syzkaller login: [ 71.350497] sshd (229) used greatest stack depth: 23632 bytes left
Warning: Permanently added '[localhost]:25309' (ECDSA) to the list of known hosts.
2025/01/29 22:22:15 fuzzer started
2025/01/29 22:22:15 dialing manager at localhost:36977
[ 74.637752] cgroup: Unknown subsys name 'net'
[ 74.753347] cgroup: Unknown subsys name 'cpuset'
[ 74.806348] cgroup: Unknown subsys name 'rlimit'
2025/01/29 22:22:33 syscalls: 201
2025/01/29 22:22:33 code coverage: enabled
2025/01/29 22:22:33 comparison tracing: enabled
2025/01/29 22:22:33 extra coverage: enabled
2025/01/29 22:22:33 setuid sandbox: enabled
2025/01/29 22:22:33 namespace sandbox: enabled
2025/01/29 22:22:33 Android sandbox: enabled
2025/01/29 22:22:33 fault injection: enabled
2025/01/29 22:22:33 leak checking: enabled
2025/01/29 22:22:33 net packet injection: enabled
2025/01/29 22:22:33 net device setup: enabled
2025/01/29 22:22:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/29 22:22:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/29 22:22:33 USB emulation: enabled
2025/01/29 22:22:33 hci packet injection: enabled
2025/01/29 22:22:33 wifi device emulation: enabled
2025/01/29 22:22:33 802.15.4 emulation: enabled
2025/01/29 22:22:33 fetching corpus: 0, signal 0/0 (executing program)
2025/01/29 22:22:34 starting 8 fuzzer processes
22:22:34 executing program 0:
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x420, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4044041)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x72}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x200000d0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x32fab28b76289c39)
waitid(0x2, 0x0, &(0x7f00000003c0), 0x8, &(0x7f0000000440))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x9880)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x0, 0x0, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x0, 0x4, 0x3f}})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r3)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r3)
sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20008000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r5)
sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x80)
22:22:34 executing program 1:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000000)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9e44df6d11e64059}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8400)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x7e}}}}, ["", "", "", ""]}, 0x30}}, 0x4000800)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x42040020}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x258, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd43}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x154, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd5d5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4f4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555540104}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x90}, 0x20004010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan0\x00'})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x33}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e11450500bfaf7d8f112f6d93dd5f921"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "39a91255e403244d808b8d638c823ced"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x48000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040818}, 0xc000)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
22:22:34 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x400, 0x1, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x20040080)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x48880}, 0x80c0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x20004041)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mlockall(0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008800}, 0xc815)
restart_syscall()
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r5)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CALIPSO\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40854}, 0x4810)
[ 93.880471] audit: type=1400 audit(1738189355.006:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:22:35 executing program 3:
clone(0x4000, &(0x7f0000000000)="6ed9389f794ca1b14139d04276a403d978dac1431a6455", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="fd69ecbdea7f3caeef6165316a0f6684fe2a51968b18c8b2b72af964dd156b77f18e259d1f5ddd37fd26ddf04cde35913bc14432f3f0474761029d1ff602221f4aa0629dd0d406577a7b9c97f06705a4c025e1beb45060b9ff674573f923d09474537a81d4e1eead1ed210d9ecb97572e2521430a1c36f5408c5da98ed7b0ac359ac08320c94ee0c831ea070")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2\x00', 0x1ff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x42000)
clone(0x4000000, &(0x7f00000002c0)="43d15ad9f7f7563a4d89d64e38a447e2cfce85289d319b15d5a85f5abfcbf5", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e60ba35b340151d32064cc3f728cb08f871b4878e30fe90065dbefa3960cd5b40b880930c96cda97ea008ad792194160bb1e3f332f3979870aa800b04b369ec35eb61834d331c6a7cbf885e86660ee2cc66c18d542a46a3b1395d1bdc6d7fc66f58aafb58ebab7e71c1d1061ed3533e68791d425b280a31cab284cb9d70c9ee82c7570707f9782ae9f95b91e47e1a8f7a8825101ed8d8b81ac82")
setrlimit(0xd, &(0x7f0000000440)={0x280000000000000, 0x4})
getpriority(0x2, 0xffffffffffffffff)
sched_rr_get_interval(0x0, &(0x7f0000000480))
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000081)
