Warning: Permanently added '[localhost]:1830' (ECDSA) to the list of known hosts. 2025/01/21 01:36:58 fuzzer started 2025/01/21 01:36:59 dialing manager at localhost:44833 syzkaller login: [ 74.928638] cgroup: Unknown subsys name 'net' [ 75.039379] cgroup: Unknown subsys name 'cpuset' [ 75.074273] cgroup: Unknown subsys name 'rlimit' [ 100.740242] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 01:37:25 syscalls: 200 2025/01/21 01:37:25 code coverage: enabled 2025/01/21 01:37:25 comparison tracing: enabled 2025/01/21 01:37:25 extra coverage: enabled 2025/01/21 01:37:25 setuid sandbox: enabled 2025/01/21 01:37:25 namespace sandbox: enabled 2025/01/21 01:37:25 Android sandbox: enabled 2025/01/21 01:37:25 fault injection: enabled 2025/01/21 01:37:25 leak checking: enabled 2025/01/21 01:37:25 net packet injection: enabled 2025/01/21 01:37:25 net device setup: enabled 2025/01/21 01:37:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 01:37:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 01:37:25 USB emulation: enabled 2025/01/21 01:37:25 hci packet injection: enabled 2025/01/21 01:37:25 wifi device emulation: enabled 2025/01/21 01:37:25 802.15.4 emulation: enabled 2025/01/21 01:37:25 fetching corpus: 0, signal 0/0 (executing program) 2025/01/21 01:37:28 starting 8 fuzzer processes 01:37:28 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x80) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c0}, 0x8040) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000801) r1 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@nfc_llcp, &(0x7f0000000500)=0x80, 0x800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4044) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x40800, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4010, r2, 0x10000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x80, 0xd5, 0x0, 0x40}]}) r4 = syz_open_dev$mouse(&(0x7f0000001840), 0x6, 0x20081) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001a80), 0x100c2, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/self/attr/exec\x00', 0x2, 0x0) r7 = eventfd2(0x100, 0x800) io_submit(0x0, 0x6, &(0x7f0000001d80)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000001780)="f7df0dc7227e4185b807e6ecba06829c05bd0dc54b61d6c8e129425e0475933246eb3ede3403accc02e331545128a3d97779b86fdd7d73872287e3be29e46e3ce83c9c5466c0f062c968bd813b77f57533f123f02b9387d26bb752bc656c372dfefb17aea5", 0x65, 0x9, 0x0, 0x3, r2}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000001880)="3bbb4349631f519699bb28cc9a1bce42c44ca916eb6ba7349bf4d95dc44247877dc2aa5693ede531d6004656b8dd68bfd8c7c8f817baccca7166c6862e7bf8296b722dd4df41e19352a1fda6b5a0a8c4fd921da3114ce1c503ab993e7376d19c551e46f26342a2462551c62625f0b4f4afb32b857d2b5414d67bf532f3625a9e38773d4ffa2ef9ab4d3347fdee5154a22e8b37d90a02e9fe4e850c52400f4cd6848c22ee58bde6441fe6d0ceb7f9", 0xae, 0x8, 0x0, 0x2, r2}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0xe0, r1, &(0x7f0000001980)="369961a69366eefccbaff26cb899c50f381685dc8f31599bdb82d2d93e21bb26e20877b46bc8db25b58ffe8a5cede50a1a97e4fac9442a9f7602cd95fbaee872860c1ec4e750b332f081a8b2d12507a6cdd41279c226da542f69e55e2caf990510fae74e642ba3f776301ebd2fbeeb9252b978b92ec0f756259033a3d5b471a03641dcd0371b4279b8192571a5bf2c16645a0c5ed728991251a6b243aa8ce2668fbcb45d5c1cdff2e7b34aafbf89d876344a5b1bcde4a7ec239b397048ae5b05e4db8af3ab02fc4e6a709ab0a0b36a978d48bb61fa22ea43f3eea288e537cbae679d285587bfdfbd058838c10142", 0xee, 0x4, 0x0, 0x1, r5}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x39, r2, &(0x7f0000001b00)="b0bf814a718a0bdd02fea7fcf0376793dac70f28957e402719684d3088f029ff4f15a075c1ebce3145e4790f9d7b57696180ed06deb8dd8bc985b90ab2937b32333684ddd1796e331268d997c3264b0a5b5e0e76ec055e07c5622f10dd4df4c80a3db8d1a11eaf16d5fcfd46318fbdb866d6136d3bc5dcb8bab0ab626a8c5449ddfad18a97c60d125f506f18b12a41ada6e282", 0x93, 0x0, 0x0, 0x1, r2}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x5, 0x76fe, r6, &(0x7f0000001c40)="52f79b3ff05c8c05b93a539817bbe0c107f1501f06d67b33e9d8064df815f1ce39489e76ec3b39550046c8bee1", 0x2d, 0x3, 0x0, 