syzkaller login: [   55.851521] sshd (237) used greatest stack depth: 24216 bytes left
Warning: Permanently added '[localhost]:30898' (ECDSA) to the list of known hosts.
2025/01/21 01:21:22 fuzzer started
2025/01/21 01:21:22 dialing manager at localhost:44833
[   62.412848] cgroup: Unknown subsys name 'net'
[   62.529135] cgroup: Unknown subsys name 'cpuset'
[   62.565664] cgroup: Unknown subsys name 'rlimit'
[   67.294846] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/21 01:21:38 syscalls: 230
2025/01/21 01:21:38 code coverage: enabled
2025/01/21 01:21:38 comparison tracing: enabled
2025/01/21 01:21:38 extra coverage: enabled
2025/01/21 01:21:38 setuid sandbox: enabled
2025/01/21 01:21:38 namespace sandbox: enabled
2025/01/21 01:21:38 Android sandbox: enabled
2025/01/21 01:21:38 fault injection: enabled
2025/01/21 01:21:38 leak checking: enabled
2025/01/21 01:21:38 net packet injection: enabled
2025/01/21 01:21:38 net device setup: enabled
2025/01/21 01:21:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/21 01:21:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/21 01:21:38 USB emulation: enabled
2025/01/21 01:21:38 hci packet injection: enabled
2025/01/21 01:21:38 wifi device emulation: enabled
2025/01/21 01:21:38 802.15.4 emulation: enabled
2025/01/21 01:21:39 fetching corpus: 0, signal 0/0 (executing program)
2025/01/21 01:21:40 starting 8 fuzzer processes
01:21:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4040080)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x2, 0x3, 0x3, 0x8, @mcast2, @loopback, 0xf800, 0x40, 0x1, 0x7}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3a0}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "d74241979fcd477bb3762e867972c3dbaade2975d22ee3007e219cb1ac392701398ba314819b42ac0a06aa71ccf8f209cb115f42c6007e2c8749065dc7112c17b536e7eecb6076ffbcaf0a9d5ba190096d4c3be6b64cfa4f7aee15fca35bc0ae8712fc1b753326bd7c35c81c5511f15fca55acfff05028fbdf2ea631997bbdf57817d164ece92ce3a85aec6fad8e2e0cf413d457b3ca9bf9876aa3d7c4ff1ce5332f8850b50ad38a731535e3ba0d65f687791706db4a165426455a8b970ee2f55e15a1cada5dfacc2d62777ad769d221d19df706d976e0e9865f00911eb5a1c9239d4b1c33e5ed9759ea87d7ec073726b97a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x22, 0x4, "29e1febb8c8244e9a477196bd91be20e6b87129a48005b2a1a577db64537"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "1222620dca0ed5fd08c1e893fd9fe6b71e211639cce3cd89c89e5243ae087a2cd79932025edd5319da6fb163e4307c6aa7147dfddc9cadbf886ea460a88561a899880e72a45f53318dc597dacac6a463e724365ec6a8fa7f2a654d138d4fd7f2709a5c97607b77e893ba103172458946e1ed8cc59cfe0d250fa3c4e0f2c9ae8ccb5fd9347528bafb836ee80f45d0dccbc40a5ba8bef1a4c5f51bc2"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20004081}, 0x20004004)
r3 = accept(0xffffffffffffffff, &(0x7f0000000800)=@rc={0x1f, @fixed}, &(0x7f0000000880)=0x80)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, 0x0, 0x423, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x5080d)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8054)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000b80)='cgroup.procs\x00', 0x2, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80200, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0xb, 0x606, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x7, 0x1, '\\.\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x7, 0x6, 0x6, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff8000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3f}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1)
r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0)
ioctl$CDROM_CHANGER_NSLOTS(r7, 0x5328)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4006000}, 0x81)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40}, 0x11)

01:21:40 executing program 1:
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x54800, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x13, 0x1, 'batadv_slave_0\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004021}, 0x40)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000480)=0x5, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f00000004c0)=@rc={0x1f, @none, 0xa6}, 0x0, 0x0, 0x1}, 0x9)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40088c4)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x240, 0x0)
ioctl$CDROMVOLREAD(r4, 0x5313, &(0x7f0000000740))
accept(r4, 0x0, &(0x7f0000000780))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x3036180}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd4, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffe9a8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x112777d956f9b715}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc081}, 0x8040)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000980)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14)
r6 = accept(r0, &(0x7f00000009c0)=@nfc_llcp, &(0x7f0000000a40)=0x80)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400202}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x800)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000c00), &(0x7f0000000c40)=0x4)