syz_io_uring_setup(0x6602, &(0x7f00000005c0)={0x0, 0x2063, 0x4, 0x3, 0x1d4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000640)=<r0=>0x0, &(0x7f0000000680))
syz_io_uring_setup(0x48, &(0x7f00000006c0)={0x0, 0x1c7e, 0x1, 0x2, 0xf6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000740), &(0x7f0000000780)=<r1=>0x0)
r2 = syz_open_dev$vcsn(&(0x7f00000007c0), 0xfffffffffffff445, 0x42)
syz_io_uring_submit(r0, r1, &(0x7f0000000840)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r2, 0x0, &(0x7f0000000800)='./file0\x00', 0x42, 0x220000, 0x23456}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x8, 0x7, 0x1, @private1, @local, 0x7800, 0x7800, 0x8000, 0x38ea}})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x42}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8455)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20)
r4 = clone3(&(0x7f0000000e40)={0x2000, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00), {0x39}, &(0x7f0000000c40)=""/189, 0xbd, &(0x7f0000000d00)=""/217, &(0x7f0000000e00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9, {r2}}, 0x58)
ptrace$peeksig(0x4209, r4, &(0x7f0000000ec0)={0x9, 0x1, 0x3}, &(0x7f0000000f00)=[{}, {}, {}])
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001080), 0x6480)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f00000010c0))
22:22:35 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', <r0=>0x0, 0x4, 0x64, 0x1, 0x2, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x7, 0x8000}})
r1 = socket(0x21, 0xa, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r2=>0x0, 0x4, 0x6, 0x1, 0x8, 0x86, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7, 0x2, 0x6}})
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x8041)
r3 = socket$inet6(0xa, 0x80000, 0x7)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', <r4=>r0, 0x29, 0x20, 0x3, 0x800000, 0x20, @mcast2, @empty, 0x1, 0x0, 0x1, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r4, 0x4, 0x2, 0x40, 0x4, 0x4, @mcast2, @mcast2, 0x8, 0x8000, 0x4df3, 0x8}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r1)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r7, 0x404, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000899)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r8 = socket(0x1d, 0x2, 0xc41)
ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000007c0))
epoll_pwait(0xffffffffffffffff, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x6, &(0x7f0000000880)={[0x4]}, 0x8)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0x4, 0xe5, 0x7fff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x6, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', r10, 0x80, 0x8, 0xffffe639, 0x2, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x67, 0x0, 0x58, 0x2f, 0x0, @remote, @multicast1, {[@noop, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a40)={'gre0\x00', r2, 0x8, 0x8040, 0x200, 0x6, {{0x1c, 0x4, 0x1, 0x9, 0x70, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x69, 0x1, 0x9}, @lsrr={0x83, 0x1f, 0x46, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @broadcast, @multicast1, @local, @multicast2, @local]}, @lsrr={0x83, 0x3, 0x4e}, @timestamp_addr={0x44, 0x34, 0x12, 0x1, 0x0, [{@rand_addr=0x64010101, 0x6}, {@loopback, 0x400}, {@private=0xa010100, 0x8}, {@multicast1, 0x1000}, {@empty, 0x4}, {@private=0xa010102, 0xc6db}]}, @end]}}}}})
22:22:35 executing program 6:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x3, 0x2, 0x5}})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x72000)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x2, 0x1, 0xfffffe13}, 0xffffffffffffffff, 0x4e5e7607, 0x7})
r2 = pidfd_getfd(r1, r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={r2, r2, 0x8})
pidfd_send_signal(r1, 0x13, &(0x7f0000000140)={0x33, 0x9c, 0x8}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0x0, 0x1, 0x10000, 0x0, 0x7ff}, 0xffff, 0x3, 'id0\x00', 'timer1\x00', 0x0, 0x3838, 0x7fffffff, 0xe0, 0xcbd})
clone3(&(0x7f0000001480)={0x100000, &(0x7f00000002c0)=<r3=>0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=<r4=>0x0, {0x7}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/168, &(0x7f0000001440)=[0xffffffffffffffff, 0x0], 0x2}, 0x58)
waitid(0x0, r4, &(0x7f0000001500), 0x2, &(0x7f0000001580))
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x36}, {0x4}, {0x24}, {0x18, 0x1}, {0x30}, {0x1b, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x6}, {0x30}, {0x1b, 0x1}, {0x5, 0x1}, {0x4}, {0xb}, {0x2, 0x1}, {0x12}, {0x48}, {0x2c, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x36}, {0x12, 0x1}, {0x6}, {0x6}, {0x24, 0x1}, {0x16, 0x1}, {0x12}, {0xb}, {0x1, 0x1}, {0x12, 0x1}, {0x36}, {0x48}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000001780)=""/120)
waitid$P_PIDFD(0x3, r3, 0x0, 0x4, &(0x7f0000001800))
r5 = epoll_create(0x81)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000001900)={0x80000000})
process_mrelease(r2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000001940)={0x0, 0x0, r2, 0x4})
ptrace$peeksig(0x4209, 0x0, &(0x7f0000001980)={0x5a41, 0x0, 0x5}, &(0x7f00000019c0)=[{}, {}, {}, {}, {}])
22:22:35 executing program 5:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x10000000})
r1 = socket(0xa, 0x5, 0xff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', <r2=>0x0, 0x7800, 0x40, 0xffffffff, 0x5, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x68, 0x0, 0x7f, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x3, [{@private=0xa010102, 0x8}, {@local, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x2, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}, {@multicast1, 0x7fb}]}, @generic={0x94, 0x5, "cb423c"}]}}}}})
