syzkaller login: [ 67.088068] sshd (231) used greatest stack depth: 23712 bytes left Warning: Permanently added '[localhost]:62875' (ECDSA) to the list of known hosts. 2025/01/23 20:30:08 fuzzer started 2025/01/23 20:30:09 dialing manager at localhost:45511 [ 70.207511] cgroup: Unknown subsys name 'net' [ 70.301816] cgroup: Unknown subsys name 'cpuset' [ 70.353191] cgroup: Unknown subsys name 'rlimit' [ 77.074778] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 20:30:28 syscalls: 205 2025/01/23 20:30:28 code coverage: enabled 2025/01/23 20:30:28 comparison tracing: enabled 2025/01/23 20:30:28 extra coverage: enabled 2025/01/23 20:30:28 setuid sandbox: enabled 2025/01/23 20:30:28 namespace sandbox: enabled 2025/01/23 20:30:28 Android sandbox: enabled 2025/01/23 20:30:28 fault injection: enabled 2025/01/23 20:30:28 leak checking: enabled 2025/01/23 20:30:28 net packet injection: enabled 2025/01/23 20:30:28 net device setup: enabled 2025/01/23 20:30:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 20:30:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 20:30:28 USB emulation: enabled 2025/01/23 20:30:28 hci packet injection: enabled 2025/01/23 20:30:28 wifi device emulation: enabled 2025/01/23 20:30:28 802.15.4 emulation: enabled 2025/01/23 20:30:28 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 20:30:29 starting 8 fuzzer processes 20:30:29 executing program 1: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x8, 0xfff, 0x2, 0x1, 0x0, "0b7757584e8b0fe8"}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1402, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x40, 0x5, 0x5, 0x8001, 0x1b, "87f7974d4803d35f"}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x800) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4c800, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000001c0)) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000200)={0x1398, 0x5}) ioctl$KDSKBLED(r1, 0x4b65, 0x7f) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0xf, 0x11, 0x1cb, &(0x7f0000000240)}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x44040) r3 = fsmount(r0, 0x1, 0x81) ioctl$KDSKBLED(r3, 0x4b65, 0xfffffffffffffff8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000007c0)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000840)={0x2, 0x9bc, 0x9, 0x5, 0x18, "74db693ee0db6637122f81967131cd9090bff1"}) 20:30:29 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x260, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67ef224e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1079583f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72f8d40e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40cb4934}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31111674}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7644a33d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19ac3dbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7868497f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b7dea25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fe4c9e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x197e71df}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47c405d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x472871b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee7d873}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x326686be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d7160b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75531c35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51b5db9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafe86ec}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a3c4579}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4001a643}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62490f95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x450f5e2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7269020a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15a4021}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7af817a1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x260}}, 0x1) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x204, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69da698a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x467e7bd6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42eef3da}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9c1321a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52733c4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20c1451d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63333e42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd73841d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62fc1fdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x715f87d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7465397e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7edbb227}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45cb0774}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b57c5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x607e8fc5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x640d8de5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134ecebd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bded0d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e128c0a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000014}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x384, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x30}}, 0x4000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x73}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000020}, 0x4004) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100048c4}, 0x24008040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x64d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xee9c}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r1, 0x12, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0x8800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}}, 0x20000000) 20:30:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8001, 0x8, 0x4, 0x20, 0x100, 0x6}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x11d6d9e2d8c31fb4, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) r2 = fsmount(r1, 0x0, 0x8) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x5, 0xfff, 0x6ba, 0x7ff, 0x1a, "9769d9e5b268371b"}) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000100)={0x5, 