Warning: Permanently added '[localhost]:62964' (ECDSA) to the list of known hosts. 2025/01/19 04:56:51 fuzzer started 2025/01/19 04:56:52 dialing manager at localhost:44245 syzkaller login: [ 68.340047] cgroup: Unknown subsys name 'net' [ 68.466314] cgroup: Unknown subsys name 'cpuset' [ 68.515852] cgroup: Unknown subsys name 'rlimit' [ 74.296236] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.403847] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 04:57:09 syscalls: 218 2025/01/19 04:57:09 code coverage: enabled 2025/01/19 04:57:09 comparison tracing: enabled 2025/01/19 04:57:09 extra coverage: enabled 2025/01/19 04:57:09 setuid sandbox: enabled 2025/01/19 04:57:09 namespace sandbox: enabled 2025/01/19 04:57:09 Android sandbox: enabled 2025/01/19 04:57:09 fault injection: enabled 2025/01/19 04:57:09 leak checking: enabled 2025/01/19 04:57:09 net packet injection: enabled 2025/01/19 04:57:09 net device setup: enabled 2025/01/19 04:57:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 04:57:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 04:57:09 USB emulation: enabled 2025/01/19 04:57:09 hci packet injection: enabled 2025/01/19 04:57:09 wifi device emulation: enabled 2025/01/19 04:57:09 802.15.4 emulation: enabled 2025/01/19 04:57:09 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 04:57:11 starting 8 fuzzer processes 04:57:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x46001, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040814}, 0x4000010) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x20000010) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x10801, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6c87c303}, {0x6, 0x11, 0xa20}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40804) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000004c0)={'veth1_to_hsr\x00'}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000500)={0x20}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000540)) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x15, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40050}, 0x8004) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xeb, 0xa8, @random="621df11f61b0f8574dd1372f5f9511c02308a6bfda27fc87d4bb8097eddaca6d3a502f7b72d3724c908defe274fda7f68585d96a82db36f8e67fa2a4594c3cb83418c5e23fb95a9273d8a35ba8ddf076c81d6c45b251171528c2b254e9d82a79c4de2bc600539c8ccc2f13a5657630efd77b93667e3d0f2a9579d65b7f39bd067028404757e43376913f9cdd172fcf506e72dfc189aa226f2603694139bed2d2dbb433fc4fa259c8165a57b3db44572143c524c9367d27847be8721ddb8958979438958a4d0d7874055d0ea69dc58e18c3097116d667b614a182c7dafd82e142e56298c9aa73fa"}]}, 0x120}, 0x1, 0x0, 0x0, 0x803}, 0x4040001) r4 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1f, 0x40000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000900)={'ipvs\x00'}, &(0x7f0000000940)=0x1e) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000980)) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xfc, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000b80)={0x2, 0x100, 0x1, 0x8, 0x1}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 04:57:11 executing program 2: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x2, 0x3, 0x401}) r2 = accept(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000140)=0x80) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000200)=""/161, &(0x7f00000002c0)=0xa1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000340)={0x2, 0x6, 0x650126d8, 0x7}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000003c0)={0x6, 0x8001, 0x1, 0x2}) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000400)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145800, 0x0) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000480)={0x1, 0x200, 0x65e8}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, "8f7fb153dba7e4c2", "f668a4307ab0599ae57a87bf55b92213", "83953a11", "78e2c451b6b2fb45"}, 0x28) r7 = accept$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000540)=0x1c) setsockopt$inet6_buf(r7, 0x29, 0x44, &(0x7f0000000580)="228f3f46f2646b12375078aa32b7d3f0029148b5274c32a339a14d4e3e0a8f8449d77b114b79cec2f3c4f11248b1d28e47302c2bbdfa8d", 0x37) r8 = accept(r0, 0x0, &(0x7f0000002a40)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xb4, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xbcf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0xe4}, {0x5}, {0x6, 0x11, 0xfffa}, {0x8, 0xb, 0x2}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x48000) 04:57:11 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/73, 0x49}], 0x4, &(0x7f00000003c0)=""/174, 0xae}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1e8, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9b49}, {0x6, 0x16, 0x8}, {0x5}, {0x6}, {0x8, 0xb, 0xb4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0xb5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xebf2}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2536}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xc6}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000011) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf8, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd4, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004080}, 0x10000002) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000bc0)=0x6, &(0x7f0000000c00)=0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x418c00c0}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x6040090) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d80), 0xa0001, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x45) pipe2$9p(&(0x7f0000000fc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x8000, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@msize={'msize', 0x3d, 0x800}}, {@access_uid={'access', 0x3d, 0xee00}}, {@posixacl}, {@access_uid}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@afid={'afid', 0x3d, 0x7}}, {@mmap}], [{@dont_appraise}]}}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffffffc0}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r7) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x6603c0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000001240)='netdevsim\x00', &(0x7f0000001280)='./file0\x00', r4) recvmsg(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000012c0)=@phonet, 0x80, &(0x7f0000002500)=[{&(0x7f0000001340)=""/165, 0xa5}, {&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000002540)=""/179, 0xb3}, 0xc0002041) [ 87.745226] audit: type=1400 audit(1737262631.856:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:57:11 executing program 3: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x2, 0x3, 0x83, 0x3, 0xe0000000, 0xffff}, 0x22, [0x9, 0xfb81, 0x7, 0x393, 0x0, 0x9, 0x9, 0x800, 0x5, 0x3, 0x4, 0x1ff, 0x2, 0x5, 0xffff0744, 0x4, 0x7ff, 0x6, 0x100, 0x43, 0x0, 0xffffffff, 0x7, 0x9, 0x2, 0x0, 0x2e5, 0xfff, 0x9, 0x8, 0x83, 0x3, 0x9, 0x5, 0x9, 0x2, 0x0, 0x8, 0x200, 0x401, 0x100, 0x35, 0x2, 0x8, 0x3, 0x80, 0x9, 0x4, 0x3e, 0x8, 0x10001, 0x8, 0x54800000, 0x9, 0x4, 0xffffffff, 0x3000000, 0x4, 0x6, 0x3, 0x7ff, 0x24b, 0x8001, 0x9, 0x1, 0x7, 0x401, 0x6, 0xfc1a, 0x5b, 0x7, 0xffff7fff, 0x3ff, 0x6, 0x1f, 0x9, 0x8000, 0x0, 0x0, 0x8001, 0xe, 0x8001, 0x80, 0x3f, 0x80, 0x7, 0x6, 0x6, 0x1, 0x2, 0xfffffe00, 0x6, 0x1, 0x1f, 0x1, 0x6, 0x6, 