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000)
r3 = socket$inet6(0xa, 0x5, 0xffffff4a)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/67, 0x43, 0x1, &(0x7f0000000300)=""/51, 0x33}, &(0x7f0000000380)=0x40)
r4 = pidfd_getfd(r0, r0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>r2, 0x10, 0x1, 0x1, 0x5, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty, {[@cipso={0x86, 0x2c, 0x3, [{0x2, 0x7, "6d0038dc59"}, {0x5, 0x6, "0309a893"}, {0x6, 0x8, "0792a9a90bbd"}, {0x2, 0x3, "f6"}, {0x7, 0xe, "c959a89b8b4fabb0b8305501"}]}]}}}}})
r6 = syz_open_dev$vcsn(&(0x7f0000000480), 0x2, 0xd0201)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', <r7=>r5, 0x700, 0x8000, 0x5, 0xbbd, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0xc0, 0x4, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x80, [@empty, @remote]}, @ssrr={0x89, 0xb, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'gre0\x00', r7, 0x80, 0x80, 0x9, 0x1, {{0x25, 0x4, 0x2, 0x17, 0x94, 0x66, 0x0, 0x0, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x50, [@multicast2, @multicast2, @local, @remote]}, @timestamp_prespec={0x44, 0x44, 0x63, 0x3, 0x8, [{@local, 0xc9f8}, {@remote, 0xfff}, {@broadcast, 0x8}, {@broadcast, 0x7}, {@empty, 0x1b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}, {@multicast2, 0x3}, {@multicast2, 0xfc57}]}, @cipso={0x86, 0x16, 0x3, [{0x0, 0x10, "7fe2b7ead1b59d4dcffd4170712c"}]}, @ssrr={0x89, 0xf, 0x90, [@private=0xa010102, @remote, @private=0xa010100]}]}}}}})
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f00000006c0)={0xa74, 0x0, 0x600, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x3f3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_b, @initial, {0x9, 0xf66}}, 0x2, @random=0xfffe, 0x7070, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x4, [{0x1}, {0x18}, {0x1, 0x1}, {0x60, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x1f, 0x2, 0x4}}, @val={0x6, 0x2, 0x7}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x820, 0x1, 0x2, 0x0, {0x6, 0x4, 0x0, 0x36f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x1, 0x3}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x3d, "d85d77ffbf617d4d914bee4b39defe9db0908ff451473db92c6afd8ab7dc1637faa6cfde394e0f4f13de32a51a848d5b8d82191fd39363d5097f03a569"}, {0xdd, 0x78, "b5e950dc2c24904fe861a9aa777c28eab9997a7c545912ef8b55ef59d537c086dec1180e4a145f471e92f19a59b429d7108ad0e49323e92d6b3ccf8c411052a6b5084c3798b39e8d9d1aa272abdb3571dc18fbefc2158fd942ef3d884602148c5469840c8487ee7c310954b9c58184f7acc5f19d9ba0cedb"}, {0xdd, 0xf5, "2220717b852e9ebead206806ffaee2d63325c62019a69efa997af7893ec50b60930f6ff53ff6785ef280378c5764f2929fbb62bfa029e0c37a9873c39968e72831a7779bce94f442adc41e236339750ba6129b551b3e50bb480a023beb4a695f4a0d27707da8eeca3ae9d81021daff5b785d5314975b505aa426b685f34919a73ae38e6fbca4de4ac8ca3e31d6b29de6b90f3027ed1d2ca81cb1acd2e23e2ad372d0cddd3a3c38f5881b328b1c0cf6cc8271d5f52e5adf81170f40fa4b1cc67c3578a26957221c5452fdcef08e8bc40db49149bcdb8c5c8911dcf7947b435c295f37cb51d1aa71250f56613f5d54263b3b51c79265"}, {0xdd, 0x5e, "e41ea4e226d5eb762b1cfde17451c3f7fb34609dd96362d9a5c1011f9e27a771cb18c1ba17de4318bcc2c8dc577d67386dad14260e17505ed6b470bdfb4049ba9be1385e686ed5d5138d7432fd0ecb39cd41f6db8bc3576af4ad287e6e10"}, {0xdd, 0x22, "609282a0e8ea0db485eadc2b8a6d201b15c9e490610bc332f17d1fa76a2a42a9cc19"}, {0xdd, 0x59, "8b3ff146d184a2920b968086c8684905af0b9525163f77755689f5471c7e66d7128887e77d39004b952c687e2ef9642e2d750d50ce6a8ecbcc2d46d058ecb7870a81845f880cefd52abdba661f8f0d2a4e6c97b906fdf7d93b"}, {0xdd, 0xfc, "60a3f90d8e6976a0908672c5dd39b6366d477dddec06a1db60b50b6b25ed79696951cab3437f1173114e71263d6a4ff97eec00b9c786d0e046d5f1fe21a78b1e1e8e091633ee1ab513a8d4a674de097fb74e583281b6c398f839b86f7857fb833cee68fd54d8a5d9c8fd1164c4553f22cfb58f72c38f9b94126cdfc30069d56e0fd16c132d798a6629aead0cce2d3fcc67913082bf1d337aa60483ca84079a139e07a99bc19fd2a1e7bd161fc91cc3e05970e999c32afb540671ae8356852ef34961d1302ee0b20dc0e4d36cb7034e146b7fb8dce3b89b233c99785006dd366ab91943cd8e778335c14c137d9507161fe07ac6b6e282ded77420673f"}]}}, @NL80211_ATTR_BEACON_HEAD={0x619, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0xfc0}, @device_b, @device_a, @random="5fd66eb99bf2", {0x4, 0x4}}, 0x9, @default, 0x402, @val={0x0, 0x7, @random="fe724a9df70e53"}, @val={0x1, 0x6, [{0xc, 0x1}, {0x18, 0x1}, {0xc}, {0x1}, {0x12}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x1a, 0x0, 0x8ddd, 0xf000}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3b, {0xbd, 0x3f, 0x80, "7086048079bd23c624cfd525289a228edb8b2ef5538a1b63e1960b68a2e9973e86ff6823e57122f3ff4e497a4f91c069015568b73dc03fd3"}}, @val={0x25, 0x3, {0x0, 0x95, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0x6c, 0xa1, 0x1}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x4, 0x0, {0x9, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x7, 0x9}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb8, "3509160ef116ae8d4d850e4a033cbbdd545fd8b8a2f2d006af5101b8cff26d6785df4b461abbc414ff68bd06884f345a6d4a33871afc4fdfb1f12b5e14d8350e6cfa42fe75f19da2ab73d29f711b417046c2b51987cdb0cd34a24e0b6bcbdc66c781e29292d5f63ce853a12589b789383bc480cae8cb72c78e27bf1d12e48a8233a8ed0b369206f8e53cee636150bf6b88805a831f2da08e216f7cf128ce21099b08f804a49f0eab654668e5756f4a390df0fbae2db7a39e"}, {0xdd, 