Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:13451' (ECDSA) to the list of known hosts. 2025/07/01 22:04:34 fuzzer started 2025/07/01 22:04:34 dialing manager at localhost:37637 syzkaller login: [ 51.964296] cgroup: Unknown subsys name 'net' [ 52.036120] cgroup: Unknown subsys name 'cpuset' [ 52.056269] cgroup: Unknown subsys name 'rlimit' 2025/07/01 22:04:46 syscalls: 201 2025/07/01 22:04:46 code coverage: enabled 2025/07/01 22:04:46 comparison tracing: enabled 2025/07/01 22:04:46 extra coverage: enabled 2025/07/01 22:04:46 setuid sandbox: enabled 2025/07/01 22:04:46 namespace sandbox: enabled 2025/07/01 22:04:46 Android sandbox: enabled 2025/07/01 22:04:46 fault injection: enabled 2025/07/01 22:04:46 leak checking: enabled 2025/07/01 22:04:46 net packet injection: enabled 2025/07/01 22:04:46 net device setup: enabled 2025/07/01 22:04:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/01 22:04:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/01 22:04:46 USB emulation: enabled 2025/07/01 22:04:46 hci packet injection: enabled 2025/07/01 22:04:46 wifi device emulation: enabled 2025/07/01 22:04:46 802.15.4 emulation: enabled 2025/07/01 22:04:46 fetching corpus: 0, signal 0/0 (executing program) 2025/07/01 22:04:47 starting 8 fuzzer processes 22:04:47 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe1, 0xa9, @random="faa2a714287572991426bedc71e503e6e18e942d2a39112df7323b595fe3aefa6e318d27142c31a858455ecf9308cb4f04cd969b81d6602d509299446a1c1a1cad7f3653c4fc6752b56296df163dbbd75f246b224d8636239e95dbd7f84114ca52ed7069ea6ca283d51d1e09de5c58985801a2cb8e1bcfa5e2c634dbbe2064d3b177cb70e71f886d8a01c6bb7afba3337ecd631ff037da1f474ccd911cd84977bdd2f370bcbd2f7a09dbce946aa8fa8ecc5da494d29ac92aef18030c03947c1b7e4dfbbd3128e852ee0bbda743257186d6a99f539b6dfbf0cfa1d7bd24"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x8080) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREAD(r0, &(0x7f00000002c0)={0x85, 0x75, 0x1, {0x7a, "586a04639d575b9d0443be57a14580d7b620b13ef5d60ab3527b25eb42b35dee32e43c1c723a7a06feed664ad394c68bb87686002cdb3cb43146c90aa1a34917efe0f44a3973b0f346e8c9a06e4a13819d5bcc6858507038e3109cc4354a59506bf628b88f1c7b10dfc35d6c2c8e7f213b2fac0e757102ea32f3"}}, 0x85) write$P9_RSTATFS(r0, &(0x7f0000000380)={0x43, 0x9, 0x1, {0x6, 0xfffffeff, 0x0, 0x8, 0x734, 0x8, 0x9, 0x800, 0x99}}, 0x43) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x109, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x495, 0x76}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad0ff16de8"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x200c8004) r1 = syz_open_dev$mouse(&(0x7f0000000500), 0xf2ad, 0x4840) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x28044894) r2 = syz_open_dev$mouse(&(0x7f0000000680), 0x6, 0x0) write$P9_RLOPEN(r2, &(0x7f00000006c0)={0x18, 0xd, 0x2, {{0x20, 0x3, 0x3}, 0x1}}, 0x18) write$P9_RWSTAT(r2, &(0x7f0000000700)={0x7, 0x7f, 0x1}, 0x7) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x881) socketpair(0x2, 0x1, 0x76d7, &(0x7f0000000880)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008000) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4804}, 0x40005) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000ec0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001480)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000d0) 22:04:47 executing program 1: r0 = io_uring_setup(0x77dd, &(0x7f0000000000)={0x0, 0xba79, 0x0, 0x2, 0x14a}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r1, &(0x7f00000001c0)={0x40000005}, r0}, 0xc7a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @vsock={0x28, 0x0, 0x2710}, @generic={0x2b, "bba42fd66b55b84d0f0464ea339d"}, @phonet={0x23, 0x4, 0x81, 0x3}, 0x70, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='macvlan1\x00', 0x6, 0x400, 0x3ff}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x37b0d892b1cad75b, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000340)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-neon\x00'}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x24400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x880) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000680)=0x7ff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}}, 0x4000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000008c0), 0x1) 22:04:47 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008000) socketpair(0x2c, 0x0, 0xb3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = syz_open_dev$mouse(&(0x7f00000002c0), 0x95, 0x1a040) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa18}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff800}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x91}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x868ab07b68de6a89}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xfc}}, 0x40) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24054000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x104, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x440d4}, 0x4010) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xddf}]}, 0x64}, 0x1, 0x0, 0x0, 0x10001}, 0x24040001) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000ac0)={0x0, @l2={0x1f, 0x4, @any, 0x8}, @xdp={0x2c, 0xa, r3, 0x19}, @tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x9000, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a80)='veth0_vlan\x00', 0x5, 0x1ac, 