0x3, 0x7, 0x9, 0x6, 0x5, 0x5, 0xfffffbff, 0x10000, 0x9, 0x6c95, 0x4, 0x3, 0x2, 0x8000, 0x1ff, 0x1, 0x9, 0x80, 0x9, 0x39da47a0, 0x413b, 0x10000, 0x7, 0x8000, 0x10001, 0x1f, 0x68df, 0x7fffffff, 0x1000, 0x3f, 0x7, 0x0, 0x7, 0x100, 0x6, 0x8, 0x3, 0x7, 0x1, 0x662, 0x9, 0x1, 0x80000000, 0x0, 0x1, 0x3, 0x4, 0x1f, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x8, 0x2, 0x1ff, 0x10001, 0xf2b0, 0x5, 0x1680, 0x1, 0x7ff, 0x0, 0xef, 0xe7ea, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x5, 0x9, 0x1, 0x0, 0x80000001, 0x8, 0x7ff, 0x3, 0xbe0, 0x3, 0x7, 0x4, 0x2, 0x401, 0x7, 0xfffffff9, 0x5b, 0x6, 0x68889910, 0xfff, 0xfff, 0x6a17e61, 0x8, 0x9, 0x2, 0x1ff, 0xffffffff, 0x8, 0x1f, 0x3, 0x8, 0x8, 0xffffff44, 0x0, 0x7ff, 0xc62, 0x6, 0x401, 0x1, 0x200, 0x28000, 0x3ff, 0x9, 0x0, 0x6, 0x80, 0x8000, 0x8, 0x2, 0x5, 0x79, 0xe7888a96, 0x6, 0x101, 0x8, 0xffffffff, 0x95, 0x3ff, 0x29a, 0x80000000, 0x7fffffff, 0x0, 0x81, 0x8000, 0x1000, 0x8000, 0x5, 0x2318, 0x7fffffff, 0x3, 0x6, 0xfffffffa, 0xffffffff, 0x0, 0xffff, 0x800, 0x10000, 0x1f, 0x2, 0xa52, 0x6, 0x8, 0x80000000, 0x5, 0xfffffeff, 0x1f, 0x5, 0x200, 0xfffffff7, 0x5, 0x7, 0xb62, 0x0, 0xa23, 0x24888683, 0x6, 0x9, 0x80800, 0x2, 0xfff, 0x7, 0x5, 0x6, 0x6, 0x7, 0x8, 0x1, 0x3, 0x1, 0x7, 0x3, 0x3f, 0x8, 0x8, 0x1f, 0xffff, 0x6, 0x0, 0x4b008493, 0x9, 0x9, 0x9, 0x9, 0x9, 0x1, 0x90, 0x5, 0x0, 0x1, 0x0, 0x7a5, 0x3, 0x9, 0x5, 0x2, 0xe3a, 0x4, 0x1, 0xffff, 0x1000000, 0x8, 0x9c6a, 0x4, 0x10000, 0x3, 0x1, 0x4a7, 0x7f, 0x7fff, 0xff, 0x6, 0x6, 0x80200000, 0x8501, 0x2, 0xfffffff9, 0x8, 0x18000, 0x2, 0x3, 0x5f2a, 0xfffffffa, 0x8000, 0x9, 0xb92b, 0x49, 0x2, 0x8000, 0x100, 0x5, 0xfffffff9, 0x40, 0x99a, 0x101, 0x7, 0x8001, 0x3ff, 0x3, 0x2, 0x3, 0x4, 0x7, 0x0, 0x0, 0x4, 0xffffffc0, 0x7, 0x1000, 0x3ff, 0x1, 0x3, 0x101, 0x0, 0x1, 0x5, 0xfff, 0x3bab, 0x82e6, 0xffff2ba3, 0x40, 0xec4, 0x3, 0x100, 0x200, 0xa190, 0x579, 0x9, 0x14, 0x7, 0x198, 0x1b94, 0x4, 0xf6, 0x71b3, 0x8, 0x3f, 0x7, 0x0, 0x4, 0x400, 0x1, 0x1, 0x401, 0x68ef, 0xfffff000, 0x3, 0x2, 0x8, 0x8000, 0xfff, 0x0, 0x1, 0x9, 0x1ff, 0xfffffffb, 0x1, 0x3, 0x20, 0x10000, 0xfffffe36, 0x200, 0xfffffb56, 0x1, 0x7, 0x1000, 0x4, 0xfffffffe, 0x6, 0x200, 0x200, 0x3, 0x2, 0x7, 0x9, 0x3ff, 0xffffffff, 0x1, 0x7f, 0x2000000, 0x2, 0x80000001, 0x216f, 0x5, 0x7, 0x6, 0x0, 0x2, 0x9, 0x9, 0x7380, 0x200, 0x8, 0x7, 0x3, 0x7fffffff, 0x8, 0x3, 0x29800000, 0x800, 0x3, 0x3, 0x9, 0x8, 0x8, 0x7fffffff, 0x3f, 0x8066, 0x5, 0x4, 0xdd, 0x1, 0x6, 0xfffffffd, 0xaa, 0x6, 0x9, 0xc4, 0xffffff01, 0x2, 0x8, 0x4d3, 0xfffff641, 0x200, 0x0, 0x101, 0x12a4, 0xff, 0xd4da, 0x1e, 0x7f, 0x3b8, 0x7, 0x80, 0x0, 0x5, 0x0, 0x559, 0x1, 0x80000000, 0x8, 0x9, 0x9, 0x80000001, 0x9, 0x20, 0x7fffffff, 0x400, 0x80000000, 0x9, 0xdfb, 0x8dd4, 0x2d1, 0x6, 0x0, 0xfffffffb, 0xff, 0x80000000, 0xb47, 0x5, 0x7, 0x80000000, 0x3, 0x5, 0x10001, 0x6, 0x8, 0xff800, 0x5, 0x4, 0x27, 0xfffffff7, 0x0, 0x2, 0x7fffffff, 0x1, 0x200, 0xffffffff, 0x4, 0x4, 0xe6a, 0xbcf8, 0x7, 0xffff, 0x1, 0x0, 0x61, 0x4, 0x7fffffff, 0x5, 0x80000000, 0xfc, 0xdb61, 0x5, 0x0, 0x401, 0x2, 0x401, 0x8, 0x20, 0x0, 0x7, 0x80, 0x5, 0x81, 0x4, 0x2, 0x9, 0xbe0, 0x7, 0x4, 0x0, 0x3, 0x0, 0x6, 0xa1484c2, 0x3, 0x1, 0x1, 0x1, 0x4, 0x0, 0x5, 0x2, 0x5, 0x0, 0x9, 0x2, 0x4, 0x5, 0x7, 0xfc72, 0x30d, 0x10001, 0xfffffffc, 0x7f, 0x0, 0x7f, 0x0, 0x80000001, 0x2, 0xde, 0x6, 0x0, 0x5, 0x8, 0x2, 0x72f3, 0x101, 0x3, 0x40, 0x4, 0x1, 0x2, 0x0, 0x10001, 0x6, 0x3, 0xd750, 0x100, 0x9, 0x1, 0x5, 0x9, 0x3ff, 0x2, 0x4, 0x5, 0xd0000000, 0x9, 0x2, 0x8, 0x7, 0x81a7, 0x0, 0x1, 0x6, 0x800, 0x401, 0x7fffffff, 0xde, 0x5, 0x8, 0x7ff, 0x0, 0x80000000, 0x4, 0x20, 0x5, 0x7, 0x0, 0x9, 0x2, 0xc6, 0x1, 0x7, 0x4, 0x3, 0x5, 0x4, 0x6, 0xfffffff7, 0x6, 0x6, 0x2, 0xfffff000, 0x400, 0x7f, 0xc45f, 0xfffffffc, 0x2, 0x4, 0x1, 0x8, 0x100, 0xd15f, 0x651c, 0xffff, 0xdf, 0x3f, 0xc1, 0x1, 0x3e, 0x2, 0xd9, 0x0, 0xffffff64, 0x7, 0x3, 0x1, 0x1000, 0xfffffff7, 0x7553, 0x401, 0x2, 0x4, 0x0, 0xd6, 0x1, 0x9, 0x200, 0xffffffff, 0x51, 0xb7, 0x9, 0x6, 0x6, 0xee36, 0x9, 0x1, 0x5, 0x1, 0xffff119d, 0x20, 0x8, 0x1f, 0x200, 0x2, 0x40, 0x9, 0x5, 0x576a, 0x81, 0x2, 0x1, 0xc4, 0x3, 0x4, 0x62c08e81, 0x1, 0x9, 0x8001, 0x4, 0x8, 0xffff, 0x82, 0x8001, 0x200, 0x3, 0x3, 0xa1b9, 0xe1, 0x8, 0x0, 0xdac, 0x7, 0x7fffffff, 0x3, 0x9, 0x7, 0x7, 0x800, 0xb62, 0x2, 0xfffff800, 0x9, 0x7, 0x1, 0xfffffc01, 0x1, 0x7, 0x8, 0x80, 0x4, 0x5927, 0x0, 0x80, 0x2, 0x7fff, 0x7f, 0x800, 0xb5c9, 0x1f, 0x31c, 0xdb, 0xfffffc01, 0x4, 0x5, 0x0, 0x2, 0xfffffff9, 0x3, 0x1, 0x4, 0x400, 0x101, 0x3, 0x80000001, 0x3f, 0x5, 0x8000, 0xf013, 0x2, 0x10000, 0x3, 0xf4ff, 0x3b, 0x20, 0xec, 0x2, 0x101, 0x2, 0x80, 0xaf8, 0x2, 0xb9, 0x7, 0x4, 0x101, 0x7, 0x3f, 0x7fffffff, 0xfffffff7, 0x0, 0x10001, 0x1f, 0xffff52dd, 0x6a, 0x6, 0x6, 0xc75, 0xf8fb, 0x67, 0x9, 0x4, 0x4, 0x8, 0x4, 0x8, 0x3, 0x6, 0x8000, 0x7c7, 0x8, 0x26, 0x5, 0xfffffffc, 0x9, 0x23d, 0x80000001, 0x8, 0x80000000, 0x7, 0x6, 0x0, 0x5, 0x401, 0x8, 0x6f8, 0x112, 0x800, 0x3e, 0x4, 0x0, 0x2, 0x80, 0x6, 0x5, 0x0, 0x8, 0xfffffffb, 0xb1, 0x81, 0x2, 0x6, 0xd3f6, 0x80000000, 0x1, 0x2, 0x0, 0x5, 0x5, 0xff, 0x3, 0x1, 0xee69, 0x1, 0x6, 0x1c7e922b, 0x1, 0x17, 0x7, 0xd3e0, 0x1, 0xbd, 0x5, 0x5, 0x2, 0x4, 0x9, 0xb734, 0x1f, 0x6, 0x9, 0x3, 0x6, 0x4, 0x80000000, 0x7f, 0x2, 0xfffff88e, 0x1f, 0x1ff, 0x5, 0x51ff, 0x8, 0x79c4e559, 0x5, 0xbc, 0x6, 0x0, 0x8001, 0xfffff703, 0x20, 0x46e6, 0x1, 0x7, 0x5, 0x5be8, 0x2, 0x6, 0x9, 0x1f, 0x8, 0x3, 0x5, 0x8eb, 0x7, 0xfffffbff, 0x100, 0x9, 0x6, 0xf48, 0x2, 0x6, 0x40, 0x18f, 0x6, 0xcab, 0x5, 0x5, 0x7, 0x6, 0x1, 0x8a, 0xffffffff, 0x20, 0x3c, 0x7fff, 0x2, 0x1f, 0x7, 0x6, 0x6, 0x7, 0x5, 0x7f, 0x2, 0x4, 0x9, 0x4, 0xff, 0x3, 0x101, 0xfff, 0x9, 0x400, 0x4, 0x8, 0x2, 0xfffffff8, 0x7fffffff, 0x3aa000, 0x1, 0x80000000, 0x7fff, 0x98, 0xfffffffc, 0x6, 0x10001, 0x9, 0x400, 0x7f, 0x6, 0x0, 0x0, 0x3d1, 0x2, 0x800, 0x0, 0x100, 0x8001, 0x2, 0x9, 0x1, 0x3ff, 0x6, 0x8, 0xde, 0x7fff, 0x6, 0x5, 0x2, 0x9, 0x80, 0xd8f, 0x10001, 0x2, 0xffffffc0, 0x101, 0x3, 0xfffffffb, 0x2, 0x3, 0x1, 0x0, 0x80, 0x545, 0xaee2, 0x6, 0xffffcaea, 0x3, 0x8, 0x3ff, 0x10001, 0x8001, 0x0, 0x4, 0x7, 0x8001, 0xfff, 0x1, 0x8a2, 0x42c, 0xfffff000, 0x7, 0x14]}) r0 = syz_open_dev$hiddev(&(0x7f0000001040), 0x4, 0x2000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000001080)={{0x2, 0x100, 0x400, 0x5, 0x1, 0x1}, 0x2dc, [0x9, 0x5, 0x6b, 0xfffffffb, 0xb9, 0xfffffffa, 0x4, 0x2, 0x80000001, 0x401, 0x400, 0x10000, 0x2, 0x9, 0x3, 0x5, 0x80, 0x3, 0xff, 0x1, 0x80000000, 0xa4a, 0x5, 0x6, 0x7e, 0x100, 0x9, 0xff, 0x1, 0x7ff, 0xadc00000, 0x80000001, 0x2, 0x1, 0x80000001, 0x9af, 0x9d1e, 0x7, 0x152, 0x2, 0x100, 0x78096be0, 0x200020, 0x4, 0xdd, 0x5, 0xc14, 0x9, 0x0, 0x4, 0x800, 0x7ff, 0x1, 0x4, 0x1, 0x8, 0x3, 0x5, 0x3ff, 0x5, 0x9e5, 0x3, 0x2, 0x9, 0x2, 0x1000, 0x4, 0x6, 0x4, 0x10000, 0x5, 0x6, 0x10001, 0x3, 0x0, 0x2, 0x7, 0x80000000, 0x400, 0x401, 0xffffff92, 0x6, 0x5, 0x4, 0xfff, 0x40, 0xd4f, 0x800, 0x7, 0xce, 0xff, 0x1eff, 0x5, 0x8001, 0xfffffffe, 0x15ad, 0xfffffff8, 0xff, 0xfffffff8, 0xc413, 0xffff, 0x80000000, 0x736e, 0xfffeffff, 0x3, 0x3ff, 0x10000, 0x7, 0x2, 0xffffeabe, 0x3f, 0x3, 0x3ff, 0xff, 0x9, 0x0, 0x10001, 0x81, 0x1, 0x3, 0x0, 0x1, 0xa3, 0x3ff, 0x3, 0xffff, 0x8, 0x9, 0x80, 0xf36, 0x0, 0x9, 0xfffffff9, 0x0, 0xa31, 0x7, 0x2, 0x6, 0x101, 0xb4f, 0x4, 0x3, 0x9, 0x6, 0x2, 0x8, 0x7fff, 0x2, 0x9, 0x1f, 0x400, 0xfffff800, 0xb3ef, 0x8, 0x226b, 0x9624, 0x55d, 0x80000000, 0x20b, 0x9, 