01:21:40 executing program 2:
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0xffff, 0x8}, &(0x7f0000000040))
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
io_uring_setup(0x572e, &(0x7f0000000100)={0x0, 0x328d, 0x8, 0x0, 0x1af, 0x0, r0})
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x77d11506c122fbce)
r2 = syz_io_uring_setup(0x2ea3, &(0x7f0000000440)={0x0, 0xcad3, 0x20, 0x2, 0x35e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_setup(0x4dfd, &(0x7f0000000540)={0x0, 0x3272, 0x10, 0x0, 0x1ec, 0x0, r2})
mkdirat$cgroup(r0, &(0x7f00000005c0)='syz0\x00', 0x1ff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x306, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40093)
syz_io_uring_setup(0x3ae0, &(0x7f0000000740)={0x0, 0x36d4, 0x1, 0x1, 0x164}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000880)='syz0\x00', 0x1ff)
getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x4)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x6c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

01:21:40 executing program 3:
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555d}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20004000)
ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x1)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000100)={0x3, 0x48, 0x3, 0x80, 0xd6, 0x21})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x24}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20008880)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x7fff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0)
ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000dc0)=@lrpcs={0x3, 0x0, 0x6, 0x1, 0x81})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040)
io_cancel(0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x40, r4, &(0x7f0000000f00)="4d0fa322e8d8ed5371b4fd9936a9e915bf095c12d7070b11326a47d03dd246409a7df5099d36e5dd588012645c3e41d6710fcd796806b7484e0527cfdb17ba000c98016b51370bebdaa5517bef24b40001b09387d1f9a794a5e7ad2f2f8c1579e4cf641d5b77b5f801137d9a4bae1a6e7958", 0x72, 0x6, 0x0, 0x3}, &(0x7f0000000fc0))
r5 = socket(0x15, 0x1, 0x8001)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x14000001)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x24044004)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xfc, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffa}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_COMMENT={0xc, 0x1a, '.]^*$-.\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfc}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004860}, 0x20001)

01:21:40 executing program 4:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/11)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x301002)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0xffffffe4)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/147)
ioctl$CDROM_DEBUG(r0, 0x5330, 0x1)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
ioctl$CDROMVOLREAD(r1, 0x5313, &(0x7f00000001c0))
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000200)=""/140)
syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x101280)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000340), 0x9)
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000380)=""/82)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x200040, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000440)=""/211)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x40881, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x30058881}, 0x804)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000680)=""/52)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000006c0)=""/85)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000740)=""/140)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

[   79.826275] audit: type=1400 audit(1737422500.413:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:21:40 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0)

