Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:11392' (ECDSA) to the list of known hosts. 2025/01/20 05:13:46 fuzzer started 2025/01/20 05:13:47 dialing manager at localhost:44245 syzkaller login: [ 62.988538] cgroup: Unknown subsys name 'net' [ 63.103148] cgroup: Unknown subsys name 'cpuset' [ 63.146778] cgroup: Unknown subsys name 'rlimit' [ 69.676192] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 05:14:05 syscalls: 203 2025/01/20 05:14:05 code coverage: enabled 2025/01/20 05:14:05 comparison tracing: enabled 2025/01/20 05:14:05 extra coverage: enabled 2025/01/20 05:14:05 setuid sandbox: enabled 2025/01/20 05:14:05 namespace sandbox: enabled 2025/01/20 05:14:05 Android sandbox: enabled 2025/01/20 05:14:05 fault injection: enabled 2025/01/20 05:14:05 leak checking: enabled 2025/01/20 05:14:05 net packet injection: enabled 2025/01/20 05:14:05 net device setup: enabled 2025/01/20 05:14:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 05:14:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 05:14:05 USB emulation: enabled 2025/01/20 05:14:05 hci packet injection: enabled 2025/01/20 05:14:05 wifi device emulation: enabled 2025/01/20 05:14:05 802.15.4 emulation: enabled 2025/01/20 05:14:05 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 05:14:07 starting 8 fuzzer processes 05:14:07 executing program 0: sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2492c05382408205}, 0x40040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4040000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x8001, 0xffffffffffffffff, &(0x7f0000000240)="b75a41f6b3b0566e28348df1df94d733aba062f13413bb47c8db3588043176d69ab8735c9fac283a9471b56c10ad6d4afda098723fa779bd2d9fce50aab00f0edee2ce9a63816d8a1de6c7190667884f5578881f7af849dca676c9912b9e1aff641cfac13f2ef56c7785b4ed5df3b16a8295977fad62aae563ce638aa215dbbef8164af85b04b53678f97206ebd1588d91c682e73b8927fae0b39ce3633f0e72b85e6d8696cf7c47d52030cf0205b1d1105bee8c66043ea66de89becdf0208", 0xbf, 0x79c, 0x0, 0x3}, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x47}, 0x40045) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x410883, 0x0) io_cancel(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x32, 0xffffffffffffffff, &(0x7f0000000540)="448be6ad251844b3e365646cbc50c77e5d1da832eb417fe4a7f116f8fa6e0bd4d839ecc207040836ffe170e1980bb1f28f9fb9d7473f6a2cdc04361295c1834ef5939a", 0x43, 0xfffffffffffffff7, 0x0, 0x20fc1fba4a19c69b, r4}, &(0x7f0000000640)) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000680)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f0000000cc0)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x1, r5, &(0x7f00000006c0)="1547d8cc4bfbea789bc73330a46a43822a07b4183c5e5a17627f3262dcca4ea2f610eedace9bf76f94353524c7e66eeba2179fd5fd92e29c1e5aad3692650627066fe19ac217", 0x46, 0xffffffff, 0x0, 0x1, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000000780)="ccac0d4fe0c045c8a09a86740131e710f8a00a19929a046ecd9f118d8f89db2efee8eee17ec239a3f32a6f74501f77cae55761bc3e5bcf8341b467b21b63afd46c3b218cb188b604d0a3431f6355fda8198193dcdc87591de862669c88256ddcc47338f8b97fcad3b8698e9e7b30bdb0dc819329c36695707acfcb56f7", 0x7d, 0xffffffffffff7a3d, 0x0, 0x3, r4}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x3, r4, &(0x7f0000000840)="495814ed87cba4c58782bf9bd8190124e5fa979a990a29e13c3fc3a91cd55d", 0x1f, 0x4, 0x0, 0x1, r4}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x7f, r4, &(0x7f00000008c0)="ae811429e9e9d83be8ecc480bfc4469c46775dbb2f76ddef13c76d589c52a9e20ce8a6980d0909e8", 0x28, 0x1, 0x0, 0x1, r4}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x29, r4, &(0x7f0000000940)="b614374e36909128b71ee7556b63af289d758205cb3767a15a9efc4dc58a3a1e327b60acab1ef12318df51220163ee47cc071d0299c31ed1bea57447d8c7bfa62fa720a4bd17a997c5579c84e5e49809243b18c5dde9564e61872ddd2a7d53d440637611841af2f4f37c9d360fa1e109ae7e9fa9c1f69ee1ae5101ad883aae21b79d9160c80d83c95acc0eff8106001c623ab88204e239add430b66800c8bf69a980e98b6ec7c7135199b3fee67cbad70647", 0xb2, 0xac4a, 0x0, 0x2, r6}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x9, r4, &(0x7f0000000a80)="47ac5e3efcedc4", 0x7, 0x20, 0x0, 0x2, r7}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000b40)="5b0e0f80a494c632", 0x8, 0x5, 0x0, 0x2, r4}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, &(0x7f0000000bc0)="925e9935bf20edd45a7447eac6474c7a0983f4066fbc9dabe99abcbd185e71678fcac03291cc969e10c1c6876e8a54460bb122d3a888b1a54b6baf645d07fc97961f28fe0b8953544dedec5cb9159dc1751dd7c4c7e2f4c78df9e1ab0ffcd4a4b33dc9ca429f5c4f92b8172035be8254d4d92b2d6c4fedc356ed2d247e199aaa170cade424de288b65c5fe3ff74f0fbea64b", 0x92, 0x0, 0x0, 0x5, r4}]) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d00)='ns/mnt\x00') io_submit(0x0, 0x2, &(0x7f0000000e40)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x2, 0x81, r8, &(0x7f0000000d40)="ae", 0x1, 0x6, 0x0, 0x1, r4}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x8, 0x5, r7, &(0x7f0000000dc0)="425c45b9bd7950592722247383610a48a796e76b50b2168c785c9d5529f775177f06fad2a7243f0687970a82a398909a0b2b6cdeb0bdbab7f012e888", 0x3c, 0x100000001, 0x0, 0x3}]) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000f00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x93ab231559b9ff1c}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1e4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffff51}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x11c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0xc880}, 0x81) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x537ba16da189a050}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044080}, 0x10) 05:14:07 executing program 3: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x174, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x200000c0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x5c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5b1d9a76cbdfa5c2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8011}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004008}, 0x8081) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c880) r9 = syz_genetlink_get_family_id$nl802154(0xfffffffffffffffc, r6) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x64, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004050}, 0x5) 05:14:07 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400082, 0x0) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000040)="ef00a4b5e6f1bab887cf77c1d6e8a3484dbb1a8e72a9691fde71becc072c9d1f8516e46900cb2ab81f3ab485e1d633999fb34b14bc556672f51e064525cf7d5736bda6476a78c30524737115ea13f86f0ee411f7ca1407a8f8f0e5f9dc6fdc1ba770f91b579ba08890d9b1ebb7b6f9dbaa2cbe010cce70e8df28e7054e66e4b868c2c01a6070ea8873", 0x89) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x40840) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r0) r2 = add_key(&(0x7f0000000700)='.request_key_auth\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="0f826715220d814b2002e6de8566f8138d831f9de3ae7eb5445933060e31c96f5eaa5088fcd075ee7d21acb0db55bd4d636356f14cb023f879de4057ef28c2273b553afd8452144074295246dc837d952fce6b9bfdf9a706d37e57097a545e0c94ef5a976c8f", 0x66, 0xfffffffffffffff9) add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)={0x1, 0x0, @d}, 0x18, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000b00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x254, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xbc5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3f}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x20c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9b4c}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @empty, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x360}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x19, 0x3, "53a1bdc090597c7bf80161c92024b2df3de32f5730"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2358}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1000}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7fffffff}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8ae1234d2db9f333}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000011c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000001300)={&(0x7f0000001180), 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x200088c2}, 0x4) [ 83.266573] audit: type=1400 audit(1737350047.848:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:14:07 executing program 4: r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="5f16a488d99372e4b4beb7abf76c11fdd32f5dfd4778c102098baac6e2", 0x1d, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r0}) keyctl$set_timeout(0xf, r0, 0x2) r1 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x2, 0x0, @b}, 0x48, r0) keyctl$chown(0x4, r1, 0xee00, 0xee00) r2 = add_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="be33cb85282c91a3e94448dddb8e3b59d3481d6f18a2d84709029bd6b5a651ba1f316b8cf6f7c3f03604041d286a36272c546a7cceb696a92cf9ff588a8cbad93ac097a5399998487a0411cb570987ce2855191dd337cd9319b73dc497dddc32f5956f298d29d55482266c94d42ac7cb5a3d9215b7752229c4d20a4489220d2c25b8da4308b3deb81659972c21662d5d9e4e67526a8d02bd29840fda612aeb826341a6629a3457e6a372e4e1f5a27d38349a89", 0xb3, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r3 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)={0x1, 0x0, @b}, 0x48, r0) keyctl$set_timeout(0xf, r3, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000500)='trusted\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r2) getresuid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) keyctl$chown(0x4, r4, r5, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)={0x3, 0x0, @d}, 0x18, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) add_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="e5328d57defd0df7c89bae579dbeb48fc369689b5d8357159ce5526c9022e15c415bfcfc921f50c4b682682ac98ed1305fc2691fd88792a9b440ac7b2fd946394c18f931f11fb5c2d634df382ae3ce47afa69942d6524146e853db2d3ba329cee2b0bd02e4528fe3511c8524d1eb8ee4dea7c6e029a8e95cca206367e52538e082ecffd2292aeb8d45cdb5dc7e24656d86b9759071a1b00c063a92a22473caefd8a14864a63e62e8d7edc14d7829ea58b48042", 0xb3, r0) r6 = add_key(&(0x7f0000000940)='ceph\x00', &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="4a93218bde39a275fef7456bd5e2bf085ca9a2bc43c22c360176de539039dd2cff19bfba7cd5486ee2c63fa4007e9b7965eeca37c415bea6ea5e1ac6bc5d424cfad386661810", 0x46, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)={0x0, 0x0, @auto=[0x3b, 0x31, 0x2d]}, 0xb, r6) r7 = add_key(&(0x7f0000000b00)='blacklist\x00', &(0x7f0000000b40)={'syz', 0x0}, &(0x7f0000000b80)="4d056edcfa04bfa409d8f0144ddb85c52fe3a81d7055a81deb282bcb2196f028f415b307fde0fefddfb6f0e3d8a12c7d03151377826efcb654c0e1c7f42270524f2d38e1f607a52917d335ca0d9ce6ae96d7", 0x52, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, &(0x7f0000000ac0)={0x1, 0x0, @c}, 0x29, r7) add_key(&(0x7f0000000c00)='trusted\x00', &(0x7f0000000c40)={'syz', 0x1}, 0x0, 0x0, r3) 05:14:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008050) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x52f4d2cbd222f158}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x20}}, 0x20) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcb2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "98a6e5cec424c04f6f5fb3ec3d44453ebbdc3edb810220508770a61498d17c12fd2054a307e8f96d12e3ac8deddfed7bed3f6c8768bcfcd65c2e1b5d53cc835aa670f4480a08f7b99d09fea2063f40929a5e4c96894322d5ff2434493cd5ffdd5ced946ccc58887bdc01571a6a550e18c49883ade47faf3811cb4218d0809a06edaff25afa50ed75479fe23ee10ed3dc7e7ed670555ffac91154e313e522dd0c67b523614607d7a1a49bfa4bab62a52d7778b594259ecc1fc82927d67c0d7d94c2e9a10b2944d20cf1296a30cec361117e"}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "06ddb76266dc916f71e09e9e653fb5b22055f99618bfae48b6adfa45b4fab67c5e52490717ba108f2f87d738a2604ea9124b58f601b2041a5939b0838d554ef2ed3f0b095158c8088292d1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x28080}, 0x20000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006081}, 0x4000004) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4c}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x60040844}, 0x8800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x44082) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xac, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x800}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) socketpair(0x3b, 