0x1000, 0x6b7, 0x7a7a, 0x8001, 0x1, 0x0, 0x8, 0x1000, 0xb170, 0x3, 0xf5e, 0x7fffffff, 0x0, 0x4, 0x3ff, 0x3, 0x8, 0x8, 0x7ff, 0x7fffffff, 0x293, 0x9, 0x38c, 0x9, 0x7, 0x0, 0x7, 0x9, 0x1, 0x2702, 0x7ff, 0xfffffeff, 0x4, 0x0, 0x0, 0x200, 0x7f, 0x5, 0x40, 0x8000, 0x5, 0x1, 0xf05, 0x7fff, 0x3, 0x7bc9c028, 0x3, 0x4, 0xf02b, 0x8, 0x3ff, 0x3f, 0x8001, 0x7, 0x7ff, 0x4, 0x4e, 0x79, 0x3, 0x7, 0xf6, 0x3, 0x9b0, 0x6, 0x9, 0x2, 0xffff5f69, 0x9, 0x2fb8, 0x2, 0x7, 0x0, 0x7ff, 0x1, 0x88b0, 0x7ff, 0x0, 0x6c, 0x8, 0xe45d, 0x7, 0x2, 0xa33d, 0x9f, 0x6, 0x85, 0x2, 0x4, 0x3, 0x1, 0xffff, 0xe1d, 0x5a, 0x8, 0xb23, 0xfffffff9, 0x401, 0x984, 0x2, 0x6f5a, 0xb87, 0x1, 0x0, 0x3, 0x9b6a, 0x5, 0x4, 0x6, 0x1, 0x10000, 0x8, 0x6, 0x1, 0x2, 0x2, 0x2, 0xbc53, 0x101, 0x9, 0x3f, 0x1, 0x2, 0x3, 0x100, 0x3ff, 0x13, 0x20000000, 0x1, 0x6, 0x2, 0x3, 0x1, 0x0, 0x2, 0xfff, 0x28, 0xea17, 0xde, 0x200, 0x92, 0x5, 0x9, 0x78, 0x300, 0xfffff7e8, 0x7, 0x10001, 0x9, 0x6, 0xffffff80, 0x80000001, 0x0, 0xc611, 0x0, 0x1ff, 0x63, 0x0, 0x7, 0x6, 0x43, 0x8, 0x7, 0x5, 0x27cf, 0x7, 0x7ff, 0x1000, 0x1, 0xeac9, 0x0, 0x200, 0x1, 0x0, 0x0, 0x7ff, 0x4, 0x9, 0x1, 0xb2, 0xd7b1, 0x8, 0x5, 0x80, 0x6, 0x9, 0x7, 0x9, 0x5, 0x3, 0xcc, 0x7, 0x2, 0x8001, 0x3f, 0x7ff, 0x9, 0x1000, 0x2, 0x4, 0x7fffffff, 0x8, 0x5, 0xff, 0x3, 0xe518, 0x7, 0x4a4, 0x5, 0x1, 0x80000000, 0x6, 0x7, 0x4, 0x47, 0x2, 0x9, 0x8, 0x3, 0x51, 0x1000, 0x8, 0x2, 0x200, 0x7ff, 0x8000, 0x5, 0x7, 0xc, 0x1, 0x813, 0x10000, 0x6, 0x80000000, 0x10001, 0x6, 0x1, 0x8, 0x9, 0x0, 0x1, 0x4, 0x57, 0xfffffffc, 0x8, 0x1, 0x0, 0x9, 0x7fff, 0x31, 0x3b26, 0x1, 0x5, 0x8d73, 0xffffffff, 0x7, 0x800, 0x8, 0x0, 0xc6, 0x0, 0x9, 0x0, 0xfff, 0x2, 0x3, 0xfff, 0x6, 0x0, 0x66, 0x6fa, 0x4, 0x3, 0x0, 0x1000, 0x2, 0xfffffebe, 0x9, 0x2, 0xcc, 0x1f, 0xfffffffd, 0x0, 0x9, 0x3, 0x6d, 0x6, 0x9, 0xffffffff, 0x6, 0x9b5, 0x1, 0x4, 0x4314204b, 0x1, 0x4, 0x0, 0x1, 0x6, 0x40, 0x7f, 0x80000001, 0x101, 0x87, 0x6, 0x3, 0xffff730f, 0x70ab, 0x5, 0xffffffe0, 0x7fff, 0x6, 0x1ff, 0x6ee7, 0x6, 0x9, 0x9, 0xd1d9, 0x2, 0x4, 0x81, 0x0, 0x9, 0xfff, 0x400, 0x5, 0x400, 0x2, 0x1, 0x6, 0x4, 0x3, 0xeee1, 0x6, 0x8e88, 0x2, 0x7, 0x9, 0xfffffff9, 0x1, 0xa6, 0xfc3, 0x7, 0x6, 0x9, 0x9, 0xcaa, 0x7, 0x3, 0x4, 0x3, 0xe7, 0x6909, 0x7, 0x7, 0x1, 0x3bf, 0x800, 0x0, 0x33, 0xff, 0x2, 0x4, 0x3, 0x1, 0xfffffff8, 0xaf4, 0x8, 0x7, 0xfff, 0x1ff, 0x81, 0x1, 0x10001, 0x10000, 0x3, 0x4, 0xffff0001, 0x2, 0x3, 0x7f, 0xd4b, 0x7, 0x2, 0xffffe6a1, 0x80, 0x7, 0x0, 0x1, 0x5, 0x10001, 0x4, 0x8, 0x1ff, 0x9719, 0x174, 0xfffff001, 0x2c8c, 0x0, 0x2, 0x5, 0x8, 0x401, 0x2, 0xfffffff7, 0x5, 0x938, 0x8000, 0x9, 0x6, 0x10001, 0x1ff, 0x3, 0xafcb, 0x4c7, 0x31dc0, 0x3, 0x67, 0x7fff, 0x6, 0x4, 0x0, 0x9, 0x0, 0x1ff, 0x4e68097d, 0x1, 0x6, 0x8000, 0x4, 0x2, 0x8, 0x5, 0x8, 0x7, 0x0, 0x10001, 0x1000, 0x1000, 0x80, 0x401, 0xff800000, 0xffff17de, 0x80000000, 0x2, 0x8, 0x9, 0x2, 0x2, 0xf78a, 0x23879948, 0x2, 0x9, 0x0, 0x20, 0x8, 0x9, 0x9, 0x4, 0x5, 0xffffed32, 0x3b8, 0x1, 0x80000001, 0x8, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0xfc, 0x7, 0x1ff, 0x2, 0x10001, 0x0, 0x4, 0x140000, 0x8, 0x4, 0xb0f9, 0x4f, 0x200, 0x9, 0x61cc0aae, 0xf8, 0xfffffffa, 0x8f3e, 0x8, 0x9, 0x1e, 0x3, 0x74, 0xb15, 0x9, 0x6, 0x1, 0x7, 0x7, 0x7, 0x8, 0x4, 0xff, 0x80, 0x9, 0x1ff, 0x39bd, 0x7, 0x7fffffff, 0x4, 0xd631, 0x6, 0x7, 0x1, 0x4, 0x8, 0x10001, 0x9, 0x89, 0x8, 0x5, 0x58f3, 0x3, 0x34, 0x2, 0x2, 0x53b, 0x6e, 0x1, 0x6, 0x0, 0x40000, 0xf5, 0x80000001, 0x2, 0xae53, 0x471a, 0x7fffffff, 0x5, 0xffff, 0xff, 0x8, 0x1, 0xa9b, 0x0, 0x6, 0xfffff800, 0x412, 0x8c, 0x3fc000, 0x1, 0x44, 0x5, 0x8, 0x8000, 0x3, 0x6, 0x9, 0x1000, 0x2, 0x3, 0x7f, 0x0, 0x4, 0x5, 0x0, 0x6, 0x8, 0x3, 0x7, 0x10000, 0x101, 0xffffffff, 0x80, 0x3, 0x80000001, 0x6, 0x2, 0xfffffff9, 0x80, 0x8, 0x4b9, 0x3, 0x4, 0x80000001, 0x2000000, 0x5, 0x8b63, 0x6, 0x1, 0x4, 0xde, 0x81, 0x0, 0x2, 0x5, 0x61a, 0x9, 0x6, 0x7, 0x400, 0x101, 0x6, 0xfff, 0x1000, 0x2, 0x40, 0x6, 0x8cf, 0x4, 0xa0e, 0x35, 0xffffff4d, 0x6, 0x6, 0x200, 0x20, 0xfffffff8, 0x5, 0x4, 0x0, 0x2, 0x8000, 0x80000000, 0x5, 0x101, 0xcbf, 0x10000, 0x200, 0x4, 0xfffffc01, 0x1000, 0x100, 0x1, 0x2c0, 0x0, 0x0, 0x401, 0x800, 0x5, 0x10000, 0x8, 0x4, 0x6, 0x8001, 0x80, 0x8318, 0xffffffff, 0x2, 0xe6e1, 0x40, 0x5, 0x83, 0x1, 0x8, 0x5, 0x3, 0x8001, 0x0, 0x8, 0x0, 0x6, 0xe8b0, 0xd1b3, 0x5, 0x6, 0x30c5, 0x4, 0xd8, 0x200, 0x8, 0x8, 0x10000, 0x1000, 0x3, 0x9, 0x7fff, 0x9, 0x1, 0x2, 0x6415, 0x3d, 0x8, 0x0, 0x8, 0x2, 0x1ff, 0x0, 0xde, 0x3f, 0x8, 0x6, 0x3, 0x10001, 0x8, 0x2, 0x4, 0x1, 0xfffffff9, 0x3f, 0xffffff01, 0x9, 0x3, 0x10000, 0x67fe95b1, 0xffff, 0x0, 0x8, 0x3, 0x80, 0xffffffff, 0x9, 0x6, 0xfffffff7, 0x0, 0x81, 0x6, 0x7, 0x81, 0x2, 0xc65f, 0x8, 0x6, 0x6, 0x3, 0x1, 0x5, 0x1, 0x6, 0xfffffff9, 0x63a, 0xff, 0x17, 0x1f, 0x5, 0x38000, 0x9, 0x9, 0x6, 0x3, 0x2, 0x2, 0x8, 0xbf3, 0xfffffffc, 0x6, 0x400, 0x6, 0x1ff, 0x80, 0x10000, 0x8eb, 0x0, 0x101, 0x0, 0x1, 0x0, 0x6, 0x9, 0x7f, 0x9203, 0xfffffc01, 0x335, 0x4, 0x3b4, 0x6, 0x8, 0x0, 0x4, 0x3, 0x5, 0x1ff, 0x7fff, 0x6, 0x10000, 0x80, 0x9, 0x8, 0x6, 0xf, 0x5, 0x7a, 0x80, 0x800, 0xff, 0x1, 0x8, 0x2, 0x80000001, 0x4, 0x7, 0x8c61, 0x8, 0x33800000, 0x6, 0x7fff, 0x3, 0xfffffc00, 0x4, 0x7, 0x10000, 0x7fff, 0x1, 0x159c6797, 0x4e, 0x0, 0x3, 0xa8, 0x4, 0x2, 0x3ff, 0x5, 0x1, 0xffffffc6, 0x16, 0x7, 0x10001, 0x1, 0x1, 0x7, 0x0, 0x1, 0xa8f, 0x6, 0x1f, 0xc33b, 0x7, 0xffffffff, 0x3f, 0x4, 0x1f, 0x9c, 0x2, 0x0, 0x9, 0x3, 0xbac, 0x3, 0x7, 0x7, 0x2, 0x3, 0x2, 0x40, 0x1, 0x3, 0x7e06858b, 0x3, 0x401, 0x0, 0xcb, 0x2, 0x7, 0xefb, 0x20, 0x8, 0x9, 0x2, 0x6, 0x1571000, 0xea, 0x9, 0x5]}) r1 = syz_open_dev$hiddev(&(0x7f00000020c0), 0xfffffffffffffffc, 0x101400) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000002100)={0x3, 0x3, 0x1, 0x9, 0x5, 0x9}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xb0, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x38}, {0x8, 0xb, 0x185}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x48000000}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000002300)={0x30002000}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002340), 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xd0, r2, 0x200, 0x85, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002500)={0x3, 0x200, 0x1}) clock_gettime(0x3, &(0x7f0000002540)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000002580)={0x6, {{0xa, 0x4e22, 0x1, @empty, 0x86a9}}}, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), 0xffffffffffffffff) r5 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x84, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040091}, 0xc044) pipe(&(0x7f0000002800)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) epoll_create(0xd50) 04:57:11 executing program 4: shmget(0x1, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r2 = socket(0x6, 0xa, 0x7ff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40400c4) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000002c0)) socketpair(0x21, 0x3, 0x5, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000340)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e22, 0x398b71fb, @mcast1, 0x3}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}}]}, 0x110) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1ac, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r6 = accept(r4, &(0x7f0000000780)=@l2tp, &(0x7f0000000800)=0x80) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000840)={0x29, 