01:21:40 executing program 5:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1bc, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf533}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x64000004}, 0x800)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/135, 0x87, 0x756b, &(0x7f0000000400))
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000440)={{0xff, 0x5}, {0x3, 0x1}, 0xffff9d61, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000004c0)={0x5, 0x3, 0x40, 0x7fffffff, 0x1, 0x3})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a00)='cpuset.memory_pressure\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x5c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
r2 = socket(0xa, 0x3, 0x7)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x73}]}, 0x24}}, 0x2000c084)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x400200, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x8010)
r4 = openat$cgroup_type(r3, &(0x7f0000001ec0), 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002180)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002140)={&(0x7f0000001f40)={0x1f0, 0x1, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0xdc, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @CTA_EXPECT_MASK={0xe8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x26}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}]}, 0x1f0}}, 0x8010)
ioctl$CDROM_DEBUG(r1, 0x5330, 0x0)
syz_io_uring_setup(0x15af, &(0x7f00000021c0)={0x0, 0xaaa6, 0x4, 0x3, 0x227, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002240)=<r5=>0x0, &(0x7f0000002280))
syz_io_uring_submit(r5, 0x0, &(0x7f00000022c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xa9b4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x7fffffff)
r6 = mq_open(&(0x7f0000002380)='cpuset.memory_pressure\x00', 0x40, 0x4, &(0x7f00000023c0)={0x1000, 0xffffffffffff8000, 0x4af, 0x405})
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003440), 0x1001, 0x0)
io_submit(0x0, 0x5, &(0x7f0000003a00)=[&(0x7f0000002340)={0x0, 0x0, 0x0, 0x6, 0x3f, r4, &(0x7f0000002300)="81de2e9f450a6df23a22e8e7e6573cf3326ecc", 0x13, 0x4, 0x0, 0x1, r1}, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f0000002400)="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", 0x1000, 0x100000000, 0x0, 0x2, r1}, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x5, 0x8, r7, &(0x7f0000003480)="997c9543c5cb27836c85783663340cbd46f5abb0006f5b451d99c6ffe372504b3bdbd78701f6a07544767793efa4166956dc1d6f2ed87a7cca1a048f4e8a93ed9fb02a1b572de1cdbfff243cd2175133aa8de369d38d9698aaa8536fcd395780379472", 0x63, 0x4}, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x6, 0x3ff, 0xffffffffffffffff, &(0x7f0000003840)="fcea916fd7c52c3075715a06f36778a616730c28ec5f25f07e21ec0cef586e61e6962c2eb3efc398d1a0a78c53d940213f1b419d7c7715630ee5b27e5022d6c4c19771d416ef4f79827fddca3f867ef6c88571d0bf2ca9dead1749ad4c613a3b01e9b5c7c391536517b1433f971ee08f6418d95d92289f04b9500d84025afa891f878244088aabc9b8a511d61564db954033e97e3acfa963b4658bd094f3bda3bd5529de79cc16a634b25b94f11f26", 0xaf, 0x4, 0x0, 0x2}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000003940)="651ec6f8475b68eaf1582775d640c9d27d1c73b9f57aca9902132718fa3148b775788a92c0aa0d0939db7024f56862802a3d130ed1f8aef1ee485c63d25d8443d4dc0451680051bbf1142b09aeca55268afea8ec45cebf80ed8a56620f76383f01381f3039f0ad", 0x67, 0x100000001, 0x0, 0x0, r1}])

01:21:40 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xa, 0xa, 0xbe0619d2a3f55704, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x10)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x24c180, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x20040000)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x2200c801}, 0x4000884)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x33}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000500), 0x1000000, &(0x7f0000000580))
r3 = socket(0x11, 0x4, 0x963)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x5c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "2e6c73f9dc0eb20bb07ad985203abd4a5edd4c5a95628652b8e49ea358933d565a9c46e6e352c035d6df29b489afe1cb9949dca7b3e5798fb4b48ad3523cbf3693ece60b9b0b02697cf3f4ed85eb351672f87ca4"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x48a4)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x200408c0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xab59}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb26}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044000}, 0x800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004045}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x88, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x36}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044100}, 0x801)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r6)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4040a}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)