0x3, 0x200, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r3) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59d2caa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf025}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xa129ed5649b33fb9}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000014c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000e80)={0x5cc, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x544, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3ff, @private0, 0xffffffff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7215834346956ffde4587de3ebd88612e8e4cf5dd056c9435f9deaf8ec2ee169"}]}, {0x418, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x134, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x50}, 0x8840) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 05:14:08 executing program 7: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000080)={0x57, 0x7d, 0x1, {0x0, 0x50, 0x7, 0x2, {0x20, 0x3, 0x1}, 0x200000, 0x1f, 0x3, 0xfffffffffffffff7, 0xb, '*@($-/.(-:!', 0xa, '[-[)#!%*#)', 0x8, '}#^[#::#'}}, 0x57) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1ec, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfddd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8436137f68f3c0c2b0db44488be5a407c70078412ccbc6042af38fe4e27287"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9275171ebf9d8c97a7a81acab16a0e8402f46f4b35af05129b946d"}}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "26421c10eb1b68861a727eed10de7ce215992eaf4bfd2139b053a7fc3e39c31b02ec7ae15cb44d67e445518e6d224521b00891982c180ecdb9c97d"}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000014}, 0x4090) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x44081200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r4, 0xf0a, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x11}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c011}, 0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x120b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000801}, 0x28004050) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x800, 0x1, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48884}, 0x8000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xc2000021}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8c}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r7) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40881) 05:14:08 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6b831a858fab78cb}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6774c462}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x101}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x844ccb4a8e6ddac9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48005}, 0x40010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040000}, 0x8001) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000700)={0x52, 0x7d, 0x2, {0x0, 0x4b, 0x0, 0x0, {0x1, 0x2, 0x7}, 0x0, 0x121, 0x2, 0x5, 0x6, 'wpan3\x00', 0x6, 'wpan3\x00', 0x6, 'wpan3\x00', 0x6, 'wpan3\x00'}}, 0x52) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x302, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x35}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040810}, 0xc084) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r5) syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x400, 0x70bd28, 0x7, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000009}, 0x0) 05:14:08 executing program 1: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40, 0x1, 0x8}, 0x6}}, 0x18) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x418400, 0x0) write$P9_RSTAT(r0, &(0x7f0000000080)={0x45, 0x7d, 0x2, {0x0, 0x3e, 0x7fff, 0xfffffffa, {0x1, 0x3, 0x4}, 0x2040000, 0x4, 0x7, 0x800000, 0x3, '^]x', 0x0, '', 0x2, '!\\', 0x6, ']&,^-&'}}, 0x45) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x7, 0x8000, 0x101, 0x5, 0xc57, 0x40, 0x8, 0x200, 0xd19, 0x180000, 0x3, 0x8, 0x7f, 0x84b}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000200)={0x0, 0x9282, 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$P9_RSTAT(r0, &(0x7f00000005c0)={0x45, 0x7d, 0x2, {0x0, 0x3e, 0x1, 0xe56, {0x8, 0x0, 0x3}, 0x20000000, 0x20, 0xfffffffe, 0x6, 0x6, ']&,^-&', 0x0, '', 0x2, '!\\', 0x3, '^]x'}}, 0x45) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000640)=0x800, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000680)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x2c0800, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000000900)={0x1ff}, 0x4) write$P9_RMKDIR(r10, &(0x7f0000000940)={0x14, 0x49, 0x1, {0x10, 0x3, 0x7}}, 0x14) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000062bc0)={0x100, [{r7, r11}, {0x0, r5}, {}, {}, {0x0, r9}, {}, {r4, r9}, {}, {0x0, r5}, {0x0, r9}, {r7}, {0x0, r5}, {r4, r9}, {r3, r5}, {r8, r9}, {0x0, r5}, {r7}, {r8}, {r3, r9}, {r7}, {0x0, r5}, {r8}, {r7}, {r3, r5}, {r7, r9}, {}, {r4, r9}, {}, {r8, r9}, {r7, r5}, {r2}, {r2, r9}, {r7, r5}, {r2, r5}, {r2, r9}, {r3}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r8, r9}, {r7}, {}, {0x0, r5}, {0x0, r9}, {}, {r8}, {r3, r5}, {}, {}, {r7, r9}, {r2}, {r4}, {}, {0x0, r5}, {}, {r7, r5}, {r4}, {0x0, r9}, {r2, r9}, {0x0, r5}, {r4}, {r4, r5}, {r4}, {r8}, {0x0, r5}, {0x0, r9}, {r3, r5}, {r8, r9}, {}, {}, {r3, r5}, {r2, r9}, {}, {r3, r5}, {0x0, r5}, {}, {}, {r3, r9}, {r2, r9}, {r4, r9}, {0x0, r9}, {r4, r9}, {0x0, r5}, {}, {0x0, r5}, {r3}, {}, {r3}, {r2, r9}, {r7, r9}, {r4, r9}, {0x0, r5}, {r8, r9}, {0x0, r5}, {r7, r5}, {r7, r5}, {0x0, r9}, {r3, r9}, {}, {r3, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {}, {}, {r2, r9}, {0x0, r5}, {}, {0x0, r5}, {r8}, {r7}, {0x0, r5}, {}, {r4, r5}, {r4}, {r8, r5}, {}, {r7, r5}, {r7, r5}, {r4}, {r4, r9}, {r8, r5}, {r2, r5}, {r7}, {r2}, {r2, r9}, {}, {r7}, {}, {r3, r9}, {r8, r5}, {r8, r5}, {0x0, r5}, {r4, r5}, {r3}, {0x0, r9}, {r2, r5}, {0x0, r9}, {}, {r7}, {r3}, {0x0, r9}, {r4, r9}, {}, {r2, r5}, {}, {r7, r9}, {}, {r7}, {0x0, r9}, {r8, r5}, {r7}, {r4}, {r8}, {r2, r5}, {r3, r9}, {r3}, {r2}, {}, {r8, r9}, {r2, r5}, {r3, r5}, {r4, r9}, {}, {r4}, {r3}, {r2, r5}, {0x0, r9}, {r4, r9}, {r7, r9}, {r8, r5}, {r3, r5}, {r7}, {r8, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r8}, {r7, r5}, {r8, r5}, {r4, r5}, {r8, r9}, {r8}, {r8, r9}, {0x0, r5}, {r2, r9}, {r2}, {r3, r5}, {r8, r9}, {0x0, r5}, {}, {}, {r4, r9}, {}, {r4, r5}, {}, {r8}, {r7}, {r7, r5}, {r4}, {}, {r8, r9}, {0x0, r9}, {r2, r9}, {0x0, r5}, {0x0, r9}, {r3}, {0x0, r9}, {}, {}, {r2}, {0x0, r5}, {r7}, {r3, r9}, {r8, r5}, {r4}, {r8, r5}, {0x0, r5}, {r4, r5}, {r8}, {0x0, r5}, {r4}, {r3}, {}, {r7, r9}, {r8}, {r3, r9}, {0x0, r9}, {r7, r9}, {}, {r3, r5}, {r7, r5}, {r8, r5}, {r4}, {}, {r8}, {}, {r4}, {0x0, r9}, {0x0, r9}, {r8}, {r4}, {r2}, {r7}, {r3, r9}, {0x0, r9}, {r2, r5}, {0x0, r5}, {0x0, r9}, {}, {r3}, {}, {r8, r9}], 