Warning: Permanently added '[localhost]:29990' (ECDSA) to the list of known hosts. 2025/01/31 02:22:58 fuzzer started 2025/01/31 02:22:59 dialing manager at localhost:46401 syzkaller login: [ 78.085270] cgroup: Unknown subsys name 'net' [ 78.188849] cgroup: Unknown subsys name 'cpuset' [ 78.225227] cgroup: Unknown subsys name 'rlimit' 2025/01/31 02:23:26 syscalls: 204 2025/01/31 02:23:26 code coverage: enabled 2025/01/31 02:23:26 comparison tracing: enabled 2025/01/31 02:23:26 extra coverage: enabled 2025/01/31 02:23:26 setuid sandbox: enabled 2025/01/31 02:23:26 namespace sandbox: enabled 2025/01/31 02:23:26 Android sandbox: enabled 2025/01/31 02:23:26 fault injection: enabled 2025/01/31 02:23:26 leak checking: enabled 2025/01/31 02:23:26 net packet injection: enabled 2025/01/31 02:23:26 net device setup: enabled 2025/01/31 02:23:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/31 02:23:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/31 02:23:26 USB emulation: enabled 2025/01/31 02:23:26 hci packet injection: enabled 2025/01/31 02:23:26 wifi device emulation: enabled 2025/01/31 02:23:26 802.15.4 emulation: enabled 2025/01/31 02:23:26 fetching corpus: 0, signal 0/0 (executing program) 2025/01/31 02:23:28 starting 8 fuzzer processes 02:23:28 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x3, 0x3, 0x4}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x9) ioctl$TIOCCONS(r0, 0x541d) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x5, 0x0, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000140)=0x66d) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSCTTY(r2, 0x540e, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x9100}, @val={0x1, 0x0, 0x200, 0xffff, 0x7ff}, @eth={@link_local, @broadcast, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0xff, 0x1, 0x0, 0x0, "19c82ddbdf23e348"}}}}}, 0x2c) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000240)) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000280)) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x5, 0x804c3) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000300)) 02:23:28 executing program 1: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x111942, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000080)={{0x200, 0x7}, {0x3, 0x8}, 0x0, 0x1}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=0x9, 0x4) write$snapshot(r0, &(0x7f0000000100)="95d9dce5b7b820c8e1d63686758b0897c7a5606793c54559c05cd46507008ba7a97ac0bca031ba7dbd52f8d86d729e6773a8aeef40e2e270708f13c259313cd1217f130334abaf248ba52aaac49dc2f4a644462c9ee2a634d1356b48dcc7c37af85a4530d3c9e7033780", 0x6a) r1 = io_uring_setup(0x356c, &(0x7f0000000180)={0x0, 0x6858, 0x10, 0x0, 0x32f}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x73, 0x0, &(0x7f0000000200)=[r0, r0, r0, r2, r0]}, 0x5) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = accept4$bt_l2cap(r2, &(0x7f00000003c0), &(0x7f0000000400)=0xe, 0x8297c42ea11d8741) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000440)=0x80, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000480)={0x1, 0x2, 0xff, 0x5, 0x20, 0x80, 0x68}, 0xc) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000004c0)=0x4776, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x6) r4 = io_uring_setup(0x4548, &(0x7f0000000580)={0x0, 0x8cab, 0x4, 0x0, 0xfc, 0x0, r1}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x410000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000680)={0x7fff, 0x0, &(0x7f0000000640)=[r1, r3, r1, r4, r5, r0, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0xa) 02:23:28 executing program 2: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="f2c8a468d80803d5ac1c9fc0d56f564d", 0x10) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x4, 0x8, 0x9, 0x4}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xad95}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r0, 0x541d) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000340)={0x9, 0x6, 0x2, 0x0, 0x0, "99eb015bb7765afb"}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400), 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd21}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x0, @none}, &(0x7f0000000640)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x2000, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000740), &(0x7f0000000780)=0x1) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) [ 106.813864] audit: type=1400 audit(1738290208.533:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:23:28 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x10000000) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x3) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x654, &(0x7f00000000c0)=0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r4 = io_uring_setup(0x7d19, &(0x7f0000000200)={0x0, 0x53d, 0x4, 0x1, 0x2b0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000280), 0x1) r5 = pidfd_getfd(r1, r3, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f00000002c0)=0x400) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x4, 0x4) 02:23:28 executing program 4: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x21, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x2, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040890}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x520, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x100}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1f}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffff81}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xc1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40400c0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x124, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x3}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23d3be03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a12868}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d0e7e9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e42925e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x360ff81f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a2cd322}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x124}, 