0x6, 0x2, 0x1, 0x0, [@private2, @rand_addr=' \x01\x00', @loopback]}, 0x38) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000880)={'veth0_vlan\x00'}) ioctl$SNAPSHOT_FREE(r5, 0x3305) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x100}}, 0x14) shmget(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000a80)=0x2, 0x4) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) 04:57:12 executing program 5: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8082080}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfec596b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7006ec53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8b0ed47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3022ca0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669013d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x51}, 0x20008801) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2f8, 0x0, 0x0, 0x8, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a72a10a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6312}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa654}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66973938}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61967c11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9871}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29e3ad94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbccd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38800b81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7782f78a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3185}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x533dab5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1772ee77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e97e882}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3df076e1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1abc5bc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6784ee3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec48}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7713dda2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19308ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73f4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ea2b36c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f863c5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf4cc1f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aa6f11a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aba}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ca8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f505d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc64c4d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74948be6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x524d7dc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3f668d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bb30ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb665}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4008}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a9b4325}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12eb12ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2793d5cb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44a50de7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64225cc2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fbefc03}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e132336}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7503a0d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754e2e32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55b0e182}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fffa7e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20ac95d0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4330bfc3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ab25426}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x8008088}, 0x40) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000de1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f88000/0x1000)=nil, &(0x7f0000d0f000/0x11000)=nil, &(0x7f0000ca6000/0x12000)=nil, &(0x7f0000cc9000/0x1000)=nil, &(0x7f0000f21000/0x1000)=nil, &(0x7f0000000540)="853011bf0b2a8dae36fac05296fb362676311c041d5c2ae4537bf6f18d63f249ac9f29038e7bd527eaf8f7daab9728e52ffcf54f3d8246bc65d7374c4db100fbaa6004b5d19e070e34bf57d1a56ca4fcbd862f8a7f0b7b29e5ffba00e01aa050919d111a4d14191f77f958adadee72ecf0485975fbd5", 0x76, r0}, 0x68) r1 = inotify_init1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000e98000/0x1000)=nil, &(0x7f0000f63000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f9a000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c7e000/0x4000)=nil, &(0x7f0000ea2000/0x3000)=nil, &(0x7f0000c6c000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000f9c000/0x4000)=nil, &(0x7f0000000640)="35f910a58cb0d87f5a1faf2bfb412fe3042f54b1350f9a3799494e3b3db2f9de0ec64757f857d829ddbe7c51560c49a0ec2805f98f2a48a56f718635fa86f3d55d53ae7cdea1e3bf1563978b05ec8b4ed757a35b61688db2a25e139194ec67c046eba3f50754959cae8876d52e2e12964148a0a7811fc0665d6f466698f4b4f1d1d12fa85708a8d5907d197b32599ff5e16f00fe452b0d4d1ae3cf57397035045c6c31736a3905760bec1fd23505d9a144ca555a265a177e4eef54c85280685a90b97e6389484bc196571fa2ee95521df19079b4ed91f70ad69505f99308a514bf8331bd2a775ad8e946c455431ccc9f3bc1", 0xf2, r1}, 0x68) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000007c0)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x45) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x94, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7fff}, {0x5, 0x14, 0x1}}]}, 0x94}}, 0x24008040) write$nbd(0xffffffffffffffff, &(0x7f0000000a80)={0x67446698, 0x0, 0x4, 0x2, 0x1, "803ce460f5b7ea5217a989cfbbbcb103c329d71209687e0006835b508cee205989fbfbcba8f6fa551177fcd5a5ba9b2a961b80d32a510ef16464c43a1b0148f069556bc87e3c142e7e60d36bc9111d43d35fc078f0f3ff80770b6e1513f3ea1d1d0420ceff799a0404af8a4223395c66e24811f3663908a7a49326"}, 0x8b) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf8, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8085}, 0x20000080) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d40), 0x800, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x15c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f15862}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18ed6e0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ed97c6f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fefabbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3124ea11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8807598}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xadf3253}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63d1bf02}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1daa358a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2288cd3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16186387}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ffdc802}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63bace46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d85830}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe90edb2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c) r5 = syz_open_dev$vcsn(&(0x7f0000001140), 0x8001, 