0x9, "bc9e6d905818d01700"}, {0xdd, 0xdc, "9f3b0c2ba1f370f2edc5fcc586c75fdb5e62efea20da9a9a5b9745a3f3d3a7acf728c8e183f4dfc811189a3751e2713d549facf1b03f4f8f8e82210c5549c578d03ac0de926b75e9373896b71fbae69c0b4ecd4c00316b7c642efcb4524896bdd9cde54e002a198f6576d853f0a02867dfe222503e6afa3e6a8b9ecfee892f2fe1940cd118edfda219380182f05b378cdf32e403fc0cdd4963ddaf6b2afd8dc33b481c91faa4e1519a09827d80c89dbe2c0bd425dcb20e7e5f8db95fc6ca6f49e23c28a2a01968e10c6e369aa1bb703f25f2dfd541a7c032bdcb63e5"}, {0xdd, 0xf4, "ef804e91463562afd2a283582cbe29737434d30069f6c0009e408c970b5f8fc3c20b4144895f429ed6b33e89f20a008e7bacefcccd94a348d9a92b853b99b76be687b058c3b2d036b24cce6df5f99faddcc57f5a3090e95a80000977b38375c8ef4bbdc02721a7201658c84df6846da532f683587f8d3845bd4ff6a83e36815291a97390d0727a25c392383e5e70ec6797b23102b305059a5b0699c153aef59e30208719bcd84f55def37cf6858b17d3c13e6050088d6633f2d8224f10740709c5d965412f0638c8bb9dc3b6680e1ccd93738d4ad560ed1249d67954c8973b8db2be95c9dbae2be668eca9c0417ac3194ffad467"}, {0xdd, 0x94, "4e774e06b0340f935813ea98c57f465de830797f817c6d25302c24229c9cb1003e159a2366eabe941fb05c877426f2ad4a39da040d62f42a028a503201619b43cd20095b2b95299d078660e9dd302fe562b4622986095bc657fa08f62c4aeb81f1404d54c6729998ad59420ce73fa50034938df10426e03a1966493dde7cc58f37782f28df4d36b59f456e03aff973fe2b32824c"}, {0xdd, 0xfd, "955cb1f4985eb1ab0d14805bd7db313218985fc07a1285a8e4cdac73a0d013351f32f3d0cd79c9fc27dfe46114894ccf518fa3fbff3ee37403506b2a6eda6fca5aa41413a7b2416172b52cea9a7808b1a4d9a76158dc4a007a7c77bfafcc4469bfa26c94e1e50746a96a50f48a79afcaa9f2fae407a68075b41b67b05088a18f471f3845cf9bc28c24a64c0e29ebab7afae96b7540b497409352d81e1ca0e6b35b534bbb31ad51d8012caac69364d32d6374e5c679d5a17a0425d98f3ff5cd5099dc2c7940be1fd7ef181f80c50fde88b9b6d848993c61ac9a5494c3a681859b0d0ce22c4375dd00a59e741f25fd63b6a3fd24a88ec73ebf6365eab6b8"}, {0xdd, 0xaa, "c4304c343bd1449cbcd7d45e088756e6717ce3614c5c1181e2c0604ec9cdd4d1e0f55dde1baaa36f0265ceb5eb535488fe0f7eb090f59b701c3e37acae0b0db975848626537ecc1cb9c09f62d3ad10f01dec4e88a37724bb8636476428f9e9f5193c8cd8630ce14f9bd5831080027a3a07f0c3f4ad9dbd579c885dcdeb1005c79d6a315b351034e6a8a7f38aff60fda9980cf99e86ffa2fa54e04410c492fac8488d5cf9bf16158453dc"}, {0xdd, 0x89, "e53721400e11e1840d5b7dbf69195487d4de9746b36eb92d008c1ac87c73df3f730560a9acc7c43ec0057cc020929f01427c04b8e6dafae536ee62ebafeeb72a913f1ababd6969a16a688b4bdf79792c87f18eb82e4d57a9ef62828c846e45e14e4487554b9136126b002aff703afee412e31d3e6b84da8d97479273220eb5153b666c7f393769c65b"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x36, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x6e}, 0x3b, 0x40, @broadcast, 0x1, 0x400, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x81, 0xa5, 0x1f}}, @mic={0x8c, 0x10, {0xeaf, "991984373713", @short="2b574ead20a050c7"}}]}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4800}, 0x200088c4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'syztnl2\x00', &(0x7f00000011c0)={'syztnl1\x00', r5, 0x700, 0x7, 0x7, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x67, 0x0, 0x1d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}}}})
epoll_pwait2(r6, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001300)={[0x77]}, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001340)='hybla\x00', 0x6)
sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x8800)
clone3(&(0x7f00000016c0)={0x80, &(0x7f0000001480)=<r8=>0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000001500), {0x41}, &(0x7f0000001540)=""/219, 0xdb, &(0x7f0000001640), &(0x7f0000001680)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6, {r4}}, 0x58)
pidfd_getfd(r8, 0xffffffffffffffff, 0x0)
22:22:35 executing program 7:
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x2, 0x1, 0x5, 0x3, 0xffff})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x200000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000280)={{0xffffffffffffffff, 0x2, 0x7f, 0x3, 0x8001}, 0x32dd2d91, 0x3807, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0x76beb60b, 0x7, 0x5})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x20, 0x700, 0x5, 0x0, {{0xf, 0x4, 0x1, 0x26, 0x3c, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xdc, 0x0, 0x0, [0xff, 0x2, 0x2, 0x3, 0x20, 0x7ff, 0xffffffff]}, @end]}}}}})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x5a9001)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000004c0)=""/253)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x604, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x20000800)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x20080, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740))
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000007c0))
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x103, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x20040004)