[   81.077475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.083187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.085554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.096199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.102282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   81.104654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.196099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.203301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.210158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.217050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.217643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.224399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   81.225362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.226263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.236534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.244522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.263785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.270895] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   81.275259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.277604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.281203] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.299856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.312848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   81.313652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.342304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.343618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.356016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.356359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.359157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.360177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.364563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.369046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.376178] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   81.378100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.391499] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   81.392338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.413074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   81.432110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   81.434268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   81.436403] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   81.439123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   81.447495] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   81.452120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   81.454368] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   81.455606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   81.460280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   81.461998] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   81.464289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   83.163528] Bluetooth: hci0: command tx timeout
[   83.291402] Bluetooth: hci1: command tx timeout
[   83.355825] Bluetooth: hci2: command tx timeout
[   83.418837] Bluetooth: hci3: command tx timeout
[   83.419039] Bluetooth: hci4: command tx timeout
[   83.482903] Bluetooth: hci5: command tx timeout
[   83.546807] Bluetooth: hci7: command tx timeout
[   83.547086] Bluetooth: hci6: command tx timeout
[   85.210938] Bluetooth: hci0: command tx timeout
[   85.338798] Bluetooth: hci1: command tx timeout
[   85.402862] Bluetooth: hci2: command tx timeout
[   85.466783] Bluetooth: hci4: command tx timeout
[   85.466880] Bluetooth: hci3: command tx timeout
[   85.531603] Bluetooth: hci5: command tx timeout
[   85.594797] Bluetooth: hci7: command tx timeout
[   85.594891] Bluetooth: hci6: command tx timeout
[   87.258859] Bluetooth: hci0: command tx timeout
[   87.386984] Bluetooth: hci1: command tx timeout
[   87.451008] Bluetooth: hci2: command tx timeout
[   87.515061] Bluetooth: hci4: command tx timeout
[   87.515934] Bluetooth: hci3: command tx timeout
[   87.579051] Bluetooth: hci5: command tx timeout
[   87.642865] Bluetooth: hci7: command tx timeout
[   87.643011] Bluetooth: hci6: command tx timeout
[   89.306789] Bluetooth: hci0: command tx timeout
[   89.435623] Bluetooth: hci1: command tx timeout
[   89.500720] Bluetooth: hci2: command tx timeout
[   89.562894] Bluetooth: hci3: command tx timeout
[   89.563743] Bluetooth: hci4: command tx timeout
[   89.626753] Bluetooth: hci5: command tx timeout
[   89.690895] Bluetooth: hci6: command tx timeout
[   89.691022] Bluetooth: hci7: command tx timeout
[  137.682900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.683022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.886113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.886194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.035209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.035284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.318867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.318939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.429920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.429995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.783323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.783402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.009738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.009812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.150060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.150134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.197201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.197274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.338977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.339063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.622803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.622886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.745043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.745129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.058271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.058355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
01:22:40 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0)

01:22:40 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0)

01:22:40 executing program 3:
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555d}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20004000)
ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x1)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000100)={0x3, 0x48, 0x3, 0x80, 0xd6, 0x21})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x24}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20008880)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x7fff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0)
ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000dc0)=@lrpcs={0x3, 0x0, 0x6, 0x1, 0x81})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040)
io_cancel(0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x40, r4, &(0x7f0000000f00)="4d0fa322e8d8ed5371b4fd9936a9e915bf095c12d7070b11326a47d03dd246409a7df5099d36e5dd588012645c3e41d6710fcd796806b7484e0527cfdb17ba000c98016b51370bebdaa5517bef24b40001b09387d1f9a794a5e7ad2f2f8c1579e4cf641d5b77b5f801137d9a4bae1a6e7958", 0x72, 0x6, 0x0, 0x3}, &(0x7f0000000fc0))
r5 = socket(0x15, 0x1, 0x8001)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x14000001)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x24044004)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xfc, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffa}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_COMMENT={0xc, 0x1a, '.]^*$-.\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfc}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004860}, 0x20001)

01:22:41 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0)

01:22:41 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)

01:22:41 executing program 3:
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555d}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20004000)
ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x1)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000100)={0x3, 0x48, 0x3, 0x80, 0xd6, 0x21})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x24}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20008880)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x7fff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0)
ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000dc0)=@lrpcs={0x3, 0x0, 0x6, 0x1, 0x81})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040)
io_cancel(0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x40, r4, &(0x7f0000000f00)="4d0fa322e8d8ed5371b4fd9936a9e915bf095c12d7070b11326a47d03dd246409a7df5099d36e5dd588012645c3e41d6710fcd796806b7484e0527cfdb17ba000c98016b51370bebdaa5517bef24b40001b09387d1f9a794a5e7ad2f2f8c1579e4cf641d5b77b5f801137d9a4bae1a6e7958", 0x72, 0x6, 0x0, 0x3}, &(0x7f0000000fc0))
r5 = socket(0x15, 0x1, 0x8001)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x14000001)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x24044004)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xfc, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffa}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_COMMENT={0xc, 0x1a, '.]^*$-.\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfc}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004860}, 0x20001)