0x345201) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd6e52a77}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket(0xf, 0x1, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0x84, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20004084) 04:57:12 executing program 6: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x1, 0x9, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0xc044) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfe01}, {0x8, 0xb, 0xb9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xfff7}, {0x5}, {0x6, 0x11, 0x7}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004804}, 0x4001000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044004}, 0x70bceb2cbf1fb08a) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000600)) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000640)=""/224, &(0x7f0000000740)=0xe0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x854) r3 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'ip6tnl0\x00', 0x0, 0x6, 0x9c, 0x3f, 0x2, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x97, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x190, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x961e}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}]}}]}, 0x190}}, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000001440)=0xfff9, &(0x7f0000001480)=0x2) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000014c0), 0x12d282, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000001500)=0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000015c0)={'ip6tnl0\x00', &(0x7f0000001540)={'syztnl0\x00', r4, 0x4, 0x7, 0x0, 0x6, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x100, 0x2}}) r7 = socket(0x3, 0x80000, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000001600), r7) 04:57:12 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x4010, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x7017, &(0x7f0000000000)={0x0, 0x3dcd, 0x0, 0x3, 0x74}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r0, 0x8000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @qipcrtr={0x2a, 0x3}, @vsock={0x28, 0x0, 0x2711, @host}, @sco, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='macvlan0\x00', 0x3, 0x1, 0x1ff}) r1 = shmget$private(0x0, 0x5000, 0x40, &(0x7f0000ffa000/0x5000)=nil) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r2 = syz_io_uring_setup(0x732b, &(0x7f0000000140)={0x0, 0x2a11, 0x20, 0x1, 0x64}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x10, r0, 0x10000000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4010, r0, 0x8000000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x1f, "2ed61e"}, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r2, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x2000000, 0x810, r2, 0x10000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000400)=0x6, 0x1) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000440), 0x2) [ 88.948482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.950950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.956043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.961118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.966398] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.970304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.191466] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.195088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.200332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.207084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.213251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.222393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.227331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.237406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.241496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.241967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.248378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.251468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.258185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.274188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.276491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.276848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.284788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.287487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.302210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.311472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.330833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.333918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.334685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.340492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.341223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.343622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.347217] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.349469] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.350585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.351085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.361627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.373904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.376641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.380549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.384314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.390864] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.392616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.407320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.409441] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.410450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.419385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.423419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.042713] Bluetooth: hci0: command tx timeout [ 91.298057] Bluetooth: hci1: command tx timeout [ 91.426591] Bluetooth: hci7: command tx timeout [ 91.426695] Bluetooth: hci3: command tx timeout [ 91.426818] Bluetooth: hci2: command tx timeout [ 91.489169] Bluetooth: hci4: command tx timeout [ 91.490903] Bluetooth: hci5: command tx timeout [ 91.490936] Bluetooth: hci6: command tx timeout [ 93.089123] Bluetooth: hci0: command tx timeout [ 93.346195] Bluetooth: hci1: command tx timeout [ 93.473445] Bluetooth: hci3: command tx timeout [ 93.477429] Bluetooth: hci7: command tx timeout [ 93.477722] Bluetooth: hci2: command tx timeout [ 93.537227] Bluetooth: hci5: command tx timeout [ 93.537260] Bluetooth: hci4: command tx timeout [ 93.538334] Bluetooth: hci6: command tx timeout [ 95.138030] Bluetooth: hci0: command tx timeout [ 95.393054] Bluetooth: hci1: command tx timeout [ 95.522026] Bluetooth: hci2: command tx timeout [ 95.522092] Bluetooth: hci7: command tx timeout [ 95.522177] Bluetooth: hci3: command tx timeout [ 95.585254] Bluetooth: hci4: command tx timeout [ 95.585291] Bluetooth: hci6: command tx timeout [ 95.585396] Bluetooth: hci5: command tx timeout [ 97.185111] Bluetooth: hci0: command tx timeout [ 97.442995] Bluetooth: hci1: command tx timeout [ 97.569132] Bluetooth: hci2: command tx timeout [ 97.570235] Bluetooth: hci3: command tx timeout [ 97.570483] Bluetooth: hci7: command tx timeout [ 97.635005] Bluetooth: hci4: command tx timeout [ 97.635108] Bluetooth: hci6: command tx timeout [ 97.635161] Bluetooth: hci5: command tx timeout [ 151.340365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.342599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.343813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.348486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.351236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.356798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.592837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.594658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.596666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.601155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.604595] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.605735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.687610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.689607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.693340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.717581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.720657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.726115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.736684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.743358] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.744095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.750417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.754594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.770280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.770747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.775436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.783245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.790092] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.796215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.803315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.805897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.815309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.816712] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.819643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.819925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.822589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.829618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.833620] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.836181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.853069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.867846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.872260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.957558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.967612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.972444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.006231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.013334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.014583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.441101] Bluetooth: hci0: command tx timeout [ 153.634171] Bluetooth: hci1: command tx timeout [ 153.953068] Bluetooth: hci3: command tx timeout [ 153.953439] Bluetooth: hci7: command tx timeout [ 153.953617] Bluetooth: hci6: command tx timeout [ 153.953750] Bluetooth: hci4: command tx timeout [ 153.954056] Bluetooth: hci2: command tx timeout [ 154.081144] Bluetooth: hci5: command tx timeout [ 155.489169] Bluetooth: hci0: command tx timeout [ 155.681079] Bluetooth: hci1: command tx timeout [ 156.001125] Bluetooth: hci3: command tx timeout [ 156.001236] Bluetooth: hci2: command tx timeout [ 156.001325] Bluetooth: hci4: command tx timeout [ 156.001345] Bluetooth: hci6: command tx timeout [ 156.001423] Bluetooth: hci7: command tx timeout [ 156.130183] Bluetooth: hci5: command tx timeout [ 157.537070] Bluetooth: hci0: command tx timeout [ 157.732087] Bluetooth: hci1: command tx timeout [ 158.050004] Bluetooth: hci7: command tx timeout [ 158.050098] Bluetooth: hci4: command tx timeout [ 158.050179] Bluetooth: hci6: command tx timeout [ 158.050242] Bluetooth: hci3: command tx timeout [ 158.050304] Bluetooth: hci2: command tx timeout [ 158.177170] Bluetooth: hci5: command tx timeout [ 159.585107] Bluetooth: hci0: command tx timeout [ 159.777129] Bluetooth: hci1: command tx timeout [ 160.097313] Bluetooth: hci2: command tx timeout [ 160.098863] Bluetooth: hci3: command tx timeout [ 160.099855] Bluetooth: hci6: command tx timeout [ 160.100094] Bluetooth: hci4: command tx timeout [ 160.100259] Bluetooth: hci7: command tx timeout [ 160.225225] Bluetooth: hci5: command tx timeout [ 213.747787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.750134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.752550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.759894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.763986] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.766631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.123522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.128322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.137184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.147848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.152141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.153352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.154471] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.156593] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.158121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.159652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.160677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.161709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.201669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.202181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.207052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.207238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.211169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.212497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.218340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.219685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.222122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.225300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.226471] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.227657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.259640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.269019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.269348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.281384] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.287375] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.293461] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.298585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.301338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.301434] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.319896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.329036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.331399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.355130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.360733] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.364280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.389271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.423404] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.452227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.841045] Bluetooth: hci0: command tx timeout [ 216.225179] Bluetooth: hci1: command tx timeout [ 216.226320] Bluetooth: hci2: command tx timeout [ 216.291045] Bluetooth: hci3: command tx timeout [ 216.291734] Bluetooth: hci4: command tx timeout [ 216.417373] Bluetooth: hci5: command tx timeout [ 216.417835] Bluetooth: hci6: command tx timeout [ 216.548009] Bluetooth: hci7: command tx timeout [ 217.889374] Bluetooth: hci0: command tx timeout [ 218.273338] Bluetooth: hci2: command tx timeout [ 218.273370] Bluetooth: hci1: command tx timeout [ 218.337382] Bluetooth: hci4: command tx timeout [ 218.338753] Bluetooth: hci3: command tx timeout [ 218.465061] Bluetooth: hci6: command tx timeout [ 218.465667] Bluetooth: hci5: command tx timeout [ 218.593016] Bluetooth: hci7: command tx timeout [ 219.937031] Bluetooth: hci0: command tx timeout [ 220.321027] Bluetooth: hci1: command tx timeout [ 220.321155] Bluetooth: hci2: command tx timeout [ 220.385130] Bluetooth: hci3: command tx timeout [ 220.386451] Bluetooth: hci4: command tx timeout [ 220.513240] Bluetooth: hci5: command tx timeout [ 220.513266] Bluetooth: hci6: command tx timeout [ 220.642054] Bluetooth: hci7: command tx timeout [ 221.985985] Bluetooth: hci0: command tx timeout [ 222.372216] Bluetooth: hci2: command tx timeout [ 222.372304] Bluetooth: hci1: command tx timeout [ 222.433115] Bluetooth: hci4: command tx timeout [ 222.433222] Bluetooth: hci3: command tx timeout [ 222.561015] Bluetooth: hci5: command tx timeout [ 222.566339] Bluetooth: hci6: command tx timeout [ 222.689964] Bluetooth: hci7: command tx timeout [ 272.317394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.317514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.644372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.644456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.659846] [ 273.660106] ====================================================== [ 273.660690] WARNING: possible circular locking dependency detected [ 273.661356] 6.13.0-rc7-next-20250117 #1 Not tainted [ 273.661881] ------------------------------------------------------ [ 273.662554] kworker/u8:1/66 is trying to acquire lock: [ 273.663077] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.664234] [ 273.664234] but task is already holding lock: [ 273.664839] ffff88802d878768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 273.667059] [ 273.667059] which lock already depends on the new lock. [ 273.667059] [ 273.669867] [ 273.669867] the existing dependency chain (in reverse order) is: [ 273.672135] [ 273.672135] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 273.673034] __mutex_lock+0x13d/0xb50 [ 273.673574] wiphy_register+0x1b2e/0x25d0 [ 273.674119] ieee80211_register_hw+0x23a4/0x3d60 [ 273.674630] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 273.675222] init_mac80211_hwsim+0x389/0x870 [ 273.675770] do_one_initcall+0xf9/0x640 [ 273.676288] kernel_init_freeable+0x53d/0x7a0 [ 273.676895] kernel_init+0x1e/0x2d0 [ 273.677370] ret_from_fork+0x48/0x80 [ 273.677848] ret_from_fork_asm+0x1a/0x30 [ 273.678401] [ 273.678401] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.679096] __lock_acquire+0x29fd/0x4580 [ 273.679625] lock_acquire+0x19b/0x520 [ 273.680133] __mutex_lock+0x13d/0xb50 [ 273.680636] unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.681318] unregister_netdevice_queue+0x224/0x2e0 [ 273.681891] _cfg80211_unregister_wdev+0x57b/0x700 [ 273.682491] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 273.683077] ieee80211_unregister_hw+0x55/0x3a0 [ 273.683569] hwsim_exit_net+0x3a0/0x730 [ 273.683998] ops_exit_list+0xb3/0x180 [ 273.684408] cleanup_net+0x546/0xad0 [ 273.684814] process_one_work+0x8ee/0x1a10 [ 273.685282] worker_thread+0x674/0xe70 [ 273.685720] kthread+0x3ab/0x720 [ 273.686112] ret_from_fork+0x48/0x80 [ 273.686507] ret_from_fork_asm+0x1a/0x30 [ 273.686964] [ 273.686964] other info that might help us debug this: [ 273.686964] [ 273.687810] Possible unsafe locking scenario: [ 273.687810] [ 273.688398] CPU0 CPU1 [ 273.688843] ---- ---- [ 273.689285] lock(&rdev->wiphy.mtx); [ 273.689687] lock(rtnl_mutex); [ 273.690282] lock(&rdev->wiphy.mtx); [ 273.690901] lock(rtnl_mutex); [ 273.691273] [ 273.691273] *** DEADLOCK *** [ 273.691273] [ 273.691848] 4 locks held by kworker/u8:1/66: [ 273.692278] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 273.693217] #1: ffff88800f0bfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 273.694184] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 273.695095] #3: ffff88802d878768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 273.696175] [ 273.696175] stack backtrace: [ 273.696631] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 273.697378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 273.698116] Workqueue: netns cleanup_net [ 273.698548] Call Trace: [ 273.698790] [ 273.699015] dump_stack_lvl+0xca/0x120 [ 273.699434] print_circular_bug+0x47b/0x750 [ 273.699912] check_noncircular+0x2e9/0x3c0 [ 273.700380] ? __pfx_check_noncircular+0x10/0x10 [ 273.700873] ? hlock_class+0x4e/0x130 [ 273.701285] ? mark_lock+0xac/0xed0 [ 273.701700] ? srso_return_thunk+0x5/0x5f [ 273.702180] ? lockdep_lock+0xba/0x1b0 [ 273.702620] ? __pfx_lockdep_lock+0x10/0x10 [ 273.703108] __lock_acquire+0x29fd/0x4580 [ 273.703560] ? __pfx___lock_acquire+0x10/0x10 [ 273.704029] ? lock_release+0x20f/0x6f0 [ 273.704437] ? __pfx_lock_release+0x10/0x10 [ 273.704875] lock_acquire+0x19b/0x520 [ 273.705264] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.705835] ? __pfx_lock_acquire+0x10/0x10 [ 273.706268] ? srso_return_thunk+0x5/0x5f [ 273.706696] ? lock_release+0x20f/0x6f0 [ 273.707120] ? srso_return_thunk+0x5/0x5f [ 273.707550] ? lock_is_held_type+0x9e/0x120 [ 273.708002] ? srso_return_thunk+0x5/0x5f [ 273.708434] __mutex_lock+0x13d/0xb50 [ 273.708830] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.709401] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.709970] ? srso_return_thunk+0x5/0x5f [ 273.710400] ? synchronize_rcu_expedited+0x38a/0x420 [ 273.710900] ? __pfx___mutex_lock+0x10/0x10 [ 273.711352] ? __pfx_autoremove_wake_function+0x10/0x10 [ 273.711882] ? srso_return_thunk+0x5/0x5f [ 273.712310] ? kasan_quarantine_put+0x84/0x1e0 [ 273.712780] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 273.713228] ? srso_return_thunk+0x5/0x5f [ 273.713659] unregister_netdevice_many_notify+0x1612/0x1c80 [ 273.714210] ? __virt_addr_valid+0x2e8/0x5d0 [ 273.714664] ? __pfx_lock_release+0x10/0x10 [ 273.715110] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 273.715696] ? find_held_lock+0x2c/0x110 [ 273.716119] ? srso_return_thunk+0x5/0x5f [ 273.716551] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 273.717051] ? srso_return_thunk+0x5/0x5f [ 273.717478] ? lock_release+0x20f/0x6f0 [ 273.717882] ? __pfx_lock_release+0x10/0x10 [ 273.718316] ? srso_return_thunk+0x5/0x5f [ 273.718746] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.719271] ? srso_return_thunk+0x5/0x5f [ 273.719705] unregister_netdevice_queue+0x224/0x2e0 [ 273.720199] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 