019] Bluetooth: hci1: command tx timeout [ 285.653057] Bluetooth: hci2: command tx timeout [ 285.718146] Bluetooth: hci3: command tx timeout [ 285.909117] Bluetooth: hci6: command tx timeout [ 285.909140] Bluetooth: hci4: command tx timeout [ 285.973159] Bluetooth: hci5: command tx timeout [ 286.101071] Bluetooth: hci7: command tx timeout [ 333.691431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.691548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.945597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.945677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.719166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.719248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.035944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.036243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.188394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.188477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.495280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.495360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.841216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.841291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:03:56 executing program 1: r0 = socket(0x26, 0x800, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x880}, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x34}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0xa0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/138, 0x8a}], 0x8, &(0x7f00000007c0)=""/102, 0x66}, 0x103) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8051}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1bc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x773}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x75b}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7ffd}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c5}, 0x20000000) [ 336.178129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.178205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.320223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.320301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:03:57 executing program 1: r0 = socket(0x26, 0x800, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x880}, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x34}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0xa0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/138, 0x8a}], 0x8, &(0x7f00000007c0)=""/102, 0x66}, 0x103) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8051}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1bc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x773}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x75b}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7ffd}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c5}, 0x20000000) [ 336.693272] [ 336.693505] ====================================================== [ 336.694094] WARNING: possible circular locking dependency detected [ 336.694681] 6.13.0-next-20250122 #1 Not tainted [ 336.695132] ------------------------------------------------------ [ 336.696002] kworker/u8:2/13585 is trying to acquire lock: [ 336.697461] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.699548] [ 336.699548] but task is already holding lock: [ 336.701150] ffff888029f88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.703134] [ 336.703134] which lock already depends on the new lock. [ 336.703134] [ 336.704667] [ 336.704667] the existing dependency chain (in reverse order) is: [ 336.705364] [ 336.705364] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 336.706008] __mutex_lock+0x13d/0xb50 [ 336.706461] wiphy_register+0x1b2e/0x25d0 [ 336.706945] ieee80211_register_hw+0x23a4/0x3d60 [ 336.707476] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 336.708068] init_mac80211_hwsim+0x389/0x870 [ 336.708582] do_one_initcall+0xf9/0x640 [ 336.709055] kernel_init_freeable+0x53d/0x7a0 [ 336.709624] kernel_init+0x1e/0x2d0 [ 336.710033] ret_from_fork+0x48/0x80 [ 336.710456] ret_from_fork_asm+0x1a/0x30 [ 336.710946] [ 336.710946] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 336.711554] __lock_acquire+0x29fd/0x4580 [ 336.712054] lock_acquire+0x19b/0x520 [ 336.712501] __mutex_lock+0x13d/0xb50 [ 336.712962] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.713580] unregister_netdevice_queue+0x224/0x2e0 [ 336.714143] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.714701] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.715256] ieee80211_unregister_hw+0x55/0x3a0 [ 336.715784] hwsim_exit_net+0x3a0/0x730 [ 336.716257] ops_exit_list+0xb3/0x180 [ 336.716698] cleanup_net+0x546/0xad0 [ 336.717139] process_one_work+0x8ee/0x1a10 [ 336.717638] worker_thread+0x674/0xe70 [ 336.718106] kthread+0x3ab/0x720 [ 336.718525] ret_from_fork+0x48/0x80 [ 336.718951] ret_from_fork_asm+0x1a/0x30 [ 336.719430] [ 336.719430] other info that might help us debug this: [ 336.719430] [ 336.720169] Possible unsafe locking scenario: [ 336.720169] [ 336.720725] CPU0 CPU1 [ 336.721160] ---- ---- [ 336.721595] lock(&rdev->wiphy.mtx); [ 336.721987] lock(rtnl_mutex); [ 336.722553] lock(&rdev->wiphy.mtx); [ 336.723160] lock(rtnl_mutex); [ 336.723508] [ 336.723508] *** DEADLOCK *** [ 336.723508] [ 336.724076] 4 locks held by kworker/u8:2/13585: [ 336.724520] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 336.725530] #1: ffff88802b817d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 336.726490] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 336.727387] #3: ffff888029f88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.728426] [ 336.728426] stack backtrace: [ 336.728859] CPU: 1 UID: 0 PID: 13585 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250122 #1 [ 336.729648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.730427] Workqueue: netns cleanup_net [ 336.730842] Call Trace: [ 336.731093] [ 336.731319] dump_stack_lvl+0xca/0x120 [ 336.731732] print_circular_bug+0x47b/0x750 [ 336.732165] check_noncircular+0x2e9/0x3c0 [ 336.732586] ? __pfx_check_noncircular+0x10/0x10 [ 336.733050] ? hlock_class+0x4e/0x130 [ 336.733421] ? srso_return_thunk+0x5/0x5f [ 336.733845] ? mark_lock+0xac/0xed0 [ 336.734212] ? srso_return_thunk+0x5/0x5f [ 336.734636] ? sched_clock+0x37/0x60 [ 336.735024] ? lockdep_lock+0xba/0x1b0 [ 336.735433] ? __pfx_lockdep_lock+0x10/0x10 [ 336.735875] __lock_acquire+0x29fd/0x4580 [ 336.736306] ? __pfx___lock_acquire+0x10/0x10 [ 336.736761] ? lock_release+0x20f/0x6f0 [ 336.737165] ? __pfx_lock_release+0x10/0x10 [ 336.737591] ? srso_return_thunk+0x5/0x5f [ 336.738021] lock_acquire+0x19b/0x520 [ 336.738402] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.738964] ? __pfx_lock_acquire+0x10/0x10 [ 336.739390] ? __pfx_lock_release+0x10/0x10 [ 336.739819] ? __pfx_try_to_wake_up+0x10/0x10 [ 336.740278] ? srso_return_thunk+0x5/0x5f [ 336.740709] ? lock_is_held_type+0x9e/0x120 [ 336.741157] ? srso_return_thunk+0x5/0x5f [ 336.741594] __mutex_lock+0x13d/0xb50 [ 336.741996] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.742569] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.743146] ? srso_return_thunk+0x5/0x5f [ 336.743583] ? synchronize_rcu_expedited+0x38a/0x420 [ 336.744094] ? __pfx___mutex_lock+0x10/0x10 [ 336.744545] ? srso_return_thunk+0x5/0x5f [ 336.744989] ? srso_return_thunk+0x5/0x5f [ 336.745424] ? kasan_quarantine_put+0x84/0x1e0 [ 336.745897] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 336.746346] ? srso_return_thunk+0x5/0x5f [ 336.746786] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.747340] ? __virt_addr_valid+0x2e8/0x5d0 [ 336.747788] ? __pfx_lock_release+0x10/0x10 [ 336.748220] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 336.748799] ? find_held_lock+0x2c/0x110 [ 336.749218] ? srso_return_thunk+0x5/0x5f [ 336.749645] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 336.750142] ? srso_return_thunk+0x5/0x5f [ 336.750563] ? lock_release+0x20f/0x6f0 [ 336.750960] ? __pfx_lock_release+0x10/0x10 [ 336.751402] ? srso_return_thunk+0x5/0x5f [ 336.751844] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.752373] ? srso_return_thunk+0x5/0x5f [ 336.752812] unregister_netdevice_queue+0x224/0x2e0 [ 336.753311] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 336.753858] ? up_write+0x195/0x520 [ 336.754243] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.754736] ? srso_return_thunk+0x5/0x5f [ 336.755174] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.755680] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 336.756240] ? srso_return_thunk+0x5/0x5f [ 336.756676] ? srso_return_thunk+0x5/0x5f [ 336.757113] ? synchronize_rcu+0x1ff/0x260 [ 336.757543] ieee80211_unregister_hw+0x55/0x3a0 [ 336.758014] hwsim_exit_net+0x3a0/0x730 [ 336.758422] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.758882] ? srso_return_thunk+0x5/0x5f [ 336.759315] ? netdev_run_todo+0x788/0x1040 [ 336.759756] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.760214] ops_exit_list+0xb3/0x180 [ 336.760609] cleanup_net+0x546/0xad0 [ 336.760994] ? __pfx_cleanup_net+0x10/0x10 [ 336.761437] process_one_work+0x8ee/0x1a10 [ 336.761894] ? __pfx_lock_acquire+0x10/0x10 [ 336.762333] ? __pfx_process_one_work+0x10/0x10 [ 336.762813] ? srso_return_thunk+0x5/0x5f [ 336.763238] ? move_linked_works+0x172/0x270 [ 336.763678] ? srso_return_thunk+0x5/0x5f [ 336.764111] ? assign_work+0x196/0x240 [ 336.764516] worker_thread+0x674/0xe70 [ 336.764927] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.765445] ? srso_return_thunk+0x5/0x5f [ 336.765871] ? __pfx_worker_thread+0x10/0x10 [ 336.766334] kthread+0x3ab/0x720 [ 336.766696] ? __pfx_kthread+0x10/0x10 [ 336.767099] ? srso_return_thunk+0x5/0x5f [ 336.767533] ? finish_task_switch.isra.0+0x206/0x840 [ 336.768051] ? __pfx_kthread+0x10/0x10 [ 336.768456] ret_from_fork+0x48/0x80 [ 336.768820] ? __pfx_kthread+0x10/0x10 [ 336.769222] ret_from_fork_asm+0x1a/0x30 [ 336.769650] 22:03:57 executing program 1: r0 = socket(0x26, 0x800, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x880}, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x34}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0xa0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/138, 0x8a}], 0x8, &(0x7f00000007c0)=""/102, 0x66}, 0x103) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8051}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1bc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x773}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x75b}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7ffd}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c5}, 0x20000000) [ 336.886406] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 339.104518] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.109328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.113105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.124652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.127701] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.131306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.205133] Bluetooth: hci0: command tx timeout [ 343.253147] Bluetooth: hci0: command tx timeout [ 345.301198] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 22:03:57 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf41280 RCX=ffffffff816643a2 RDX=ffff888015133780 RSI=ffffffff8166437c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88802cf9f9d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9e8251 R13=ffff88806cf41288 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166437e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74efee0008 CR3=0000000018f28000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88802b816bb8 R8 =0000000000000001 R9 =ffffed1005702d67 R10=0000000000000077 R11=6f6c206863696877 R12=0000000000000077 R13=0000000000000001 R14=ffff888008fea020 R15=ffff88802b816eb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b43602d960 CR3=000000003234c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=386565650030316d697377682f6d6973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000300000004000055b43601d880 XMM06=000055b436018f400000000900000006 XMM07=00000000000000000000000000000000 XMM08=00000000000000500000000000001430 XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000