0x7, "238ed972501353"}) [ 84.745558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.750119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.752486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.760247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.764504] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.767328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.805386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.811488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.815923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.829121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.835488] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.841354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.854138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.864627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.877188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.889942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.894828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.896876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.898851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.907998] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.911367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.913377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.921464] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.927880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.963633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.969799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.988328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.990746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.992898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.997068] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.000258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.007179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.007852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.014989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.015030] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.017442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.039204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.053492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.056020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.060154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.065313] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.065965] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.067850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.078578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.081616] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.083482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.112607] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.119503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.830581] Bluetooth: hci0: command tx timeout [ 86.893859] Bluetooth: hci1: command tx timeout [ 86.958024] Bluetooth: hci2: command tx timeout [ 87.022010] Bluetooth: hci3: command tx timeout [ 87.150787] Bluetooth: hci6: command tx timeout [ 87.150899] Bluetooth: hci4: command tx timeout [ 87.151498] Bluetooth: hci7: command tx timeout [ 87.214785] Bluetooth: hci5: command tx timeout [ 88.877822] Bluetooth: hci0: command tx timeout [ 88.942788] Bluetooth: hci1: command tx timeout [ 89.006902] Bluetooth: hci2: command tx timeout [ 89.069860] Bluetooth: hci3: command tx timeout [ 89.197917] Bluetooth: hci6: command tx timeout [ 89.198054] Bluetooth: hci7: command tx timeout [ 89.199535] Bluetooth: hci4: command tx timeout [ 89.261829] Bluetooth: hci5: command tx timeout [ 90.926502] Bluetooth: hci0: command tx timeout [ 90.989918] Bluetooth: hci1: command tx timeout [ 91.053981] Bluetooth: hci2: command tx timeout [ 91.117802] Bluetooth: hci3: command tx timeout [ 91.245905] Bluetooth: hci4: command tx timeout [ 91.246098] Bluetooth: hci7: command tx timeout [ 91.246183] Bluetooth: hci6: command tx timeout [ 91.310763] Bluetooth: hci5: command tx timeout [ 92.974328] Bluetooth: hci0: command tx timeout [ 93.040947] Bluetooth: hci1: command tx timeout [ 93.102752] Bluetooth: hci2: command tx timeout [ 93.165763] Bluetooth: hci3: command tx timeout [ 93.293774] Bluetooth: hci4: command tx timeout [ 93.294388] Bluetooth: hci6: command tx timeout [ 93.294442] Bluetooth: hci7: command tx timeout [ 93.358749] Bluetooth: hci5: command tx timeout [ 