[  140.991196] 
[  140.991434] ======================================================
[  140.992011] WARNING: possible circular locking dependency detected
[  140.992587] 6.13.0-rc7-next-20250120 #1 Not tainted
[  140.993067] ------------------------------------------------------
[  140.993632] kworker/u8:1/66 is trying to acquire lock:
[  140.994669] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  140.997024] 
[  140.997024] but task is already holding lock:
[  140.998885] ffff888035538768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  141.000950] 
[  141.000950] which lock already depends on the new lock.
[  141.000950] 
[  141.001641] 
[  141.001641] the existing dependency chain (in reverse order) is:
[  141.002269] 
[  141.002269] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  141.002871]        __mutex_lock+0x13d/0xb50
[  141.003290]        wiphy_register+0x1b2e/0x25d0
[  141.003737]        ieee80211_register_hw+0x23a4/0x3d60
[  141.004222]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  141.004752]        init_mac80211_hwsim+0x389/0x870
[  141.005251]        do_one_initcall+0xf9/0x640
[  141.005708]        kernel_init_freeable+0x53d/0x7a0
[  141.006210]        kernel_init+0x1e/0x2d0
[  141.006624]        ret_from_fork+0x48/0x80
[  141.007046]        ret_from_fork_asm+0x1a/0x30
[  141.007525] 
[  141.007525] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  141.008121]        __lock_acquire+0x29fd/0x4580
[  141.008596]        lock_acquire+0x19b/0x520
[  141.009047]        __mutex_lock+0x13d/0xb50
[  141.009495]        unregister_netdevice_many_notify+0x1612/0x1c80
[  141.010090]        unregister_netdevice_queue+0x224/0x2e0
[  141.010624]        _cfg80211_unregister_wdev+0x57b/0x700
[  141.011164]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  141.011700]        ieee80211_unregister_hw+0x55/0x3a0
[  141.012208]        hwsim_exit_net+0x3a0/0x730
[  141.012668]        ops_exit_list+0xb3/0x180
[  141.013111]        cleanup_net+0x546/0xad0
[  141.013550]        process_one_work+0x8ee/0x1a10
[  141.014035]        worker_thread+0x674/0xe70
[  141.014487]        kthread+0x3ab/0x720
[  141.014884]        ret_from_fork+0x48/0x80
[  141.015288]        ret_from_fork_asm+0x1a/0x30
[  141.015757] 
[  141.015757] other info that might help us debug this:
[  141.015757] 
[  141.016463]  Possible unsafe locking scenario:
[  141.016463] 
[  141.017016]        CPU0                    CPU1
[  141.017449]        ----                    ----
[  141.017857]   lock(&rdev->wiphy.mtx);
[  141.018220]                                lock(rtnl_mutex);
[  141.018744]                                lock(&rdev->wiphy.mtx);
[  141.019306]   lock(rtnl_mutex);
[  141.019629] 
[  141.019629]  *** DEADLOCK ***
[  141.019629] 
[  141.020164] 4 locks held by kworker/u8:1/66:
[  141.020555]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  141.021483]  #1: ffff88800ecefd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  141.022371]  #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  141.023192]  #3: ffff888035538768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  141.024116] 
[  141.024116] stack backtrace:
[  141.024524] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250120 #1
[  141.025318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  141.026078] Workqueue: netns cleanup_net
[  141.026481] Call Trace:
[  141.026729]  <TASK>
[  141.026949]  dump_stack_lvl+0xca/0x120
[  141.027359]  print_circular_bug+0x47b/0x750
[  141.027791]  check_noncircular+0x2e9/0x3c0
[  141.028205]  ? __pfx_check_noncircular+0x10/0x10
[  141.028686]  ? hlock_class+0x4e/0x130
[  141.029058]  ? mark_lock+0xac/0xed0
[  141.029424]  ? srso_return_thunk+0x5/0x5f
[  141.029853]  ? dl_scaled_delta_exec+0xd4/0x2c0