0x1000}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x32052, r4, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r4, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001bc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd=r4, 0x7, &(0x7f0000001b80)=[{&(0x7f0000000b40)=""/54, 0x36}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2, 0xb, 0x1, {0x0, r8}}, 0x7) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ea4bb468c9f5cb0f06d30abab2"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001d00)) [ 63.756629] audit: type=1400 audit(1751407487.385:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:04:47 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004880}, 0x4048880) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000006}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa88}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000005c0), 0x6, 0x119040) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0xdf, 0x3, "d334c5c34f2d3e39da4afd1cb8d81dc129e8b4bcc99cd8c4133afc76bde544bbe93bb8a3541251a38b5d7ce2a2366e93c26213418054c0ccdcdb143ef189d34ee12ed56d56d324fb6842ee648b3ffe8be5483406ec4b0cc5ad43f65a9e906bdb99f52b7f4a60f123b881fd72174010c8a12e385af5d79d693dfb339dcd5f804d8643aa5b61dcd5fe40c6b659b2bef363c555d0b4f5ad9067d3c2e14ccc5a67ddba6a54c00d42544978d757fea20e7aa2754bef98ecd2f8024bee8f6506f98e1039ef229c9211c74bce38404198a9c8e2e07e84f1c70d664829283d"}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x49, 0x3, "a37e6145df189fc7dd6ef71d4ded24d35df5b144d218bf2f588608ca026e15f42159e4cd7d86ee1cf4db53816dbca29800dee0a61dc369f80d3e70b07792950e2b4ab9a179"}]}, 0x160}, 0x1, 0x0, 0x0, 0x20048080}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a40)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = accept4(r2, &(0x7f0000000b80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c00)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000ec0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000001100)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x1ac, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9398dfb4c39f9f48}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x4c000) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) 22:04:47 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xac, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x204, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x61a}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x11) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x80000000}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000854}, 0x20000804) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x411}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4834) 22:04:47 executing program 6: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8880}, 0x2000c0c5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x7}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5451}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff0a}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff7, 0x25}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}]}, 0x78}}, 0x40011) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x894) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1004) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xcc01) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000000780), 0xffffffffffffffff, 0x210440) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x12c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8f}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20004001) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x146}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff) 22:04:47 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0xc}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3f, 0x3c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1f, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4050}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0xc0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x44}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0xb0}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40890}, 0x20000800) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x20000041) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000d00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x220, r4, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x3, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x2}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x2, 0x2}, {0x2}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x3}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x6, 0x906dbe3b017e291, 0x9, 0x48, 0x2, 0x12, 0x30, 0x5, 0x1b, 0x5, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x1}, {0x3, 0x7}, {}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x6, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x4}, {0x2, 0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x7}, {0x5, 0x5}, {0x6, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0xa}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4f, 0x8001, 0x4, 0x7fff, 0xfff7, 0xff, 0x164]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x401, 0x3ff, 0x3f, 0x81, 0x16, 0xb7f, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0x180, 0x100, 0x2, 0x40, 0xea96, 0x2]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc67a, 0x7ff, 0x7, 0x7fff, 0xfff, 0x42, 0x7, 0xaf1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x32442e3f3e6e1c4d, 0x30, 0x1b, 0x60, 0x28, 0x30, 0x60, 0x9, 