0x81, 0x2, 0x0, 0x9}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000140)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000180)=""/3) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000001c0)) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, r1, 0xfffffffb}) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000240)) write$cgroup_int(r1, &(0x7f0000000280)=0x8000, 0x12) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000002c0)=0x9) openat$cgroup_ro(r2, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 20:30:29 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000080)=""/236) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x0, 0xfffa, 0x3f, 0x4, 0xe, "47bc42fcf0d69535"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) r2 = fork() r3 = clone3(&(0x7f0000000580)={0x108802000, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, {0x34}, &(0x7f00000004c0)=""/5, 0x5, &(0x7f0000000500)=""/34, &(0x7f0000000540)=[0xffffffffffffffff], 0x1}, 0x58) r6 = getpid() r7 = clone3(&(0x7f0000000640)={0x1220200, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x41}, &(0x7f0000000280)=""/110, 0x6e, &(0x7f0000000300)=""/160, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff, 0x0, r6], 0x9}, 0x58) clone3(&(0x7f0000000b80)={0x21000400, &(0x7f0000000980)=0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a00)=0x0, {0x3a}, &(0x7f0000000a40)=""/186, 0xba, &(0x7f0000000b00)=""/20, &(0x7f0000000b40)=[r1], 0x1}, 0x58) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000c00)=0x0) r12 = fork() r13 = clone3(&(0x7f0000000c80)={0x240814400, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0x38}, &(0x7f0000000780)=""/214, 0xd6, &(0x7f0000000880)=""/202, &(0x7f0000000c40)=[r10, r4, r3, r3, r11, r12, r8, r7], 0x8}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000d00)={0x0, 0x1, r9, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000e80)={0x0, 0x0}) clone3(&(0x7f0000001140)={0x140904400, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)=0x0, {0x5}, &(0x7f0000000fc0)=""/37, 0x25, &(0x7f0000001000)=""/218, &(0x7f0000001100)=[r10], 0x1}, 0x58) clone3(&(0x7f0000001200)={0x10000000, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0), {0x2b}, &(0x7f0000000e00)=""/45, 0x2d, &(0x7f0000000e40), &(0x7f00000011c0)=[r2, r1, r14, r13, r4, r1, r15], 0x7}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001300)={r16, 0x5, 0x4}) [ 90.552250] audit: type=1400 audit(1737664229.751:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:30:29 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x6, 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xc) r2 = syz_io_uring_complete(0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000001c0)=0x3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x60800, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x4400, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x8000) openat$cgroup(r4, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000400)) r6 = fsmount(r2, 0x1, 0x7e) openat$cgroup_int(r6, &(0x7f0000000440)='memory.min\x00', 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000480)={0x1, 0x2, 0x5, 0x1, 0x2, "c6e29cf19e3c27e6276e285e3223282e6ca540"}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x840) 20:30:29 executing program 5: r0 = socket(0xb, 0x3, 0x8) accept4(r0, 0x0, &(0x7f0000000000), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5000000, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4003, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x9, {{0xb, 0x4, 0x1, 0x14, 0x2c, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@rr={0x7, 0xb, 0x22, [@dev={0xac, 0x14, 0x14, 0x23}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x4c, 0x0, 0x7, [0x1000]}]}}}}}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd, 0x2, 0x8, 0x2}, 0xc7) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0xfffffffffffffffb, 0x5, 0xfffffffffffffffa, 0x3, 0x40, 0x6, 0xffff, 0x1bd0}, &(0x7f0000000280)={0x5, 0x7fff, 0x4, 0x7, 0x2, 0x8, 0x788, 0x2}, &(0x7f00000002c0)={0x7, 0x82f, 0x10001, 0x7, 0x40, 0x7, 0x4}, &(0x7f0000000340)={r3, r4+10000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x8001]}, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000480)=r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0x0, 0x7f, 0x47, 0xffff0000}, {0x4, 0x5, 0x0, 0x7}, {0xfe, 0x0, 0x0, 0x6}, {0xfffa, 0x80, 0xff, 0x81}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000540)={r5, 0x10001, 0x6}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x80010, 0xffffffffffffffff, 0x10000000) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x88800, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000005c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x600) shmget(0x2, 0x1000, 0x20, &(0x7f0000ffa000/0x1000)=nil) syz_io_uring_setup(0x3cf2, &(0x7f0000000600)={0x0, 0x27c, 0x0, 0x3, 0x152}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 20:30:29 executing program 6: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x7, 0x1f, 0xcc4}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x6, 0x12, 0x135, &(0x7f0000000040)}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000480)={0x8, 0xa6e, 0x249, 0xc000, 0x2, 0xfff}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000004c0)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000500)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000580)={0x3, 0xf23d, 0xff}) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000005c0)) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000600)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) r5 = socket(0xa, 0x3, 0xf0) write$nbd(r5, &(0x7f0000000680)={0x67446698, 0x0, 0x4, 0x0, 0x1, "7001ae8e2a5b18192fc38f5df994840237e9ad5c5f003a4cd43cac10a25b7810896c2b90d0f2baa8470bdce521cf166181fbf15b8a06b9fed622cab5800bce070b782730c6890d0608d62e4cdb4e3dc7acf2988315e7c4a93327e7c1fa5fab4cca146f480b1799232ee75e6b2491bff648e06ab1dd4c363290e7ea55c0"}, 0x8d) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000740)={0x9, 0x100, 0x6, 0x1, 0x76, "27ba445b7ac30d6a4590019546945dca2695f5", 0x7, 0x5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:30:29 executing program 7: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0xffffffffffffffff, 0x804) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5e91e4dd7216fa3a}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x44810}, 