273.720738] ? up_write+0x195/0x520 [ 273.721131] _cfg80211_unregister_wdev+0x57b/0x700 [ 273.721624] ? srso_return_thunk+0x5/0x5f [ 273.722057] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 273.722551] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 273.723097] ? srso_return_thunk+0x5/0x5f [ 273.723523] ? srso_return_thunk+0x5/0x5f [ 273.723954] ? synchronize_rcu+0x1ff/0x260 [ 273.724378] ieee80211_unregister_hw+0x55/0x3a0 [ 273.724841] hwsim_exit_net+0x3a0/0x730 [ 273.725248] ? __pfx_hwsim_exit_net+0x10/0x10 [ 273.725693] ? srso_return_thunk+0x5/0x5f [ 273.726125] ? netdev_run_todo+0x788/0x1040 [ 273.726540] ? srso_return_thunk+0x5/0x5f [ 273.726949] ? __pfx_hwsim_exit_net+0x10/0x10 [ 273.727380] ops_exit_list+0xb3/0x180 [ 273.727747] cleanup_net+0x546/0xad0 [ 273.728111] ? __pfx_cleanup_net+0x10/0x10 [ 273.728522] process_one_work+0x8ee/0x1a10 [ 273.728955] ? __pfx_lock_acquire+0x10/0x10 [ 273.729376] ? __pfx_process_one_work+0x10/0x10 [ 273.729873] ? srso_return_thunk+0x5/0x5f [ 273.730319] ? move_linked_works+0x172/0x270 [ 273.731245] ? srso_return_thunk+0x5/0x5f [ 273.731769] ? assign_work+0x196/0x240 [ 273.732299] worker_thread+0x674/0xe70 [ 273.732744] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.733292] ? srso_return_thunk+0x5/0x5f [ 273.733751] ? __pfx_worker_thread+0x10/0x10 [ 273.734240] kthread+0x3ab/0x720 [ 273.734620] ? __pfx_kthread+0x10/0x10 [ 273.735171] ? srso_return_thunk+0x5/0x5f [ 273.735623] ? finish_task_switch.isra.0+0x206/0x840 [ 273.736165] ? __pfx_kthread+0x10/0x10 [ 273.736596] ret_from_fork+0x48/0x80 [ 273.736995] ? __pfx_kthread+0x10/0x10 [ 273.737430] ret_from_fork_asm+0x1a/0x30 [ 273.737887] [ 275.502585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.505373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.507743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.518271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.521545] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.525062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.824414] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.826434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.830110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.833229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.838302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.840421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.892431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.898265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.900960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.904961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.910212] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.920061] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.965092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.978725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.979325] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.981126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.991220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.006384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.006680] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.019041] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.042100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.042389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.050670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.062264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.064612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.080086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.089011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.099369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.100414] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.118096] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.127315] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.129340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.163651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.165735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.180402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.193237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.197422] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.200676] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.212183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.234466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.242235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.258121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.537365] Bluetooth: hci0: command tx timeout [ 277.922105] Bluetooth: hci1: command tx timeout [ 277.984983] Bluetooth: hci2: command tx timeout [ 278.177978] Bluetooth: hci4: command tx timeout [ 278.178052] Bluetooth: hci3: command tx timeout [ 278.241061] Bluetooth: hci6: command tx timeout [ 278.305234] Bluetooth: hci5: command tx timeout [ 278.305290] Bluetooth: hci7: command tx timeout [ 279.584986] Bluetooth: hci0: command tx timeout [ 279.969961] Bluetooth: hci1: command tx timeout [ 280.033019] Bluetooth: hci2: command tx timeout [ 280.224996] Bluetooth: hci4: command tx timeout [ 280.226241] Bluetooth: hci3: command tx timeout [ 280.289943] Bluetooth: hci6: command tx timeout [ 280.354982] Bluetooth: hci7: command tx timeout [ 280.355045] Bluetooth: hci5: command tx timeout [ 281.633985] Bluetooth: hci0: command tx timeout [ 282.017163] Bluetooth: hci1: command tx timeout [ 282.080998] Bluetooth: hci2: command tx timeout [ 282.274997] Bluetooth: hci3: command tx timeout [ 282.275063] Bluetooth: hci4: command tx timeout [ 282.338038] Bluetooth: hci6: command tx timeout [ 282.401175] Bluetooth: hci5: command tx timeout [ 282.401878] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:00:17 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800f0bebb8 R8 =0000000000000001 R9 =ffffed1001e17d67 R10=0000000000000037 R11=6f6c206863696877 R12=0000000000000037 R13=0000000000000001 R14=ffff888008fea01a R15=ffff88800f0beeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa020629160 CR3=000000000bd66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=1d1555ec641caaae1142218d1f4fba89 XMM02=ee7587d5db12e8e300000000000fd700 XMM03=f9980df3bdc2dbad000000000012eae8 XMM04=54e5012079b025e700000000000ae988 XMM05=a5eb109c2082d0da0000000000147ad0 XMM06=9f165a4fe6c971ad0000000000137618 XMM07=711fbe8126c5d3440000000000137510 XMM08=a3797342f9eb3dd900000000000ffaa8 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffc90008439db8 RCX=ffffffff81429a4a RDX=1ffff11001ac6500 RSI=0000000000000008 RDI=ffff88800d632800 RBP=0000000000000000 RSP=ffff88800f58fdd0 R8 =0000000000000000 R9 =ffffed1001ac6500 R10=ffff88800d632807 R11=0000000000000532 R12=ffffc90008439ff9 R13=ffff8880156ec250 R14=ffff88800d60d340 R15=0000000000000086 RIP=ffffffff81aede14 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005570bc1cba30 CR3=0000000016098000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=30303a3530203931206e614a3e30333c XMM01=7420646570706f7453203a5d315b646d XMM02=6c694b20465220657661532f64616f4c XMM03=747379732037313a30303a3530203931 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320383438 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000