[ 95.348562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.354739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.361877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.371934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.378529] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 95.385879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 95.387187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.404215] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 95.406369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 95.410412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 95.411456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 95.415687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 95.423157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 95.425786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 95.428717] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 95.431198] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 95.431355] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 95.440177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 95.462427] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 95.467977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 95.470830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 95.472335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 95.474384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 95.480016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 95.491341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 95.493320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 95.494688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 95.494797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 95.520066] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 95.526901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 95.528741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 95.533034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 95.568560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 95.571028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 95.578743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 95.580673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 95.582459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 95.584464] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 95.586068] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 95.591428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 95.594212] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 95.595952] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 95.597705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 95.599863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 95.601345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 95.602376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 95.611802] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 95.614862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 97.416838] Bluetooth: hci0: command tx timeout
[ 97.481274] Bluetooth: hci1: command tx timeout
[ 97.543395] Bluetooth: hci2: command tx timeout
[ 97.607426] Bluetooth: hci3: command tx timeout
[ 97.608627] Bluetooth: hci4: command tx timeout
[ 97.672335] Bluetooth: hci6: command tx timeout
[ 97.673124] Bluetooth: hci7: command tx timeout
[ 97.673754] Bluetooth: hci5: command tx timeout
[ 99.464631] Bluetooth: hci0: command tx timeout
[ 99.528850] Bluetooth: hci1: command tx timeout
[ 99.593330] Bluetooth: hci2: command tx timeout
[ 99.655713] Bluetooth: hci4: command tx timeout
[ 99.657132] Bluetooth: hci3: command tx timeout
[ 99.721323] Bluetooth: hci7: command tx timeout
[ 99.722304] Bluetooth: hci5: command tx timeout
[ 99.725324] Bluetooth: hci6: command tx timeout
[ 101.512299] Bluetooth: hci0: command tx timeout
[ 101.575368] Bluetooth: hci1: command tx timeout
[ 101.640309] Bluetooth: hci2: command tx timeout
[ 101.704485] Bluetooth: hci4: command tx timeout
[ 101.704994] Bluetooth: hci3: command tx timeout
[ 101.767362] Bluetooth: hci5: command tx timeout
[ 101.767870] Bluetooth: hci6: command tx timeout
[ 101.768396] Bluetooth: hci7: command tx timeout
[ 103.559371] Bluetooth: hci0: command tx timeout
[ 103.624336] Bluetooth: hci1: command tx timeout
[ 103.687316] Bluetooth: hci2: command tx timeout
[ 103.751536] Bluetooth: hci4: command tx timeout
[ 103.752023] Bluetooth: hci3: command tx timeout
[ 103.816313] Bluetooth: hci6: command tx timeout
[ 103.816809] Bluetooth: hci7: command tx timeout
[ 103.817272] Bluetooth: hci5: command tx timeout
[ 157.804501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 157.806546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 157.808697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 157.817916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 157.820893] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 157.821933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 157.986543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 157.989801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 157.993042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 157.998861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 158.001907] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 158.003620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 158.045684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 158.048489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 158.050653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 158.055111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 158.058634] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 158.059795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 158.099918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 158.104539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 158.105808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 158.113583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 