0x30]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x4}, {0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x1}, {0x7}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0x2}, {0x5, 0x2}, {0x5, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0xa}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f, 0x0, 0x9, 0x400, 0xfb, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0x3800, 0xffff, 0x8, 0x50a8, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x8}, {0x4, 0x8}, {0x3}, {0x1, 0x8}, {0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x2, 0x1}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x4}, {0x5, 0xe}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x7}, {0x2, 0x8}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x6}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x8000, 0x7, 0x1, 0x424, 0x8, 0x8]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x5, 0x6, 0x18, 0x6, 0x6, 0x4, 0x0, 0x1, 0x9, 0x4, 0x1b, 0x24, 0x2, 0x9, 0x18, 0xb, 0x4, 0x6, 0x1b, 0x2, 0x48, 0x9, 0x6c, 0x5, 0x3, 0x18, 0x6, 0x60, 0x60, 0x48, 0x12]}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x2000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r1) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xe8, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x60008080}, 0x4004010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x108, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a5bd744539e5bc2e564509d89"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "440f9855e05472f174f52d7964"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c6b4d24f2406ca1c22e3aade67"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e8d3529730"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dabbbbd874"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0ff89c5b8d1a9c55a01154b067"}]}, 0x108}}, 0x81) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40) 22:04:47 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xd9, 0x2003) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x200, 0xffff0001, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = accept4(r2, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000380)=0x80, 0x100800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) socketpair(0x1a, 0x1, 0x4, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe05}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3f}]}, 0x38}}, 0x20000000) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x20000000) r9 = syz_open_dev$mouse(&(0x7f00000007c0), 0x3ff, 0x2000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0x100, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x880}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xeb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45d}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x491}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xa9, 0x4, 0x8, 0x10001]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3b1ac165}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff7f}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40004}, 0x20048080) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r7) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x10) [ 65.021262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.024044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.025981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.029695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.032279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.040374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.047955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.054965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.061160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.063352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.089541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.093092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.100379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.102140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.103742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.105314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.106815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.109659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.111442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.113005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.115522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.117400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.119396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.125193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.142356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.169365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.175090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.175119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.178824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.182159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.185891] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.193970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.194920] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.196990] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.200845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.210431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.225846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.226980] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.229343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.234897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.543418] [ 