0x50) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)={0x80, 0x7ff}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf759}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x12}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0xbf0237f752afea26}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004080) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x24c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e8e2f0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x455f508e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10ced0e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341ceb46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7143e40e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12d03763}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a6b8e8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fe02c9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35d17df8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x648e41fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ed8a8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37c96e89}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe316cfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x306a110d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67e1ca72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f9192fe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7de02862}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35edb047}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18002159}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdac1109}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55af9a72}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1196e981}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e9d11e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x658aa340}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32a5f376}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bc2b0a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x307c35c0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x649dfd7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x306228fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d47a5d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x118d0ae0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a1cd70f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2656554c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0aa7f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73486816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72fb9adb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e7324fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc355}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9790}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x24c}}, 0x20008051) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xfe}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0xc0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x400e) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x3a0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x332818f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d2ba231}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60f4fe8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6692ba66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15c4b068}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ca685a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x96d96ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65ef041b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x304acf0f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb1a195}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80000001}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7155}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x484ce829}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a673256}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54b7169e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a5f572e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ad0dfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43d020e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x993d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe924}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c60}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3904d52e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x630bf90d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33166ac5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x760e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f396203}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17098f49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f876092}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x364d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb819}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35b4450d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57ea96f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8772}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68be1593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89c4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26191fe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c75ff25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7463f6f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x375af53d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e83ff42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5a7ada}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x269f542}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x101b46eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10abbacc}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6de867ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cfd31f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43f018f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ed32e49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ea8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x256f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33b78c1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd33f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x382ba93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe228}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17e3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ef4afe8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35a12a9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eea0f9b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf4b93d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f9cc2ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7dd8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53526d4c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x61) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000001040)={0x9, 