147.255852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.257911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.261430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.268051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.270547] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.271633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.449595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.454541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.459241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.467205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.470172] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.471243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.512566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.516286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.519187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.526909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.536332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.538975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.598121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.617984] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.632993] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.640525] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.645176] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.646250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.647623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.649584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.651279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.653195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.654343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.660419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.662452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.662444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.668127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.669112] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.672273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.675970] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.676099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.679466] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.681045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.684203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.719098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.720711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.722100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.725250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.726354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.727480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.732407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.732529] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.293942] Bluetooth: hci0: command tx timeout [ 149.550790] Bluetooth: hci1: command tx timeout [ 149.614006] Bluetooth: hci2: command tx timeout [ 149.741780] Bluetooth: hci7: command tx timeout [ 149.806045] Bluetooth: hci5: command tx timeout [ 149.806503] Bluetooth: hci3: command tx timeout [ 149.806926] Bluetooth: hci6: command tx timeout [ 149.807053] Bluetooth: hci4: command tx timeout [ 151.342747] Bluetooth: hci0: command tx timeout [ 151.597952] Bluetooth: hci1: command tx timeout [ 151.661759] Bluetooth: hci2: command tx timeout [ 151.790174] Bluetooth: hci7: command tx timeout [ 151.853851] Bluetooth: hci4: command tx timeout [ 151.854011] Bluetooth: hci6: command tx timeout [ 151.854189] Bluetooth: hci5: command tx timeout [ 151.854314] Bluetooth: hci3: command tx timeout [ 153.389736] Bluetooth: hci0: command tx timeout [ 153.647745] Bluetooth: hci1: command tx timeout [ 153.709785] Bluetooth: hci2: command tx timeout [ 153.838751] Bluetooth: hci7: command tx timeout [ 153.901787] Bluetooth: hci3: command tx timeout [ 153.901820] Bluetooth: hci5: command tx timeout [ 153.901899] Bluetooth: hci6: command tx timeout [ 153.901952] Bluetooth: hci4: command tx timeout [ 155.439699] Bluetooth: hci0: command tx timeout [ 155.693777] Bluetooth: hci1: command tx timeout [ 155.757906] Bluetooth: hci2: command tx timeout [ 155.885806] Bluetooth: hci7: command tx timeout [ 155.949896] Bluetooth: hci5: command tx timeout [ 155.950151] Bluetooth: hci4: command tx timeout [ 155.950272] Bluetooth: hci6: command tx timeout [ 155.950362] Bluetooth: hci3: command tx timeout [ 209.145808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.148920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.150289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.153860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.156256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.157972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.338407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.340079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.341783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.342910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.343249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.350591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.351251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.356339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.359044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.361246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.369114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.370281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.484352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.505239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.518082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.524078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.531244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.534344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.535285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.541233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.551565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.555884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.557256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.570981] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.573843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.593914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.594287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.600390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.612182] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.616832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.637370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.659973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.676211] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.722083] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.788879] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.791362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.794385] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.795290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.795695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.804265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.808380] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.809898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.181884] Bluetooth: hci0: command tx timeout [ 211.438291] Bluetooth: hci1: command tx timeout [ 211.438853] Bluetooth: hci2: command tx timeout [ 211.695124] Bluetooth: hci4: command tx timeout [ 211.758104] Bluetooth: hci5: command tx timeout [ 211.758565] Bluetooth: hci3: command tx timeout [ 211.886170] Bluetooth: hci7: command tx timeout [ 211.887053] Bluetooth: hci6: command tx timeout [ 213.229834] Bluetooth: hci0: command tx timeout [ 213.485768] Bluetooth: hci2: command tx timeout [ 213.485938] Bluetooth: hci1: command tx timeout [ 213.741767] Bluetooth: hci4: command tx timeout [ 213.805832] Bluetooth: hci5: command tx timeout [ 213.806203] Bluetooth: hci3: command tx timeout [ 213.933768] Bluetooth: hci6: command tx timeout [ 213.933869] Bluetooth: hci7: command tx timeout [ 215.277831] Bluetooth: hci0: command tx timeout [ 215.534014] Bluetooth: hci1: command tx timeout [ 215.534220] Bluetooth: hci2: command tx timeout [ 215.789827] Bluetooth: hci4: command tx timeout [ 215.853803] Bluetooth: hci3: command tx timeout [ 215.853964] Bluetooth: hci5: command tx timeout [ 215.981887] Bluetooth: hci7: command tx timeout [ 215.982072] Bluetooth: hci6: command tx timeout [ 217.325701] Bluetooth: hci0: command tx timeout [ 217.583175] Bluetooth: hci2: command tx timeout [ 217.583273] Bluetooth: hci1: command tx timeout [ 217.839727] Bluetooth: hci4: command tx timeout [ 217.902830] Bluetooth: hci5: command tx timeout [ 217.903896] Bluetooth: hci3: command tx timeout [ 218.030739] Bluetooth: hci6: command tx timeout [ 218.030833] Bluetooth: hci7: command tx timeout [ 271.425473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.428445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.433521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.437374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.439726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.440966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.546133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.549147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.552139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.560046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.565790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.567754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.624073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.628354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.632092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.645557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.657888] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.660431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.764116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.770524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.779751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.788579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.806273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.824154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.850544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.863844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.883262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.924293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.929184] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.937154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.010992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.020339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.023356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.025316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.028807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.034812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.036850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.038213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.050098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.094063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.124254] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.129022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.273793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.315373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.317263] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.320287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.321820] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.322467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.517805] Bluetooth: hci0: command tx timeout [ 273.645742] Bluetooth: hci1: command tx timeout [ 273.709693] Bluetooth: hci2: command tx timeout [ 273.901708] Bluetooth: hci3: command tx timeout [ 274.221822] Bluetooth: hci6: command tx timeout [ 274.222164] Bluetooth: hci4: command tx timeout [ 274.477750] Bluetooth: hci5: command tx timeout [ 274.863755] Bluetooth: hci7: command tx timeout [ 275.565778] Bluetooth: hci0: command tx timeout [ 275.693839] Bluetooth: hci1: command tx timeout [ 275.757707] Bluetooth: hci2: command tx timeout [ 275.949723] Bluetooth: hci3: command tx timeout [ 276.270660] Bluetooth: hci6: command tx timeout [ 276.270761] Bluetooth: hci4: command tx timeout [ 276.525871] Bluetooth: hci5: command tx timeout [ 276.909704] Bluetooth: hci7: command tx timeout [ 277.613741] Bluetooth: hci0: command tx timeout [ 277.741939] Bluetooth: hci1: command tx timeout [ 277.807869] Bluetooth: hci2: command tx timeout [ 277.997703] Bluetooth: hci3: command tx timeout [ 278.317881] Bluetooth: hci6: command tx timeout [ 278.318118] Bluetooth: hci4: command tx timeout [ 278.573734] Bluetooth: hci5: command tx timeout [ 278.957700] Bluetooth: hci7: command tx timeout [ 279.661822] Bluetooth: hci0: command tx timeout [ 279.790044] Bluetooth: hci1: command