0x1, 0x0, 0x0, 0x40001}, 0x50) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x76}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x10001}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x434948fb7709c480) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200080c1}, 0x404c000) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x40010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040040) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c40), 0x9001, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x800) 02:23:28 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xd6040, 0x0) r1 = io_uring_setup(0x13ee, &(0x7f0000000040)={0x0, 0x78ab, 0x2, 0x1, 0x316, 0x0, r0}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x101) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x7, 0x0, &(0x7f00000001c0)=[r2, 0xffffffffffffffff, r3, r0, r4, r1, r1, r0, r5]}, 0x9) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x83) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000240)={0x3, 0x9, 0x4, 0xb76, 0x12, "453446981993c919"}) r6 = pidfd_getfd(r0, r2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000280)) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f00000002c0)=0x1) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x9) r8 = pidfd_getfd(r6, r7, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) pidfd_getfd(r0, r9, 0x0) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000340)=0x4, 0x1) ioctl$VT_RELDISP(r9, 0x5605) 02:23:28 executing program 6: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0x9, 0x5516}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2ca880, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000001c0)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000280)=0xffff8b7c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x4044850) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) eventfd(0x20) r4 = syz_open_dev$loop(&(0x7f0000000500), 0x1e95, 0x100002) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000540)) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000580)=0x9, 0x4) 02:23:28 executing program 7: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffff000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000091}, 0x40000) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000844}, 0x8081) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4040001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, r2, 0x100, 0x70bd2b, 0xfa6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x0, 0x7f]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80, 0x8, 0x400, 0x24000000]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000000, 0x100]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x101, 0xfffffff7, 0x8, 0x0, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x81) r6 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000a00)=0x8df2, &(0x7f0000000a40)=0x4) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000f80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b00)={0x408, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a814e98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b333f9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35481ebb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b518816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd419}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac17}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31ea05c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x755ec214}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4939}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2438}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1df35103}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x417}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43e9f62f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc55c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a69}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2263}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9d1c96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf603}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x365c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b755b3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50630d47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ecba4ce}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x1ac, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79e8085e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3096}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f516bb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9378}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x770b7164}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d8ff7b1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x170e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf26be72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e68f0ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3708f552}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17078599}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecb4}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb1d7950}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a8ada64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40e0abf1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x144083bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c70b43b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6af6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x974a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf3c}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x443f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a645049}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dbd805b}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ba8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