0x7fff, 0x5, 0x800, 0xd, "0467cca8f63c6db2"}) r5 = openat$cgroup_ro(r4, &(0x7f0000001080)='memory.events.local\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000010c0)='#:', &(0x7f0000001100)='wpan4\x00', 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000880) [ 91.873293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.875902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.879313] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.891296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.900207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.902566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.990376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.996092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.998962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.004972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.007227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.014087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.017079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.018429] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.021063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.045694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.054389] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.062074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.069141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.084039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.086831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.115967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.143981] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.145954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.152186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.154980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.157282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.161229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.173888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.178071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.179455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.195462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.198316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.201942] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.205109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.205271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.208734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.212860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.215403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.217396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.219202] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.221155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.228592] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.245231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.249972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.271341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.278779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.293119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.958129] Bluetooth: hci0: command tx timeout [ 94.086026] Bluetooth: hci1: command tx timeout [ 94.149719] Bluetooth: hci2: command tx timeout [ 94.213753] Bluetooth: hci3: command tx timeout [ 94.278038] Bluetooth: hci5: command tx timeout [ 94.341776] Bluetooth: hci7: command tx timeout [ 94.341807] Bluetooth: hci6: command tx timeout [ 94.343084] Bluetooth: hci4: command tx timeout [ 96.005690] Bluetooth: hci0: command tx timeout [ 96.134976] Bluetooth: hci1: command tx timeout [ 96.198642] Bluetooth: hci2: command tx timeout [ 96.261713] Bluetooth: hci3: command tx timeout [ 96.328166] Bluetooth: hci5: command tx timeout [ 96.390691] Bluetooth: hci4: command tx timeout [ 96.391182] Bluetooth: hci6: command tx timeout [ 96.391849] Bluetooth: hci7: command tx timeout [ 98.053794] Bluetooth: hci0: command tx timeout [ 98.181994] Bluetooth: hci1: command tx timeout [ 98.247645] Bluetooth: hci2: command tx timeout [ 98.309722] Bluetooth: hci3: command tx timeout [ 98.373781] Bluetooth: hci5: command tx timeout [ 98.440012] Bluetooth: hci7: command tx timeout [ 98.440070] Bluetooth: hci6: command tx timeout [ 98.440161] Bluetooth: hci4: command tx timeout [ 100.101860] Bluetooth: hci0: command tx timeout [ 100.229736] Bluetooth: hci1: command tx timeout [ 100.293910] Bluetooth: hci2: command tx timeout [ 100.357919] Bluetooth: hci3: command tx timeout [ 100.421807] Bluetooth: hci5: command tx timeout [ 100.485927] Bluetooth: hci7: command tx timeout [ 100.486703] Bluetooth: hci4: command tx timeout [ 100.487208] Bluetooth: hci6: command tx timeout [ 152.474676] syz-executor.5 (282) used greatest stack depth: 23296 bytes left [ 154.961462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.965327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.972416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.986712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.989711] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.992473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.150554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.159047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.166111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.172060] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.178342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.186527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.192026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.194395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.205218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.216539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.222785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.224322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