[  141.030310]  ? lockdep_lock+0xba/0x1b0
[  141.030720]  ? __pfx_lockdep_lock+0x10/0x10
[  141.031155]  __lock_acquire+0x29fd/0x4580
[  141.031570]  ? __pfx___lock_acquire+0x10/0x10
[  141.032018]  ? lock_release+0x20f/0x6f0
[  141.032409]  ? __pfx_lock_release+0x10/0x10
[  141.032837]  lock_acquire+0x19b/0x520
[  141.033212]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  141.033770]  ? __pfx_lock_acquire+0x10/0x10
[  141.034200]  ? srso_return_thunk+0x5/0x5f
[  141.034610]  ? lock_release+0x20f/0x6f0
[  141.035000]  ? srso_return_thunk+0x5/0x5f
[  141.035412]  ? lock_is_held_type+0x9e/0x120
[  141.035853]  ? srso_return_thunk+0x5/0x5f
[  141.036274]  __mutex_lock+0x13d/0xb50
[  141.036665]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  141.037208]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  141.037744]  ? srso_return_thunk+0x5/0x5f
[  141.038138]  ? synchronize_rcu_expedited+0x38a/0x420
[  141.038618]  ? __pfx___mutex_lock+0x10/0x10
[  141.039038]  ? __pfx_autoremove_wake_function+0x10/0x10
[  141.039556]  ? srso_return_thunk+0x5/0x5f
[  141.039988]  ? kasan_quarantine_put+0x84/0x1e0
[  141.040447]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  141.040862]  ? srso_return_thunk+0x5/0x5f
[  141.041262]  unregister_netdevice_many_notify+0x1612/0x1c80
[  141.041766]  ? __virt_addr_valid+0x2e8/0x5d0
[  141.042180]  ? __pfx_lock_release+0x10/0x10
[  141.042575]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  141.043109]  ? find_held_lock+0x2c/0x110
[  141.043498]  ? srso_return_thunk+0x5/0x5f
[  141.043894]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  141.044354]  ? srso_return_thunk+0x5/0x5f
[  141.044756]  ? lock_release+0x20f/0x6f0
[  141.045124]  ? __pfx_lock_release+0x10/0x10
[  141.045518]  ? srso_return_thunk+0x5/0x5f
[  141.045911]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  141.046382]  ? srso_return_thunk+0x5/0x5f
[  141.046783]  unregister_netdevice_queue+0x224/0x2e0
[  141.047232]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  141.047720]  ? up_write+0x195/0x520
[  141.048075]  _cfg80211_unregister_wdev+0x57b/0x700
[  141.048527]  ? srso_return_thunk+0x5/0x5f
[  141.048931]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  141.049383]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  141.049873]  ? srso_return_thunk+0x5/0x5f
[  141.050267]  ? srso_return_thunk+0x5/0x5f
[  141.050661]  ? synchronize_rcu+0x1ff/0x260
[  141.051053]  ieee80211_unregister_hw+0x55/0x3a0
[  141.051478]  hwsim_exit_net+0x3a0/0x730
[  141.051846]  ? __pfx_hwsim_exit_net+0x10/0x10
[  141.052256]  ? srso_return_thunk+0x5/0x5f
[  141.052655]  ? netdev_run_todo+0x788/0x1040
[  141.053057]  ? __pfx_hwsim_exit_net+0x10/0x10
[  141.053468]  ops_exit_list+0xb3/0x180
[  141.053829]  cleanup_net+0x546/0xad0
[  141.054182]  ? __pfx_cleanup_net+0x10/0x10
[  141.054610]  process_one_work+0x8ee/0x1a10
[  141.055041]  ? __pfx_lock_acquire+0x10/0x10
[  141.055444]  ? __pfx_process_one_work+0x10/0x10
[  141.055913]  ? srso_return_thunk+0x5/0x5f
[  141.056324]  ? move_linked_works+0x172/0x270
[  141.056758]  ? srso_return_thunk+0x5/0x5f
[  141.057188]  ? assign_work+0x196/0x240
[  141.057587]  worker_thread+0x674/0xe70
[  141.057992]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  141.058496]  ? srso_return_thunk+0x5/0x5f
[  141.058915]  ? __pfx_worker_thread+0x10/0x10
[  141.059368]  kthread+0x3ab/0x720
[  141.059729]  ? __pfx_kthread+0x10/0x10
[  141.060126]  ? srso_return_thunk+0x5/0x5f
[  141.060551]  ? finish_task_switch.isra.0+0x206/0x840
[  141.061055]  ? __pfx_kthread+0x10/0x10
[  141.061457]  ret_from_fork+0x48/0x80
[  141.061821]  ? __pfx_kthread+0x10/0x10
[  141.062221]  ret_from_fork_asm+0x1a/0x30
[  141.062647]  </TASK>
01:22:41 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)