x905888b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53588138}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x987c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fd03b75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ee40bc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf99}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cb932cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4334}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4da9c7d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e3d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x124e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f669543}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2881}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e680fba}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fd96c19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x762c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75db841e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf26b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b2a4504}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2d7107}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf28a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe33c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bba}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24c0ed83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1799f917}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31d22e57}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39560726}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40c85faf}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e1c4c34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27171038}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54214885}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x80) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f00000010c0)={0x2, 0xa}) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000001100), 0x2) [ 108.392414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.393646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.396524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.398825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.404538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.406786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.408514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.414744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.415756] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.419232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.421039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.423694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.428704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.433954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.440487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.442134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.444828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.448956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.450747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.452016] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.457907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.466767] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.474845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.487737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.512515] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.514942] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.517637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.519705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.519900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.523978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.529524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.537361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.542667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.547746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.549631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.552832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.552936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.620714] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.622914] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.625022] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.633874] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.638443] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.644262] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.674773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.703566] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.718061] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.738651] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.744917] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.521045] Bluetooth: hci1: command tx timeout [ 110.522607] Bluetooth: hci2: command tx timeout [ 110.522635] Bluetooth: hci0: command tx timeout [ 110.649408] Bluetooth: hci3: command tx timeout [ 110.649434] Bluetooth: hci5: command tx timeout [ 110.711515] Bluetooth: hci4: command tx timeout [ 110.711694] Bluetooth: hci6: command tx timeout [ 110.840564] Bluetooth: hci7: command tx timeout [ 112.567466] Bluetooth: hci2: command tx timeout [ 112.567501] Bluetooth: hci0: command tx timeout [ 112.567584] Bluetooth: hci1: command tx timeout [ 112.695702] Bluetooth: hci5: command tx timeout [ 112.696255] Bluetooth: hci3: command tx timeout [ 112.759365] Bluetooth: hci4: command tx timeout [ 112.762188] Bluetooth: hci6: command tx timeout [ 112.888373] Bluetooth: hci7: command tx timeout [ 114.615473] Bluetooth: hci1: command tx timeout [ 114.615968] Bluetooth: hci0: command tx timeout [ 114.616947] Bluetooth: hci2: command tx timeout [ 114.746374] Bluetooth: hci5: command tx timeout [ 114.746862] Bluetooth: hci3: command tx timeout [ 114.808413] Bluetooth: hci6: command tx timeout [ 114.808904] Bluetooth: hci4: command tx timeout [ 114.935451] Bluetooth: hci7: command tx timeout [ 116.664325] Bluetooth: hci2: command tx timeout [ 116.664862] Bluetooth: hci0: command tx timeout [ 116.665423] Bluetooth: hci1: command tx timeout [ 116.791365] Bluetooth: hci5: command tx timeout [ 116.791874] Bluetooth: hci3: command tx timeout [ 116.855545] Bluetooth: hci4: command tx timeout [ 116.856792] Bluetooth: hci6: command tx timeout [ 116.983510] Bluetooth: hci7: command tx timeout [ 168.105084] syz-executor.4 (282) used greatest stack depth: 23296 bytes left [ 170.760774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.764194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.766753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.773787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.779186] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.781710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.838659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.842019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.845220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.850770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.850889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.856503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.861206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.863991] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.866245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.868073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.871531] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.876851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.919002] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.924550] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.928841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.934854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.970702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.972678] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.975447] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.002928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.005178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.010076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.018601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.024802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.030978] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.032835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.043831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.048610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.061161] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.064886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.070553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.085157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.093833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.102077] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.104521] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.134059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.135588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.137780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.139496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.240014] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.251001] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.255641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.856406] Bluetooth: hci0: command tx timeout [ 172.984523] Bluetooth: hci1: command tx timeout [ 172.985363] Bluetooth: hci2: command tx timeout [ 173.111418] Bluetooth: hci3: command tx timeout [ 173.112019] Bluetooth: hci4: command tx timeout [ 173.240753] Bluetooth: hci5: command tx timeout [ 173.303355] Bluetooth: hci6: command tx timeout [ 173.368338] Bluetooth: hci7: command tx timeout [ 174.903411] Bluetooth: hci0: command tx timeout [ 175.033304] Bluetooth: hci1: command tx timeout [ 175.033759] Bluetooth: hci2: command tx timeout [ 175.159438] Bluetooth: hci3: command tx timeout [ 175.159945] Bluetooth: hci4: command tx timeout [ 175.287355] Bluetooth: hci5: command tx timeout [ 175.351538] Bluetooth: hci6: command tx timeout [ 175.415330] Bluetooth: hci7: command tx timeout [ 176.952304] Bluetooth: hci0: command tx timeout [ 177.079372] Bluetooth: hci2: command tx timeout [ 177.079838] Bluetooth: hci1: command tx timeout [ 177.207420] Bluetooth: hci4: command tx timeout [ 177.207887] Bluetooth: hci3: command tx timeout [ 177.335359] Bluetooth: hci5: command tx timeout [ 177.399927] Bluetooth: hci6: command tx timeout [ 177.464305] Bluetooth: hci7: command tx timeout [ 178.999369] Bluetooth: hci0: command tx timeout [ 179.127423] Bluetooth: hci1: command tx timeout [ 179.127881] Bluetooth: hci2: command tx timeout [ 179.255581] Bluetooth: hci3: command tx timeout [ 179.256061] Bluetooth: hci4: command tx timeout [ 179.383376] Bluetooth: hci5: command tx timeout [ 179.447990] Bluetooth: hci6: command tx timeout [ 179.511334] Bluetooth: hci7: command tx timeout [ 229.126491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.127209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.501353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.501998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.042741] [ 231.042965] ====================================================== [ 231.043470] WARNING: possible circular locking dependency detected [ 231.043989] 6.13.0-next-20250130 #1 Not tainted [ 231.044378] ------------------------------------------------------ [ 231.045855] kworker/u8:2/7105 is trying to acquire lock: [ 231.049397] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 231.050695] [ 231.050695] but task is already holding lock: [ 231.051409] ffff8880351d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 231.052655] [ 231.052655] which lock already depends on the new lock. [ 231.052655] [ 231.053628] [ 