.249726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.252140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.256158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.267854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.286511] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.294201] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.296742] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.299429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.305498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.309159] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.311961] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.320860] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.333835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.335874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.338975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.344906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.349657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.351976] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.361699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.370798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.374992] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.376230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.377210] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.378543] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.379720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.383430] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.385080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.396473] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.404450] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.406994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.061715] Bluetooth: hci0: command tx timeout [ 157.253739] Bluetooth: hci2: command tx timeout [ 157.253818] Bluetooth: hci1: command tx timeout [ 157.381688] Bluetooth: hci3: command tx timeout [ 157.381716] Bluetooth: hci6: command tx timeout [ 157.446675] Bluetooth: hci5: command tx timeout [ 157.509689] Bluetooth: hci4: command tx timeout [ 157.510905] Bluetooth: hci7: command tx timeout [ 159.109866] Bluetooth: hci0: command tx timeout [ 159.301886] Bluetooth: hci2: command tx timeout [ 159.302771] Bluetooth: hci1: command tx timeout [ 159.429808] Bluetooth: hci3: command tx timeout [ 159.429834] Bluetooth: hci6: command tx timeout [ 159.494103] Bluetooth: hci5: command tx timeout [ 159.558791] Bluetooth: hci7: command tx timeout [ 159.559334] Bluetooth: hci4: command tx timeout [ 161.157661] Bluetooth: hci0: command tx timeout [ 161.351646] Bluetooth: hci1: command tx timeout [ 161.351784] Bluetooth: hci2: command tx timeout [ 161.477678] Bluetooth: hci3: command tx timeout [ 161.478772] Bluetooth: hci6: command tx timeout [ 161.542650] Bluetooth: hci5: command tx timeout [ 161.605651] Bluetooth: hci7: command tx timeout [ 161.605792] Bluetooth: hci4: command tx timeout [ 163.206072] Bluetooth: hci0: command tx timeout [ 163.399833] Bluetooth: hci2: command tx timeout [ 163.401099] Bluetooth: hci1: command tx timeout [ 163.525758] Bluetooth: hci6: command tx timeout [ 163.525789] Bluetooth: hci3: command tx timeout [ 163.589747] Bluetooth: hci5: command tx timeout [ 163.653850] Bluetooth: hci7: command tx timeout [ 163.655079] Bluetooth: hci4: command tx timeout [ 217.110863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.115009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.117248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.125252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.129405] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.132065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.291892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.296541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.298884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.304687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.308489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.310908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.491510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.497785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.500193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.512917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.522974] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.527836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.559240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.562447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.567278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.577795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.582416] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.585420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.612589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.615232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.622141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.632300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.636886] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.651938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.824491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.841410] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.850983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.851796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.852684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.868718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.877414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.888037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.889255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.941986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.950114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.966924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.005235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.016369] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.053346] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.060222] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.074967] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.086444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.205745] Bluetooth: hci0: command tx timeout [ 