65.544708] ============================= [ 65.545303] WARNING: suspicious RCU usage [ 65.545931] 6.16.0-rc4-next-20250701 #1 Not tainted [ 65.547509] ----------------------------- [ 65.549794] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 65.554444] [ 65.554444] other info that might help us debug this: [ 65.554444] [ 65.555725] [ 65.555725] rcu_scheduler_active = 2, debug_locks = 1 [ 65.556818] 3 locks held by syz-executor.5/288: [ 65.557490] #0: ffff88800f51c400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 65.559148] #1: ffff88800bace618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 65.560731] #2: ffff888016baae08 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 65.562094] [ 65.562094] stack backtrace: [ 65.562800] CPU: 1 UID: 0 PID: 288 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 65.562827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 65.562839] Call Trace: [ 65.562846] [ 65.562854] dump_stack_lvl+0xfa/0x120 [ 65.562890] lockdep_rcu_suspicious+0x152/0x1c0 [ 65.562917] proc_sys_compare+0x28a/0x340 [ 65.562937] ? __pfx_proc_sys_compare+0x10/0x10 [ 65.562959] d_same_name+0x229/0x2e0 [ 65.562982] d_alloc_parallel+0x7c1/0x1330 [ 65.563019] ? __pfx_d_alloc_parallel+0x10/0x10 [ 65.563046] ? __pfx_default_wake_function+0x10/0x10 [ 65.563076] ? __d_lookup+0x25f/0x490 [ 65.563109] lookup_open.isra.0+0x64f/0x1530 [ 65.563141] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 65.563185] ? mnt_get_write_access+0x81/0x2d0 [ 65.563205] ? mnt_get_write_access+0x1ea/0x2d0 [ 65.563234] path_openat+0xc26/0x2880 [ 65.563273] ? __lock_acquire+0x694/0x1b70 [ 65.563294] ? __pfx_path_openat+0x10/0x10 [ 65.563333] do_filp_open+0x1e8/0x450 [ 65.563363] ? __pfx_do_filp_open+0x10/0x10 [ 65.563404] ? find_held_lock+0x2b/0x80 [ 65.563431] ? alloc_fd+0x2c1/0x560 [ 65.563458] ? lock_release+0xc8/0x290 [ 65.563485] ? alloc_fd+0x2c1/0x560 [ 65.563521] do_sys_openat2+0x104/0x1b0 [ 65.563546] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.563578] ? rcu_read_unlock+0x2d/0xb0 [ 65.563601] ? lock_release+0xc8/0x290 [ 65.563628] __x64_sys_openat+0x142/0x200 [ 65.563653] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.563683] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 65.563720] do_syscall_64+0xbf/0x360 [ 65.563742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.563764] RIP: 0033:0x7f5e103f0a04 [ 65.563781] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 65.563800] RSP: 002b:00007fff52fe9230 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 65.563820] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5e103f0a04 [ 65.563833] RDX: 0000000000080001 RSI: 00007f5e10496f61 RDI: 00000000ffffff9c [ 65.563846] RBP: 00007f5e10496f61 R08: 0000000000000000 R09: 00007fff52fe9220 [ 65.563859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 65.563871] R13: 00007fff52fe92d0 R14: 0000000000000000 R15: 00000000000000f8 [ 65.563899] [ 67.113687] Bluetooth: hci1: command tx timeout [ 67.113693] Bluetooth: hci0: command tx timeout [ 67.177010] Bluetooth: hci2: command tx timeout [ 67.177065] Bluetooth: hci3: command tx timeout [ 67.177675] Bluetooth: hci4: command tx timeout [ 67.240901] Bluetooth: hci5: command tx timeout [ 67.305017] Bluetooth: hci7: command tx timeout [ 67.306490] Bluetooth: hci6: command tx timeout [ 69.160766] Bluetooth: hci1: command tx timeout [ 69.161438] Bluetooth: hci0: command tx timeout [ 69.224674] Bluetooth: hci4: command tx timeout [ 69.225352] Bluetooth: hci2: command tx timeout [ 69.226625] Bluetooth: hci3: command tx timeout [ 69.290766] Bluetooth: hci5: command tx timeout [ 69.353592] Bluetooth: hci7: command tx timeout [ 69.354037] Bluetooth: hci6: command tx timeout [ 71.208646] Bluetooth: hci1: command tx timeout [ 71.208687] Bluetooth: hci0: command tx timeout [ 71.272776] Bluetooth: hci2: command tx timeout [ 71.273183] Bluetooth: hci3: command tx timeout [ 71.273630] Bluetooth: hci4: command tx timeout [ 71.336803] Bluetooth: hci5: command tx timeout [ 71.401433] Bluetooth: hci6: command tx timeout [ 71.403978] Bluetooth: hci7: command tx timeout [ 73.256656] Bluetooth: hci1: command tx timeout [ 73.257408] Bluetooth: hci0: command tx timeout [ 73.322673] Bluetooth: hci3: command tx timeout [ 73.323387] Bluetooth: hci2: command tx timeout [ 73.324134] Bluetooth: hci4: command tx timeout [ 73.384643] Bluetooth: hci5: command tx timeout [ 73.449645] Bluetooth: hci6: command tx timeout [ 73.449946] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:04:49 Registers: info registers vcpu 0 RAX=0000000000000046 RBX=ffff88800c30c9c0 RCX=ffffffff817bbfa6 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806ce31850 RBP=ffff88806ce37d40 RSP=ffff888034107710 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff86438657 R11=0000000000000000 R12=ffff88806ce37e60 R13=00000000000000a1 R14=ffff88806ce37e30 R15=ffff88806ce37de8 RIP=ffffffff81518cb3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd590382028 CR3=0000000032dc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff888031f872b8 R8 =0000000000000000 R9 =ffffed10014f4046 R10=000000000000006e R11=0000000000000001 R12=000000000000006e R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555822df400 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb06572e000 CR3=0000000032d29000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000