158.116951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 158.121937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 158.183716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 158.192050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 158.205038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 158.219613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 158.222516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 158.224104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 158.245580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 158.267425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 158.278607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 158.282714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 158.294332] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 158.297747] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 158.394474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 158.410127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 158.421499] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 158.423107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 158.466763] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 158.468508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 158.471918] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 158.474668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 158.475556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 158.486256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 158.495126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 158.498449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 159.879300] Bluetooth: hci0: command tx timeout
[ 160.072558] Bluetooth: hci1: command tx timeout
[ 160.135602] Bluetooth: hci3: command tx timeout
[ 160.136146] Bluetooth: hci2: command tx timeout
[ 160.391350] Bluetooth: hci6: command tx timeout
[ 160.392033] Bluetooth: hci5: command tx timeout
[ 160.583749] Bluetooth: hci7: command tx timeout
[ 160.585283] Bluetooth: hci4: command tx timeout
[ 161.927307] Bluetooth: hci0: command tx timeout
[ 162.120282] Bluetooth: hci1: command tx timeout
[ 162.183497] Bluetooth: hci2: command tx timeout
[ 162.183964] Bluetooth: hci3: command tx timeout
[ 162.439340] Bluetooth: hci5: command tx timeout
[ 162.439849] Bluetooth: hci6: command tx timeout
[ 162.631407] Bluetooth: hci7: command tx timeout
[ 162.631928] Bluetooth: hci4: command tx timeout
[ 163.975371] Bluetooth: hci0: command tx timeout
[ 164.167441] Bluetooth: hci1: command tx timeout
[ 164.231773] Bluetooth: hci3: command tx timeout
[ 164.232291] Bluetooth: hci2: command tx timeout
[ 164.487404] Bluetooth: hci6: command tx timeout
[ 164.487910] Bluetooth: hci5: command tx timeout
[ 164.679408] Bluetooth: hci4: command tx timeout
[ 164.679896] Bluetooth: hci7: command tx timeout
[ 166.023299] Bluetooth: hci0: command tx timeout
[ 166.216267] Bluetooth: hci1: command tx timeout
[ 166.279388] Bluetooth: hci3: command tx timeout
[ 166.279848] Bluetooth: hci2: command tx timeout
[ 166.535338] Bluetooth: hci6: command tx timeout
[ 166.535853] Bluetooth: hci5: command tx timeout
[ 166.727700] Bluetooth: hci7: command tx timeout
[ 166.728190] Bluetooth: hci4: command tx timeout
[ 218.519777]
[ 218.520009] ======================================================
[ 218.520541] WARNING: possible circular locking dependency detected
[ 218.521087] 6.13.0-next-20250129 #1 Not tainted
[ 218.521508] ------------------------------------------------------
[ 218.522379] kworker/u8:0/11 is trying to acquire lock:
[ 218.523467] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[ 218.525276]
[ 218.525276] but task is already holding lock:
[ 218.526394] ffff888028f60768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 218.528633]
[ 218.528633] which lock already depends on the new lock.
[ 218.528633]
[ 218.530153]
[ 218.530153] the existing dependency chain (in reverse order) is:
[ 218.531455]
[ 218.531455] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 218.532061] __mutex_lock+0x13d/0xb50
[ 218.532516] wiphy_register+0x1b2e/0x25d0
[ 218.532967] ieee80211_register_hw+0x23a4/0x3d60
[ 218.533472] mac80211_hwsim_new_radio+0x2759/0x4d60
[ 218.533988] init_mac80211_hwsim+0x389/0x870
[ 218.534470] do_one_initcall+0xf9/0x640
[ 218.534911] kernel_init_freeable+0x53d/0x7a0
[ 218.535408] kernel_init+0x1e/0x2d0
[ 218.535804] ret_from_fork+0x48/0x80
[ 218.536203] ret_from_fork_asm+0x1a/0x30
[ 218.536641]
[ 218.536641] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 218.537215] __lock_acquire+0x29fd/0x4580
[ 218.537652] lock_acquire+0x19b/0x520
[ 218.538060] __mutex_lock+0x13d/0xb50
[ 218.538481] unregister_netdevice_many_notify+0x1612/0x1c80
[ 218.539043] unregister_netdevice_queue+0x224/0x2e0
[ 218.539607] _cfg80211_unregister_wdev+0x57b/0x700
[ 218.540168] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 218.540727] ieee80211_unregister_hw+0x55/0x3a0
[ 218.541267] hwsim_exit_net+0x3a0/0x730
[ 218.541733] ops_exit_list+0xb3/0x180
[ 218.542180] cleanup_net+0x546/0xad0
[ 218.542626] process_one_work+0x8ee/0x1a10
[ 218.543133] worker_thread+0x674/0xe70
[ 218.543613] kthread+0x3ab/0x720
[ 218.544005] ret_from_fork+0x48/0x80
[ 218.544448] ret_from_fork_asm+0x1a/0x30
[ 218.544939]
[ 218.544939] other info that might help us debug this:
[ 218.544939]
[ 218.545678] Possible unsafe locking scenario:
[ 218.545678]