219.400665] Bluetooth: hci1: command tx timeout [ 219.591847] Bluetooth: hci2: command tx timeout [ 219.653718] Bluetooth: hci3: command tx timeout [ 219.718640] Bluetooth: hci4: command tx timeout [ 220.101864] Bluetooth: hci5: command tx timeout [ 220.229683] Bluetooth: hci6: command tx timeout [ 220.229710] Bluetooth: hci7: command tx timeout [ 221.253716] Bluetooth: hci0: command tx timeout [ 221.445642] Bluetooth: hci1: command tx timeout [ 221.637655] Bluetooth: hci2: command tx timeout [ 221.701694] Bluetooth: hci3: command tx timeout [ 221.765679] Bluetooth: hci4: command tx timeout [ 222.149711] Bluetooth: hci5: command tx timeout [ 222.277665] Bluetooth: hci7: command tx timeout [ 222.278140] Bluetooth: hci6: command tx timeout [ 223.302847] Bluetooth: hci0: command tx timeout [ 223.494647] Bluetooth: hci1: command tx timeout [ 223.686687] Bluetooth: hci2: command tx timeout [ 223.750736] Bluetooth: hci3: command tx timeout [ 223.814651] Bluetooth: hci4: command tx timeout [ 224.197760] Bluetooth: hci5: command tx timeout [ 224.325766] Bluetooth: hci7: command tx timeout [ 224.326783] Bluetooth: hci6: command tx timeout [ 225.349845] Bluetooth: hci0: command tx timeout [ 225.542610] Bluetooth: hci1: command tx timeout [ 225.733666] Bluetooth: hci2: command tx timeout [ 225.797652] Bluetooth: hci3: command tx timeout [ 225.861835] Bluetooth: hci4: command tx timeout [ 226.245742] Bluetooth: hci5: command tx timeout [ 226.375614] Bluetooth: hci7: command tx timeout [ 226.375654] Bluetooth: hci6: command tx timeout [ 279.264331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.267343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.273079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.279308] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.286459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.288396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.953221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.956661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.960908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.972129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.974052] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.975505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.017537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.022201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.023728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.029680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.032433] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.042042] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.150836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.154414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.155770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.157863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.163020] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.164219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.175187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.176504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.178538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.186597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.188482] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.191844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.194316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.203510] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.213191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.219273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.225234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.226359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.228481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.229826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.232083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.235798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.254211] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.258936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.287391] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.301544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.310936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.333358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.342840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.346870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.349733] Bluetooth: hci0: command tx timeout [ 281.989687] Bluetooth: hci1: command tx timeout [ 282.117832] Bluetooth: hci2: command tx timeout [ 282.248612] Bluetooth: hci3: command tx timeout [ 282.309645] Bluetooth: hci5: command tx timeout [ 282.373642] Bluetooth: hci6: command tx timeout [ 282.374189] Bluetooth: hci4: command tx timeout [ 282.437923] Bluetooth: hci7: command tx timeout [ 283.398675] Bluetooth: hci0: command tx timeout [ 284.037863] Bluetooth: hci1: command tx timeout [ 284.166608] Bluetooth: hci2: command tx timeout [ 284.293669] Bluetooth: hci3: command tx timeout [ 284.357691] Bluetooth: hci5: command tx timeout [ 284.421773] Bluetooth: hci4: command tx timeout [ 284.422267] Bluetooth: hci6: command tx timeout [ 284.485660] Bluetooth: hci7: command tx timeout [ 285.445692] Bluetooth: hci0: command tx timeout [ 286.085684] Bluetooth: hci1: command tx timeout [ 286.214626] Bluetooth: hci2: command tx timeout [ 286.341668] Bluetooth: hci3: command tx timeout [ 286.405690] Bluetooth: hci5: command tx timeout [ 286.469791] Bluetooth: hci6: command tx timeout [ 286.470475] Bluetooth: hci4: command tx timeout [ 286.533780] Bluetooth: hci7: command tx timeout [ 287.493861] Bluetooth: hci0: command tx timeout [ 288.133699] Bluetooth: hci1: command tx timeout [ 288.261636] Bluetooth: hci2: command tx timeout [ 288.389997] Bluetooth: hci3: command tx timeout [ 288.453620] Bluetooth: hci5: command tx timeout [ 288.517657] Bluetooth: hci4: command tx timeout [ 288.518150] Bluetooth: hci6: command tx timeout [ 288.581777] Bluetooth: hci7: command tx timeout [ 337.014849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.015742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.346493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.347502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.904997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.906130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.255330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.256051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.899560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.900177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.928763] [ 