231.053628] the existing dependency chain (in reverse order) is: [ 231.054531] [ 231.054531] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 231.055358] __mutex_lock+0x13d/0xb50 [ 231.055947] wiphy_register+0x1b2e/0x25d0 [ 231.056577] ieee80211_register_hw+0x23a4/0x3d60 [ 231.057289] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 231.058006] init_mac80211_hwsim+0x389/0x870 [ 231.058678] do_one_initcall+0xf9/0x640 [ 231.059292] kernel_init_freeable+0x53d/0x7a0 [ 231.059996] kernel_init+0x1e/0x2d0 [ 231.060541] ret_from_fork+0x48/0x80 [ 231.061141] ret_from_fork_asm+0x1a/0x30 [ 231.061818] [ 231.061818] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 231.062666] __lock_acquire+0x29fd/0x4580 [ 231.063303] lock_acquire+0x19b/0x520 [ 231.063885] __mutex_lock+0x13d/0xb50 [ 231.064478] unregister_netdevice_many_notify+0x1612/0x1c80 [ 231.065285] unregister_netdevice_queue+0x224/0x2e0 [ 231.065993] _cfg80211_unregister_wdev+0x57b/0x700 [ 231.066707] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 231.067444] ieee80211_unregister_hw+0x55/0x3a0 [ 231.068124] hwsim_exit_net+0x3a0/0x730 [ 231.068739] ops_exit_list+0xb3/0x180 [ 231.069398] cleanup_net+0x546/0xad0 [ 231.070005] process_one_work+0x8ee/0x1a10 [ 231.070694] worker_thread+0x674/0xe70 [ 231.071433] kthread+0x3ab/0x720 [ 231.072001] ret_from_fork+0x48/0x80 [ 231.072592] ret_from_fork_asm+0x1a/0x30 [ 231.073319] [ 231.073319] other info that might help us debug this: [ 231.073319] [ 231.074363] Possible unsafe locking scenario: [ 231.074363] [ 231.075183] CPU0 CPU1 [ 231.075894] ---- ---- [ 231.076493] lock(&rdev->wiphy.mtx); [ 231.077007] lock(rtnl_mutex); [ 231.077812] lock(&rdev->wiphy.mtx); [ 231.078660] lock(rtnl_mutex); [ 231.079117] [ 231.079117] *** DEADLOCK *** [ 231.079117] [ 231.079864] 4 locks held by kworker/u8:2/7105: [ 231.080462] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 231.081783] #1: ffff888034c27d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 231.083078] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 231.084406] #3: ffff8880351d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 231.085822] [ 231.085822] stack backtrace: [ 231.086407] CPU: 0 UID: 0 PID: 7105 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250130 #1 [ 231.086467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 231.086504] Workqueue: netns cleanup_net [ 231.086570] Call Trace: [ 231.086587] [ 231.086607] dump_stack_lvl+0xca/0x120 [ 231.086702] print_circular_bug+0x47b/0x750 [ 231.086782] check_noncircular+0x2e9/0x3c0 [ 231.086849] ? lock_repin_lock+0x207/0x320 [ 231.086953] ? __pfx_check_noncircular+0x10/0x10 [ 231.087022] ? hlock_class+0x4e/0x130 [ 231.087082] ? mark_lock+0xac/0xed0 [ 231.087148] ? __pfx_lock_repin_lock+0x10/0x10 [ 231.087250] ? timerqueue_del+0x83/0x150 [ 231.087321] ? lockdep_lock+0xba/0x1b0 [ 231.087418] ? __pfx_lockdep_lock+0x10/0x10 [ 231.087524] __lock_acquire+0x29fd/0x4580 [ 231.087618] ? __pfx___lock_acquire+0x10/0x10 [ 231.087690] ? lock_release+0x20f/0x6f0 [ 231.087769] ? __pfx_lock_release+0x10/0x10 [ 231.087849] lock_acquire+0x19b/0x520 [ 231.087922] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 231.088003] ? __pfx_lock_acquire+0x10/0x10 [ 231.088083] ? srso_return_thunk+0x5/0x5f [ 231.088184] ? lock_release+0x20f/0x6f0 [ 231.088257] ? srso_return_thunk+0x5/0x5f [ 231.088349] ? lock_is_held_type+0x9e/0x120 [ 231.088442] ? srso_return_thunk+0x5/0x5f [ 231.088545] __mutex_lock+0x13d/0xb50 [ 231.088632] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 231.088705] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 231.088780] ? srso_return_thunk+0x5/0x5f [ 231.088874] ? synchronize_rcu_expedited+0x38a/0x420 [ 231.088951] ? __pfx___mutex_lock+0x10/0x10 [ 231.089043] ? __pfx_autoremove_wake_function+0x10/0x10 [ 231.089159] ? srso_return_thunk+0x5/0x5f [ 231.089253] ? kasan_quarantine_put+0x84/0x1e0 [ 231.089357] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 231.089423] ? srso_return_thunk+0x5/0x5f [ 231.089526] unregister_netdevice_many_notify+0x1612/0x1c80 [ 231.089604] ? __virt_addr_valid+0x2e8/0x5d0 [ 231.089707] ? __pfx_lock_release+0x10/0x10 [ 231.089786] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 231.089880] ? find_held_lock+0x2c/0x110 [ 231.089985] ? srso_return_thunk+0x5/0x5f [ 231.090089] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 231.090201] ? srso_return_thunk+0x5/0x5f [ 231.090296] ? lock_release+0x20f/0x6f0 [ 231.090383] ? __pfx_lock_release+0x10/0x10 [ 231.090462] ? srso_return_thunk+0x5/0x5f [ 231.090561] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 231.090646] ? srso_return_thunk+0x5/0x5f [ 231.090747] unregister_netdevice_queue+0x224/0x2e0 [ 231.090823] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 231.090901] ? up_write+0x195/0x520 [ 231.091004] _cfg80211_unregister_wdev+0x57b/0x700 [ 231.091098] ? srso_return_thunk+0x5/0x5f [ 231.091202] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 231.091266] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 231.091328] ? srso_return_thunk+0x5/0x5f [ 231.091429] ? srso_return_thunk+0x5/0x5f [ 231.091522] ? synchronize_rcu+0x1ff/0x260 [ 231.091595] ieee80211_unregister_hw+0x55/0x3a0 [ 231.091664] hwsim_exit_net+0x3a0/0x730 [ 231.091728] ? __pfx_hwsim_exit_net+0x10/0x10 [ 231.091789] ? srso_return_thunk+0x5/0x5f [ 231.091874] ? netdev_run_todo+0x788/0x1040 [ 231.091948] ? __pfx_hwsim_exit_net+0x10/0x10 [ 231.092012] ops_exit_list+0xb3/0x180 [ 231.092076] cleanup_net+0x546/0xad0 [ 231.092145] ? __pfx_cleanup_net+0x10/0x10 [ 231.092226] process_one_work+0x8ee/0x1a10 [ 231.092329] ? __pfx_lock_acquire+0x10/0x10 [ 231.092398] ? __pfx_process_one_work+0x10/0x10 [ 231.092489] ? srso_return_thunk+0x5/0x5f [ 231.092574] ? move_linked_works+0x172/0x270 [ 231.092642] ? srso_return_thunk+0x5/0x5f [ 231.092726] ? assign_work+0x196/0x240 [ 231.092815] worker_thread+0x674/0xe70 [ 231.092906] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 231.092986] ? srso_return_thunk+0x5/0x5f [ 231.093070] ? __pfx_worker_thread+0x10/0x10 [ 231.093180] kthread+0x3ab/0x720 [ 231.093262] ? __pfx_kthread+0x10/0x10 [ 231.093342] ? srso_return_thunk+0x5/0x5f [ 231.093427] ? finish_task_switch.isra.0+0x206/0x840 [ 231.093506] ? __pfx_kthread+0x10/0x10 [ 231.093590] ret_from_fork+0x48/0x80 [ 231.093638] ? __pfx_kthread+0x10/0x10 [ 231.093720] ret_from_fork_asm+0x1a/0x30 [ 231.093824] [ 232.836729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.839101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.842785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.848659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.853456] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.855728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.960957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.964982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.966694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.970894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.973663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.976668] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.977389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.979888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.981518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.985750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.990568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.998876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.001055] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.004072] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.006579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.011343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.016450] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.018387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.095042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.106566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.108015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.118930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.123098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.125549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.129500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.130952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.134200] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.153634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.160083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.161821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.163621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.166624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.168780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 233.170519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.176444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.186751] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.191026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.196962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.198169] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.206637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.208523] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.211028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.872354] Bluetooth: hci0: command tx timeout [ 235.063377] Bluetooth: hci2: command tx timeout [ 235.064537] Bluetooth: hci1: command tx timeout [ 235.128383] Bluetooth: hci3: command tx timeout [ 235.192470] Bluetooth: hci7: command tx timeout [ 235.256491] Bluetooth: hci4: command tx timeout [ 235.320341] Bluetooth: hci5: command tx timeout [ 235.321117] Bluetooth: hci6: command tx timeout [ 236.921322] Bluetooth: hci0: command tx timeout [ 237.111452] Bluetooth: hci1: command tx timeout [ 237.112366] Bluetooth: hci2: command tx timeout [ 237.175772] Bluetooth: hci3: command tx timeout [ 237.239393] Bluetooth: hci7: command tx timeout [ 237.304407] Bluetooth: hci4: command tx timeout [ 237.368496] Bluetooth: hci6: command tx timeout [ 237.369185] Bluetooth: hci5: command tx timeout [ 238.968465] Bluetooth: hci0: command tx timeout [ 239.160305] Bluetooth: hci1: command tx timeout [ 239.160742] Bluetooth: hci2: command tx timeout [ 239.224310] Bluetooth: hci3: command tx timeout [ 239.288286] Bluetooth: hci7: command tx timeout [ 239.352397] Bluetooth: hci4: command tx timeout [ 239.416036] Bluetooth: hci6: command tx timeout [ 239.416613] Bluetooth: hci5: command tx timeout [ 241.015528] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 02:25:32 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283d240 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff888034c26d28 R8 =0000000000000001 R9 =ffffed1006984d96 R10=0000000000000000 R11=2f72656b726f776b R12=000000000000003c R13=ffffffff88693070 R14=ffffffff88693020 R15=ffffffff886932e0 RIP=ffffffff8283d295 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557bfe69c5c0 CR3=000000000b5c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=bc541fe19f5b47b68c44713bdb8ae21f XMM02=00000000000ff718a3797342f9eb3dd9 XMM03=00000000001344d068a8aee3740b9fad XMM04=01ca549b7b9913c000000000000ae988 XMM05=3cc027b654ebc5060000000000141398 XMM06=9f165a4fe6c971ad0000000000138320 XMM07=711fbe8126c5d3440000000000138218 XMM08=68a8aee3740b9fad00000000000ff7f8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8da17 RDX=ffffed100d9e6c53 RSI=0000000000000004 RDI=ffffffff814b1dba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000000 R9 =ffffed100d9e6c52 R10=ffff88806cf36293 R11=0000000000000001 R12=ffffffff864006d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8e9be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f16cb26778 CR3=000000000d914000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffffff XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=000055f16cb59530000055f16cb884d0 XMM06=000055f16cb1f5b00000000300000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000