[ 218.546244] CPU0 CPU1
[ 218.546694] ---- ----
[ 218.547143] lock(&rdev->wiphy.mtx);
[ 218.547544] lock(rtnl_mutex);
[ 218.548113] lock(&rdev->wiphy.mtx);
[ 218.548730] lock(rtnl_mutex);
[ 218.549092]
[ 218.549092] *** DEADLOCK ***
[ 218.549092]
[ 218.549642] 4 locks held by kworker/u8:0/11:
[ 218.550078] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[ 218.550980] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[ 218.551858] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[ 218.552672] #3: ffff888028f60768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 218.553571]
[ 218.553571] stack backtrace:
[ 218.553980] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250129 #1
[ 218.554023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 218.554049] Workqueue: netns cleanup_net
[ 218.554100] Call Trace:
[ 218.554112] <TASK>
[ 218.554125] dump_stack_lvl+0xca/0x120
[ 218.554193] print_circular_bug+0x47b/0x750
[ 218.554248] check_noncircular+0x2e9/0x3c0
[ 218.554296] ? lock_repin_lock+0x207/0x320
[ 218.554365] ? __pfx_check_noncircular+0x10/0x10
[ 218.554414] ? hlock_class+0x4e/0x130
[ 218.554450] ? mark_lock+0xac/0xed0
[ 218.554497] ? __pfx_lock_repin_lock+0x10/0x10
[ 218.554571] ? lockdep_lock+0xba/0x1b0
[ 218.554641] ? __pfx_lockdep_lock+0x10/0x10
[ 218.554718] __lock_acquire+0x29fd/0x4580
[ 218.554787] ? __pfx___lock_acquire+0x10/0x10
[ 218.554841] ? lock_release+0x20f/0x6f0
[ 218.554897] ? __pfx_lock_release+0x10/0x10
[ 218.554955] lock_acquire+0x19b/0x520
[ 218.555010] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 218.555072] ? __pfx_lock_acquire+0x10/0x10
[ 218.555126] ? srso_return_thunk+0x5/0x5f
[ 218.555191] ? lock_release+0x20f/0x6f0
[ 218.555243] ? srso_return_thunk+0x5/0x5f
[ 218.555308] ? lock_is_held_type+0x9e/0x120
[ 218.555374] ? srso_return_thunk+0x5/0x5f
[ 218.555441] __mutex_lock+0x13d/0xb50
[ 218.555500] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 218.555550] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 218.555602] ? srso_return_thunk+0x5/0x5f
[ 218.555666] ? synchronize_rcu_expedited+0x38a/0x420
[ 218.555719] ? __pfx___mutex_lock+0x10/0x10
[ 218.555781] ? __pfx_autoremove_wake_function+0x10/0x10
[ 218.555845] ? srso_return_thunk+0x5/0x5f
[ 218.555908] ? kasan_quarantine_put+0x84/0x1e0
[ 218.555979] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 218.556020] ? srso_return_thunk+0x5/0x5f
[ 218.556088] unregister_netdevice_many_notify+0x1612/0x1c80
[ 218.556142] ? __virt_addr_valid+0x2e8/0x5d0
[ 218.556204] ? __pfx_lock_release+0x10/0x10
[ 218.556256] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 218.556309] ? find_held_lock+0x2c/0x110
[ 218.556378] ? srso_return_thunk+0x5/0x5f
[ 218.556444] ? kernfs_remove_by_name_ns+0xc7/0x130
[ 218.556512] ? srso_return_thunk+0x5/0x5f
[ 218.556575] ? lock_release+0x20f/0x6f0
[ 218.556627] ? __pfx_lock_release+0x10/0x10
[ 218.556676] ? srso_return_thunk+0x5/0x5f
[ 218.556739] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 218.556794] ? srso_return_thunk+0x5/0x5f
[ 218.556863] unregister_netdevice_queue+0x224/0x2e0
[ 218.556913] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 218.556968] ? up_write+0x195/0x520
[ 218.557031] _cfg80211_unregister_wdev+0x57b/0x700
[ 218.557107] ? srso_return_thunk+0x5/0x5f
[ 218.557173] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 218.557216] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 218.557291] ? srso_return_thunk+0x5/0x5f
[ 218.557354] ? srso_return_thunk+0x5/0x5f
[ 218.557416] ? synchronize_rcu+0x1ff/0x260
[ 218.557466] ieee80211_unregister_hw+0x55/0x3a0
[ 218.557517] hwsim_exit_net+0x3a0/0x730
[ 218.557566] ? __pfx_hwsim_exit_net+0x10/0x10
[ 218.557612] ? srso_return_thunk+0x5/0x5f
[ 218.557674] ? netdev_run_todo+0x788/0x1040
[ 218.557730] ? __pfx_hwsim_exit_net+0x10/0x10
[ 218.557778] ops_exit_list+0xb3/0x180
[ 218.557827] cleanup_net+0x546/0xad0
[ 218.557878] ? __pfx_cleanup_net+0x10/0x10
[ 218.557939] process_one_work+0x8ee/0x1a10
[ 218.558016] ? __pfx_lock_acquire+0x10/0x10
[ 218.558071] ? __pfx_process_one_work+0x10/0x10
[ 218.558141] ? srso_return_thunk+0x5/0x5f
[ 218.558203] ? move_linked_works+0x172/0x270
[ 218.558257] ? srso_return_thunk+0x5/0x5f
[ 218.558323] ? assign_work+0x196/0x240
[ 218.558394] worker_thread+0x674/0xe70
[ 218.558465] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 218.558529] ? __pfx_worker_thread+0x10/0x10
[ 218.558602] kthread+0x3ab/0x720
[ 218.558668] ? __pfx_kthread+0x10/0x10
[ 218.558731] ? srso_return_thunk+0x5/0x5f
[ 218.558796] ? finish_task_switch.isra.0+0x206/0x840
[ 218.558856] ? __pfx_kthread+0x10/0x10
[ 218.558919] ret_from_fork+0x48/0x80
[ 218.558958] ? __pfx_kthread+0x10/0x10
[ 218.559022] ret_from_fork_asm+0x1a/0x30
[ 218.559104] </TASK>