338.928991] ====================================================== [ 338.929529] WARNING: possible circular locking dependency detected [ 338.930062] 6.13.0-next-20250123 #1 Not tainted [ 338.930485] ------------------------------------------------------ [ 338.931027] kworker/u8:2/13776 is trying to acquire lock: [ 338.931523] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.932439] [ 338.932439] but task is already holding lock: [ 338.932949] ffff888029a90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.933856] [ 338.933856] which lock already depends on the new lock. [ 338.933856] [ 338.934573] [ 338.934573] the existing dependency chain (in reverse order) is: [ 338.935216] [ 338.935216] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 338.935974] __mutex_lock+0x13d/0xb50 [ 338.936442] wiphy_register+0x1b2e/0x25d0 [ 338.936914] ieee80211_register_hw+0x23a4/0x3d60 [ 338.937412] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 338.937948] init_mac80211_hwsim+0x389/0x870 [ 338.938458] do_one_initcall+0xf9/0x640 [ 338.938904] kernel_init_freeable+0x53d/0x7a0 [ 338.939392] kernel_init+0x1e/0x2d0 [ 338.941974] ret_from_fork+0x48/0x80 [ 338.944295] ret_from_fork_asm+0x1a/0x30 [ 338.945098] [ 338.945098] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 338.945930] __lock_acquire+0x29fd/0x4580 [ 338.946616] lock_acquire+0x19b/0x520 [ 338.947232] __mutex_lock+0x13d/0xb50 [ 338.947885] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.948722] unregister_netdevice_queue+0x224/0x2e0 [ 338.949516] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.950279] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.951075] ieee80211_unregister_hw+0x55/0x3a0 [ 338.951805] hwsim_exit_net+0x3a0/0x730 [ 338.952462] ops_exit_list+0xb3/0x180 [ 338.953070] cleanup_net+0x546/0xad0 [ 338.953679] process_one_work+0x8ee/0x1a10 [ 338.954403] worker_thread+0x674/0xe70 [ 338.955075] kthread+0x3ab/0x720 [ 338.955684] ret_from_fork+0x48/0x80 [ 338.956275] ret_from_fork_asm+0x1a/0x30 [ 338.956968] [ 338.956968] other info that might help us debug this: [ 338.956968] [ 338.958023] Possible unsafe locking scenario: [ 338.958023] [ 338.958829] CPU0 CPU1 [ 338.959447] ---- ---- [ 338.960075] lock(&rdev->wiphy.mtx); [ 338.960629] lock(rtnl_mutex); [ 338.961424] lock(&rdev->wiphy.mtx); [ 338.962263] lock(rtnl_mutex); [ 338.962789] [ 338.962789] *** DEADLOCK *** [ 338.962789] [ 338.963567] 4 locks held by kworker/u8:2/13776: [ 338.964199] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 338.965587] #1: ffff88802fdd7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 338.966959] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 338.968227] #3: ffff888029a90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.969635] [ 338.969635] stack backtrace: [ 338.970227] CPU: 0 UID: 0 PID: 13776 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250123 #1 [ 338.970289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 338.970344] Workqueue: netns cleanup_net [ 338.970413] Call Trace: [ 338.970429] [ 338.970449] dump_stack_lvl+0xca/0x120 [ 338.970546] print_circular_bug+0x47b/0x750 [ 338.970627] check_noncircular+0x2e9/0x3c0 [ 338.970694] ? srso_return_thunk+0x5/0x5f [ 338.970790] ? __pfx_check_noncircular+0x10/0x10 [ 338.970859] ? hlock_class+0x4e/0x130 [ 338.970909] ? mark_lock+0xac/0xed0 [ 338.970976] ? srso_return_thunk+0x5/0x5f [ 338.971072] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 338.971146] ? lockdep_lock+0xba/0x1b0 [ 338.971241] ? __pfx_lockdep_lock+0x10/0x10 [ 338.971342] __lock_acquire+0x29fd/0x4580 [ 338.971434] ? __pfx___lock_acquire+0x10/0x10 [ 338.971506] ? lock_release+0x20f/0x6f0 [ 338.971579] ? __pfx_lock_release+0x10/0x10 [ 338.971657] lock_acquire+0x19b/0x520 [ 338.971728] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.971810] ? __pfx_lock_acquire+0x10/0x10 [ 338.971884] ? srso_return_thunk+0x5/0x5f [ 338.971979] ? lock_release+0x20f/0x6f0 [ 338.972050] ? srso_return_thunk+0x5/0x5f [ 338.972143] ? lock_is_held_type+0x9e/0x120 [ 338.972234] ? srso_return_thunk+0x5/0x5f [ 338.972333] __mutex_lock+0x13d/0xb50 [ 338.972422] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.972498] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.972575] ? srso_return_thunk+0x5/0x5f [ 338.972666] ? synchronize_rcu_expedited+0x38a/0x420 [ 338.972737] ? __pfx___mutex_lock+0x10/0x10 [ 338.972825] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.972913] ? srso_return_thunk+0x5/0x5f [ 338.973004] ? kasan_quarantine_put+0x84/0x1e0 [ 338.973103] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 338.973160] ? srso_return_thunk+0x5/0x5f [ 338.973260] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.973337] ? __virt_addr_valid+0x2e8/0x5d0 [ 338.973423] ? __pfx_lock_release+0x10/0x10 [ 338.973496] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.973573] ? find_held_lock+0x2c/0x110 [ 338.973675] ? srso_return_thunk+0x5/0x5f [ 338.973771] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 338.973870] ? srso_return_thunk+0x5/0x5f [ 338.973961] ? lock_release+0x20f/0x6f0 [ 338.974034] ? __pfx_lock_release+0x10/0x10 [ 338.974105] ? srso_return_thunk+0x5/0x5f [ 338.974196] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.974276] ? srso_return_thunk+0x5/0x5f [ 338.974389] unregister_netdevice_queue+0x224/0x2e0 [ 338.974464] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.974537] ? up_write+0x195/0x520 [ 338.974627] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.974717] ? srso_return_thunk+0x5/0x5f [ 338.974825] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.974897] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 338.974966] ? srso_return_thunk+0x5/0x5f [ 338.975067] ? srso_return_thunk+0x5/0x5f [ 338.975168] ? synchronize_rcu+0x1ff/0x260 [ 338.975243] ieee80211_unregister_hw+0x55/0x3a0 [ 338.975325] hwsim_exit_net+0x3a0/0x730 [ 338.975402] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.975474] ? srso_return_thunk+0x5/0x5f [ 338.975574] ? netdev_run_todo+0x788/0x1040 [ 338.975668] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.975745] ops_exit_list+0xb3/0x180 [ 338.975822] cleanup_net+0x546/0xad0 [ 338.975903] ? __pfx_cleanup_net+0x10/0x10 [ 338.975998] process_one_work+0x8ee/0x1a10 [ 338.976114] ? __pfx_lock_acquire+0x10/0x10 [ 338.976192] ? __pfx_process_one_work+0x10/0x10 [ 338.976296] ? srso_return_thunk+0x5/0x5f [ 338.976395] ? move_linked_works+0x172/0x270 [ 338.976469] ? srso_return_thunk+0x5/0x5f [ 338.976560] ? assign_work+0x196/0x240 [ 338.976655] worker_thread+0x674/0xe70 [ 338.976751] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.976836] ? srso_return_thunk+0x5/0x5f [ 338.976932] ? __pfx_worker_thread+0x10/0x10 [ 338.977033] kthread+0x3ab/0x720 [ 338.977121] ? __pfx_kthread+0x10/0x10 [ 338.977209] ? srso_return_thunk+0x5/0x5f [ 338.977308] ? finish_task_switch.isra.0+0x206/0x840 [ 338.977392] ? __pfx_kthread+0x10/0x10 [ 338.977482] ret_from_fork+0x48/0x80 [ 338.977534] ? __pfx_kthread+0x10/0x10 [ 338.977622] ret_from_fork_asm+0x1a/0x30 [ 338.977733] [ 339.147695] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 341.071183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.079601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.084643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.091578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.094227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.099693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.712175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.717120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.720883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.728395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.732795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.737069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.775006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.782909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.786797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.789966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.794386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.803840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.843033] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.847079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.848909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.853830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.858790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.860519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.909056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.920688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.927886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.929935] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.932141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.933785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.935424] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.936889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.948879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.949707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.956911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.960634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.970417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.981924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.990515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.990623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.994195] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.004946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.004993] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.006792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.015412] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.030090] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.038265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.041253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.109647] Bluetooth: hci0: command tx timeout [ 343.814846] Bluetooth: hci2: command tx timeout [ 343.815852] Bluetooth: hci1: command tx timeout [ 343.941645] Bluetooth: hci3: command tx timeout [ 344.070714] Bluetooth: hci7: command tx timeout [ 344.134591] Bluetooth: hci4: command tx timeout [ 344.135274] Bluetooth: hci6: command tx timeout [ 344.136313] Bluetooth: hci5: command tx timeout [ 345.157605] Bluetooth: hci0: command tx timeout [ 345.862632] Bluetooth: hci2: command tx timeout [ 345.863093] Bluetooth: hci1: command tx timeout [ 345.990615] Bluetooth: hci3: command tx timeout [ 346.117673] Bluetooth: hci7: command tx timeout [ 346.183563] Bluetooth: hci5: command tx timeout [ 346.184011] Bluetooth: hci6: command tx timeout [ 346.184393] Bluetooth: hci4: command tx timeout [ 347.208555] Bluetooth: hci0: command tx timeout [ 347.909650] Bluetooth: hci2: command tx timeout [ 347.910133] Bluetooth: hci1: command tx timeout [ 348.039552] Bluetooth: hci3: command tx timeout [ 348.165880] Bluetooth: hci7: command tx timeout [ 348.232586] Bluetooth: hci4: command tx timeout [ 348.233017] Bluetooth: hci6: command tx timeout [ 348.233429] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 20:34:38 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283ea10 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88802fdd6c08 R8 =0000000000000000 R9 =ffffed1001e23046 R10=00000000000fe503 R11=6b20202020202020 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10d2e66 R15=dffffc0000000000 RIP=ffffffff8283ea65 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561186a49008 CR3=00000000312aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000002ee73 RCX=ffffffff819994d6 RDX=ffff888034a80000 RSI=00000000000077cb RDI=0000000000000006 RBP=1ffff11001dd3eb9 RSP=ffff88800ee9f5b8 R8 =0000000000000000 R9 =fffff94000177396 R10=000000000002ee73 R11=ffff88800ee857f8 R12=00000000000077cb R13=00007f6d380b1000 R14=000000000007ffdf R15=0000000000000000 RIP=ffffffff81719ca6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557b5d0fc9f0 CR3=000000001918a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ff00000000000000 XMM02=38336c6c696b66723a6c6c696b66722b XMM03=0038336c6c696b66723a6c6c696b6672 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000005000000090000557b5d0dacc0 XMM06=0000557b5d0ac3d000000006ffffffff XMM07=00000000000000000000000000000000 XMM08=38336c6c696b66723a6c6c696b66722b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000