[  141.130065] syz-executor.2 (286) used greatest stack depth: 24120 bytes left
01:22:41 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000080)="396179ac36e0f8bc7c13c1cbac19bc006e577bf260c4b912b6fe3c1df0435f163b3549a5a285df610fb108e236e03d3ecbd6c128341d02886d14e3f5944c786d9435927a653ec37cbe58d12a4b74ddb4a41ebaf10053a9c0a805db350150f3e8c4bca1ef9ab0124a7b62e498d463bd4f398d", 0x72, 0x3}, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{0x2, 0xfa}, 'port0\x00', 0x1, 0x1800, 0x1, 0x9, 0x1, 0xffff6053, 0x6b, 0x0, 0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000240)={0xe1, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000002c0))
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008001}, 0xb93a376d530b24f0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x762a, 0x401, 0x0, 'queue1\x00', 0xffff})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x58c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r3 = openat$cgroup(r2, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r2, 0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x80, 0x12345}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0x8000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0)

[  143.075073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.075401] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.076467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.077698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.078213] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  143.078489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.268931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.269899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.271925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.272874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.273387] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  143.273704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.414645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.415333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.415626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.419749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.423845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  143.424153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.532098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  143.533582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  143.534006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  143.547904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  143.551725] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  143.553349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  143.616520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  143.635877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  143.636187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  143.638033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  143.655823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  143.656137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  143.663180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.663742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.669395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.679376] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.685817] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  143.686870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  145.114721] Bluetooth: hci0: command tx timeout
[  145.306722] Bluetooth: hci1: command tx timeout
[  145.435120] Bluetooth: hci3: command tx timeout
[  145.626832] Bluetooth: hci4: command tx timeout
[  145.692724] Bluetooth: hci5: command tx timeout
[  145.754897] Bluetooth: hci7: command tx timeout
[  147.162745] Bluetooth: hci0: command tx timeout
[  147.354783] Bluetooth: hci1: command tx timeout
[  147.482720] Bluetooth: hci3: command tx timeout
[  147.674750] Bluetooth: hci4: command tx timeout
[  147.738727] Bluetooth: hci5: command tx timeout
[  147.803167] Bluetooth: hci7: command tx timeout
[  149.211719] Bluetooth: hci0: command tx timeout
[  149.402738] Bluetooth: hci1: command tx timeout
[  149.530776] Bluetooth: hci3: command tx timeout
[  149.722713] Bluetooth: hci4: command tx timeout
[  149.786783] Bluetooth: hci5: command tx timeout
[  149.851173] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
01:22:41  Registers:
info registers vcpu 0
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800eceebb8
R8 =0000000000000001 R9 =ffffed1001d9dd67 R10=000000000000002e R11=3a6b636f6c206762
R12=000000000000002e R13=0000000000000001 R14=ffff888008fea017 R15=ffff88800eceeeb8
RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f360c66a998 CR3=0000000015472000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004161e65900000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888012d0cb90 RBX=0000000000000000 RCX=00000000800d000d RDX=00000000000d000b
RSI=0000000000000000 RDI=ffff888008c4f780 RBP=ffff8880301ff450 RSP=ffff8880301ff3f0
R8 =ffff888012d0cb90 R9 =fffffbfff0c80a7a R10=ffffffff864053d7 R11=ffff88806cf402d0
R12=ffffea00004b4300 R13=ffff888008c4f780 R14=ffff888008c4f780 R15=ffffea00004b4300
RIP=ffffffff81a43da1 RFL=00000042 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558980f400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe1000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f802ebecf50 CR3=0000000018e20000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000040f0000000000000
XMM02=652e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000
XMM04=000000c0003ad460000000c0003441e0 XMM05=000000c0003ad580000000c000344240
XMM06=000000c0003ad600000000c0003ad5a0 XMM07=000000c0003ad6a0000000c0003ad660
XMM08=000000c0002afc80000000c0003ac740 XMM09=000000c0002afcb0000000c0003ac760
XMM10=000000c0003ac7c0000000c0003ac7a0 XMM11=000000c0003ac860000000c0003ac820
XMM12=000000c0003ac900000000c0003ac8c0 XMM13=000000c0003ac980000000c0003ac940
XMM14=000000c0003aca20000000c0003ac9c0 XMM15=000000c0003acaa0000000c0003aca60