tx timeout [ 279.853755] Bluetooth: hci2: command tx timeout [ 280.045749] Bluetooth: hci3: command tx timeout [ 280.366288] Bluetooth: hci6: command tx timeout [ 280.366398] Bluetooth: hci4: command tx timeout [ 280.621701] Bluetooth: hci5: command tx timeout [ 281.005770] Bluetooth: hci7: command tx timeout [ 331.794110] [ 331.794375] ====================================================== [ 331.794982] WARNING: possible circular locking dependency detected [ 331.795573] 6.13.0-rc7-next-20250117 #1 Not tainted [ 331.796084] ------------------------------------------------------ [ 331.796987] kworker/u8:1/65 is trying to acquire lock: [ 331.798433] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 331.800754] [ 331.800754] but task is already holding lock: [ 331.802296] ffff888030448768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 331.804965] [ 331.804965] which lock already depends on the new lock. [ 331.804965] [ 331.806970] [ 331.806970] the existing dependency chain (in reverse order) is: [ 331.808610] [ 331.808610] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 331.809531] __mutex_lock+0x13d/0xb50 [ 331.810166] wiphy_register+0x1b2e/0x25d0 [ 331.810830] ieee80211_register_hw+0x23a4/0x3d60 [ 331.811566] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 331.812361] init_mac80211_hwsim+0x389/0x870 [ 331.813082] do_one_initcall+0xf9/0x640 [ 331.813739] kernel_init_freeable+0x53d/0x7a0 [ 331.814464] kernel_init+0x1e/0x2d0 [ 331.815048] ret_from_fork+0x48/0x80 [ 331.815647] ret_from_fork_asm+0x1a/0x30 [ 331.816331] [ 331.816331] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 331.817183] __lock_acquire+0x29fd/0x4580 [ 331.817849] lock_acquire+0x19b/0x520 [ 331.818478] __mutex_lock+0x13d/0xb50 [ 331.819112] unregister_netdevice_many_notify+0x1612/0x1c80 [ 331.819986] unregister_netdevice_queue+0x224/0x2e0 [ 331.820752] _cfg80211_unregister_wdev+0x57b/0x700 [ 331.821511] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 331.822275] ieee80211_unregister_hw+0x55/0x3a0 [ 331.822984] hwsim_exit_net+0x3a0/0x730 [ 331.823624] ops_exit_list+0xb3/0x180 [ 331.824243] cleanup_net+0x546/0xad0 [ 331.824855] process_one_work+0x8ee/0x1a10 [ 331.825548] worker_thread+0x674/0xe70 [ 331.826195] kthread+0x3ab/0x720 [ 331.826781] ret_from_fork+0x48/0x80 [ 331.827373] ret_from_fork_asm+0x1a/0x30 [ 331.828050] [ 331.828050] other info that might help us debug this: [ 331.828050] [ 331.829073] Possible unsafe locking scenario: [ 331.829073] [ 331.829855] CPU0 CPU1 [ 331.830487] ---- ---- [ 331.831105] lock(&rdev->wiphy.mtx); [ 331.831650] lock(rtnl_mutex); [ 331.832447] lock(&rdev->wiphy.mtx); [ 331.833315] lock(rtnl_mutex); [ 331.833817] [ 331.833817] *** DEADLOCK *** [ 331.833817] [ 331.834606] 4 locks held by kworker/u8:1/65: [ 331.835213] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 331.836634] #1: ffff888009eefd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 331.838017] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 331.839271] #3: ffff888030448768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 331.840708] [ 331.840708] stack backtrace: [ 331.841315] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 331.842428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 331.843508] Workqueue: netns cleanup_net [ 331.844096] Call Trace: [ 331.844456] [ 331.844768] dump_stack_lvl+0xca/0x120 [ 331.845334] print_circular_bug+0x47b/0x750 [ 331.845947] check_noncircular+0x2e9/0x3c0 [ 331.846539] ? lock_repin_lock+0x207/0x320 [ 331.847151] ? __pfx_check_noncircular+0x10/0x10 [ 331.847818] ? hlock_class+0x4e/0x130 [ 331.848346] ? mark_lock+0xac/0xed0 [ 331.848869] ? __pfx_lock_repin_lock+0x10/0x10 [ 331.849527] ? lockdep_lock+0xba/0x1b0 [ 331.850096] ? __pfx_lockdep_lock+0x10/0x10 [ 331.850725] __lock_acquire+0x29fd/0x4580 [ 331.851332] ? __pfx___lock_acquire+0x10/0x10 [ 331.851966] ? lock_release+0x20f/0x6f0 [ 331.852522] ? __pfx_lock_release+0x10/0x10 [ 331.853136] lock_acquire+0x19b/0x520 [ 331.853677] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 331.854510] ? __pfx_lock_acquire+0x10/0x10 [ 331.855113] ? srso_return_thunk+0x5/0x5f [ 331.855706] ? lock_release+0x20f/0x6f0 [ 331.856276] ? srso_return_thunk+0x5/0x5f [ 331.856877] ? lock_is_held_type+0x9e/0x120 [ 331.857496] ? srso_return_thunk+0x5/0x5f [ 331.858096] __mutex_lock+0x13d/0xb50 [ 331.858659] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 331.859454] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 331.860258] ? srso_return_thunk+0x5/0x5f [ 331.860854] ? synchronize_rcu_expedited+0x38a/0x420 [ 331.861551] ? __pfx___mutex_lock+0x10/0x10 [ 331.862162] ? __pfx_autoremove_wake_function+0x10/0x10 [ 331.862902] ? srso_return_thunk+0x5/0x5f [ 331.863490] ? kasan_quarantine_put+0x84/0x1e0 [ 331.864149] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 331.864768] ? srso_return_thunk+0x5/0x5f [ 331.865376] unregister_netdevice_many_notify+0x1612/0x1c80 [ 331.866135] ? __virt_addr_valid+0x2e8/0x5d0 [ 331.866762] ? __pfx_lock_release+0x10/0x10 [ 331.867361] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 331.868173] ? find_held_lock+0x2c/0x110 [ 331.868764] ? srso_return_thunk+0x5/0x5f [ 331.869366] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 331.870054] ? srso_return_thunk+0x5/0x5f [ 331.870654] ? lock_release+0x20f/0x6f0 [ 331.871208] ? __pfx_lock_release+0x10/0x10 [ 331.871812] ? srso_return_thunk+0x5/0x5f [ 331.872403] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 331.872928] ? srso_return_thunk+0x5/0x5f [ 331.873358] unregister_netdevice_queue+0x224/0x2e0 [ 331.873857] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 331.874403] ? up_write+0x195/0x520 [ 331.874797] _cfg80211_unregister_wdev+0x57b/0x700 [ 331.875296] ? srso_return_thunk+0x5/0x5f [ 331.875744] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 331.876248] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 331.876793] ? srso_return_thunk+0x5/0x5f [ 331.877229] ? srso_return_thunk+0x5/0x5f [ 331.877667] ? synchronize_rcu+0x1ff/0x260 [ 331.878096] ieee80211_unregister_hw+0x55/0x3a0 [ 331.878566] hwsim_exit_net+0x3a0/0x730 [ 331.878965] ? __pfx_hwsim_exit_net+0x10/0x10 [ 331.879410] ? srso_return_thunk+0x5/0x5f [ 331.879848] ? netdev_run_todo+0x788/0x1040 [ 331.880289] ? __pfx_hwsim_exit_net+0x10/0x10 [ 331.880744] ops_exit_list+0xb3/0x180 [ 331.881132] cleanup_net+0x546/0xad0 [ 331.881509] ? __pfx_cleanup_net+0x10/0x10 [ 331.881939] process_one_work+0x8ee/0x1a10 [ 331.882381] ? __pfx_lock_acquire+0x10/0x10 [ 331.882808] ? __pfx_process_one_work+0x10/0x10 [ 331.883294] ? srso_return_thunk+0x5/0x5f [ 331.883731] ? move_linked_works+0x172/0x270 [ 331.884185] ? srso_return_thunk+0x5/0x5f [ 331.884612] ? assign_work+0x196/0x240 [ 331.885017] worker_thread+0x674/0xe70 [ 331.885422] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 331.885935] ? srso_return_thunk+0x5/0x5f [ 331.886358] ? __pfx_worker_thread+0x10/0x10 [ 331.886810] kthread+0x3ab/0x720 [ 331.887169] ? __pfx_kthread+0x10/0x10 [ 331.887569] ? srso_return_thunk+0x5/0x5f [ 331.888002] ? finish_task_switch.isra.0+0x206/0x840 [ 331.888504] ? __pfx_kthread+0x10/0x10 [ 331.888912] ret_from_fork+0x48/0x80 [ 331.889289] ? __pfx_kthread+0x10/0x10 [ 331.889703] ret_from_fork_asm+0x1a/0x30 [ 331.890145] [ 333.692817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.700948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.701185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.706962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.707158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.721730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.726649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.730309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.732480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.736192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.738887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.741013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.961256] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.967782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.969592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.974093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.980975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.981883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.982966] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.983524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.001799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.003675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.005015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.008442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.027158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.040578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.040987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.044924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.050561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.055919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.098907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.106245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.106654] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.108949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.117390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.120543] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.122230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.124415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.127518] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.142017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.153981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.160295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.161311] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.164401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.165222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.217001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.225079] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.253142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.790681] Bluetooth: hci0: command tx timeout [ 335.790758] Bluetooth: hci1: command tx timeout [ 336.046661] Bluetooth: hci2: command tx timeout [ 336.110680] Bluetooth: hci3: command tx timeout [ 336.174693] Bluetooth: hci5: command tx timeout [ 336.238706] Bluetooth: hci4: command tx timeout [ 336.302865] Bluetooth: hci7: command tx timeout [ 336.366707] Bluetooth: hci6: command tx timeout [ 337.837676] Bluetooth: hci0: command tx timeout [ 337.837764] Bluetooth: hci1: command tx timeout [ 338.093747] Bluetooth: hci2: command tx timeout [ 338.158650] Bluetooth: hci3: command tx timeout [ 338.222825] Bluetooth: hci5: command tx timeout [ 338.285816] Bluetooth: hci4: command tx timeout [ 338.350707] Bluetooth: hci7: command tx timeout [ 338.413750] Bluetooth: hci6: command tx timeout [ 339.885814] Bluetooth: hci0: command tx timeout [ 339.885959] Bluetooth: hci1: command tx timeout [ 340.142401] Bluetooth: hci2: command tx timeout [ 340.205876] Bluetooth: hci3: command tx timeout [ 340.269724] Bluetooth: hci5: command tx timeout [ 340.333986] Bluetooth: hci4: command tx timeout [ 340.397755] Bluetooth: hci7: command tx timeout [ 340.462007] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:18:16 Registers: info registers vcpu 0 RAX=000000000004d677 RBX=0000000000000000 RCX=ffffffff84a8bb27 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864021d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557caebdcff8 CR3=0000000009800000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=0000557caec30bb00000557caec52350 XMM05=3030323a336963682d73656369760201 XMM06=006563697665006563697665642e3569 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff888009eeebb8 R8 =0000000000000001 R9 =ffffed10013ddd67 R10=0000000000000001 R11=7369786520656874 R12=000000000000000a R13=0000000000000001 R14=ffff888008fea010 R15=ffff888009eeeeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f697d1b1060 CR3=0000000013678000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000412020a000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000