[ 219.827094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 219.828760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 219.830388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 219.838530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 219.841992] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 219.844525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 219.856668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 219.860387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 219.861577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 219.863774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 219.865003] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 219.866134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 219.922168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 219.923371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 219.924624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 219.928324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 219.930577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 219.932391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 219.941333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 219.965510] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 219.979687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 219.980827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 219.989851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 219.994457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 220.005030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 220.005709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 220.007442] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 220.008767] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 220.009583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 220.016017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 220.163669] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 220.170516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 220.175647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 220.186123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 220.211626] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 220.219684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 220.283237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 220.290483] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 220.299348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 220.367219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 220.368252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 220.371370] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 220.376690] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 220.389339] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 220.390397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 220.392154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 220.449406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 220.458134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 221.895387] Bluetooth: hci0: command tx timeout
[ 221.895867] Bluetooth: hci1: command tx timeout
[ 222.023337] Bluetooth: hci4: command tx timeout
[ 222.023820] Bluetooth: hci2: command tx timeout
[ 222.087252] Bluetooth: hci3: command tx timeout
[ 222.343693] Bluetooth: hci5: command tx timeout
[ 222.471459] Bluetooth: hci6: command tx timeout
[ 222.535276] Bluetooth: hci7: command tx timeout
[ 223.944240] Bluetooth: hci1: command tx timeout
[ 223.944728] Bluetooth: hci0: command tx timeout
[ 224.071296] Bluetooth: hci2: command tx timeout
[ 224.071775] Bluetooth: hci4: command tx timeout
[ 224.135261] Bluetooth: hci3: command tx timeout
[ 224.391259] Bluetooth: hci5: command tx timeout
[ 224.519269] Bluetooth: hci6: command tx timeout
[ 224.583894] Bluetooth: hci7: command tx timeout
[ 225.991274] Bluetooth: hci0: command tx timeout
[ 225.991769] Bluetooth: hci1: command tx timeout
[ 226.119288] Bluetooth: hci2: command tx timeout
[ 226.119765] Bluetooth: hci4: command tx timeout
[ 226.183448] Bluetooth: hci3: command tx timeout
[ 226.439240] Bluetooth: hci5: command tx timeout
[ 226.567301] Bluetooth: hci6: command tx timeout
[ 226.631323] Bluetooth: hci7: command tx timeout
[ 228.039249] Bluetooth: hci1: command tx timeout
[ 228.039706] Bluetooth: hci0: command tx timeout
[ 228.167268] Bluetooth: hci4: command tx timeout
[ 228.167849] Bluetooth: hci2: command tx timeout
[ 228.231269] Bluetooth: hci3: command tx timeout
[ 228.487417] Bluetooth: hci5: command tx timeout
VM DIAGNOSIS:
22:24:39 Registers:
info registers vcpu 0
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec90
R8 =0000000000000000 R9 =ffffed100165d046 R10=0000000000000038 R11=3038383866666666
R12=0000000000000038 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580
RIP=ffffffff8283c5ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055de5dacf078 CR3=0000000034e1c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000001ffffffff000055de5db097c0
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055de5daeb070000055de5daea6e0
XMM06=000055de5daac76000000002ffffffff XMM07=00000000000000000000000000000000
XMM08=00000000000000310000746e65696c00 XMM09=00000000000000000000000000000000
XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000007 RBX=ffff88800be28000 RCX=ffffffff81429b3f RDX=0000000000000000
RSI=0000000000200000 RDI=0000000000000000 RBP=0000000000200000 RSP=ffff88800be37db0
R8 =0000000000000000 R9 =ffffed1001ddc780 R10=ffff88800eee3c07 R11=ffff88800be284b8
R12=ffffffff863b9ff9 R13=ffff888008c50378 R14=ffff88800be28000 R15=0000000000000086
RIP=ffffffff81719fc8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005611f3462e60 CR3=00000000070fc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=0000000200000000000055de5daedad0 XMM05=00000000000000000000000000000000
XMM06=000055de5db1aee000000000ffffffff XMM07=00000000000000000000000000000000
XMM08=000000000000003100004e4f53414552 XMM09=00000000000000000000000000000000
XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000