0x2, r2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x6, 0x8001, r2, &(0x7f0000001cc0)="aa28e4259e2c3b6da28f837a0bd70cd405ca4d006216d5f230a71b86a9b318beb83058a23a71d83458cebade921ac70f15f7979e95ca17314e21fc18e435e0fdd546ab99d1177a23f5c69f374e896d140036e4f3c19c1cb77bf87b73df80bb5a29f5ca94ceb34d247899debc52e8d96ddb20551e", 0x74, 0xfcbc, 0x0, 0x2, r7}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xd8d06e67de2af614}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002200)='nv\x00', 0x3) 01:37:28 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x33d0efdb02bf2016}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0xaa87b00cc4e5d1d0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41d1}, 0x40004) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80c1}, 0x20000004) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4088) r6 = eventfd(0x3) read$eventfd(r6, &(0x7f00000007c0), 0x8) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x40, 0x0) write$eventfd(r7, &(0x7f0000000840)=0xfffffffffffffffb, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x98, 0x0, 0x100, 0x1, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\}\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\+\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa8, r5, 0x704, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000b80)) getegid() 01:37:28 executing program 1: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:traceroute_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004040) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '!*\x97)#\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x1c}}, 0x8890) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x80001, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x12c, 0x0, 0x0, 0xff, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe09}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_open_dev$mouse(&(0x7f0000000740), 0x800, 0x20000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000940)={&(0x7f00000007c0), 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x73}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x2b}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdc}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xd) getsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '!*\x97)#\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4(r6, &(0x7f0000000c00)=@nfc_llcp, &(0x7f0000000c80)=0x80, 0x800) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000014}, 0x24040085) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x20000810) 01:37:28 executing program 2: io_destroy(0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000000)="b660a0179904fa3f88e021f47e0099746397c31ee258cff8d5d70cc4d402a0614574ef68650c257c994f4e93f28a27e3481889aaae1f445c04e269d292508f9a2b59294cdc0e908c7303a74c30d10b8b602317e3a873ddfc162606d48c6547568f1db16ca3a1dc63179ae0db92e4bb", 0x6f, 0x80000000, 0x0, 0x1}, &(0x7f00000000c0)) io_pgetevents(0x0, 0x10001, 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x400]}, 0x8}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) io_setup(0xfff, &(0x7f0000000540)=0x0) io_cancel(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000580)="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", 0xff, 0x7afb, 0x0, 0x1}, &(0x7f00000006c0)) io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000700)="fa2c716d48ba4edaae94f80e3527f655bc999d5604b0add0474c55d56c213365b5da39d3a14db98b50660812cfc66f04e0339e896cd660d06817224b70aa288d1620956a025ca700", 0x48, 0x6, 0x0, 0x2}]) io_setup(0x1ff, &(0x7f0000000800)=0x0) io_destroy(r1) io_setup(0x51, &(0x7f0000000840)=0x0) io_destroy(r2) io_setup(0xfff, &(0x7f0000000880)=0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_cancel(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000900)="669ab23af2e083f3078dc87945bd490fb465cf42141585a7f7a13173faec4fbb05d3a694783804ca7ce88e613897b889103489af8049c44aa531e3e8638299f7b65d7f5a6a7c6cf0789d696a3aefcaea5af7380e500e1a3797f45bb70dbc10a89ff7315ff6562e71cf3322", 0x6b, 0x8, 0x0, 0x1}, &(0x7f00000009c0)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000000) r5 = eventfd2(0x1000, 0x800) io_submit(r2, 0x2, &(0x7f0000000bc0)=[&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x5, 0x8, r4, &(0x7f0000000a00)="b1cf6e9a47c7f9064c9654d911aeca024bba9eb1f34453ced7c6a44b223ed5617383f4f593645af2a1bf80192867baf0a4815f91b66f096a940dbe7aaf50137453ac5f975e06f0a4463695ef6f76217eeb2b9ba2ba2b35", 0x57, 0x7, 0x0, 0x3}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x3, 0x400, 0xffffffffffffffff, &(0x7f0000000ac0)="1e0728d3f2cb20c176cc2b29b65825881269503e5f74d3a9f1ba01238ef5bf598f415da8202bb96b37cb7d5ea073d1f3f4f217a2946c6b951cca28a2fe05b7d3220b8e72b2417b0977366e7e2c12ce75c22461453d07bd92c098c92ec446548650ad0ef147ce5a39d545d14316346128aa022d8d70d6c44dad55757a072a706d9d096a3e4a7d9911813f920a6012385d9ce07c9ffe25430669fb5fbc27d0277b5e675552b2c2b181b9b357ae0b65", 0xae, 0x1, 0x0, 0x2, r5}]) io_setup(0x2, &(0x7f0000000c00)) io_getevents(0x0, 0x1, 0x8, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d80)={0x0, 0x989680}) 01:37:28 executing program 4: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0xf24) r0 = io_uring_setup(0x7302, &(0x7f0000000040)={0x0, 0x2b8d, 0x4, 0x2, 0x3ce}) io_uring_setup(0x2d56, &(0x7f00000000c0)={0x0, 0x98c0, 0x4, 0x2, 0x36b, 0x0, r0}) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x440) syz_usb_disconnect(0xffffffffffffffff) io_setup(0xfffffffb, &(0x7f0000000180)=0x0) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f00000001c0)="710e603e858fcac25d46b3ef1ceb8a84c1003c42ef16c8d8c998333e145233ff3da9ab38b1151521cabc347246c5c77a4e29a5196c08ee4ee4928e90abb78397bdaeacba498140960957720f5a5a902171dd95d6728c1fa2107fe855dbd3591129ff0874b22a73ca2878f71323f49d23d6bca3f36987bdbec88603bea08a081fa5f0ebf7c9436c09b472353067aea4a8e170872ebae5c4da98c2b773950046dc5782cc3a6d01cabc448e6d60010cc642052e6d8f086a60ccb690d22382c2f81809e61c6f25b0e951e105d4d8adb1f05c32c37ec7809d8975497775da1ed6fe20a630defa18ad81488254949d16b1", 0xee, 0xab6, 0x0, 0x1, r1}, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) write$nbd(r1, &(0x7f0000000380)={0x67446698, 0x0, 0x4, 0x2, 0x2, "730aa33b490a5cc1a054b6e10af6bfb56cb2165fd1b28421a3eec3d19f4ebf184501b5230dda8a7f42971a6d042cc8fcb6dd29db3df0f2e5a8fcbb318abe51f1a7b8045580c7315a73b398a5148ec212e318bae9598680eb6df3dd378d839814fe80463331a73f759f0ef8edc84c7dd59c02cbd65d4ebf00ae381b0400fe97525655a1b4fe5166745e451d2ed29a2474e7e9a728f60e0b8048377091822dc5b5a0ee55c61966d646188c067eabc568696eb87f871e4caf9a374d80fa4f91781d7cd9aa3d55bfa8ae2d5c8051b95718d9eefc3fcec06000993f65002e9d1a922a5bdc7430"}, 0xf4) r3 = syz_io_uring_setup(0x6891, &(0x7f0000000480)={0x0, 0xc9e2, 0x0, 0x2, 0x2ee, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000015c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/50, 0x32, 0x0, &(0x7f00000005c0)=""/4096, 0x1000}, &(0x7f0000001600)=0x40) socketpair(0x1a, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "1a5595899da54101", "7fd5829ebf09f43e124abfb329925ac0", "74b0c1c5", "ab11755b12821bda"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000016c0)={{0x3, 0x1, 0x18, 0x0, 0x4d}, 0x9, 0x10000}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r3, 0x94b1e000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001740)) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) r5 = io_uring_setup(0x7d2d, &(0x7f00000018c0)={0x0, 0x7d4c, 0x4, 0x3, 0x64, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000001940)=r1, 0x1) [ 103.722915] audit: type=1400 audit(1737423448.266:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:37:28 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x20) ioctl$sock_ifreq(r0, 0x891c, &(0x7f00000000c0)={'veth0_macvtap\x00', @ifru_addrs=@l2}) syz_io_uring_setup(0x1330, &(0x7f0000000100)={0x0, 0x9d60, 0x2, 0x2, 0x1f2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={r4, r5+60000000}, 0x1, 0x2}, 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x9, r6, &(0x7f00000002c0)="92c74aa54fc6c36859f91f54a601b0565aa866ef8b917432a4128b595f1508f424e015295443bf4960ca7fcbc0a34159ddf55acfc52777b30d5362c5ede486dce1093536769c3f79115a3dc2be87cffd1b1ffe3f3550022fe1a5bf80e34e4a4ad76c631db3f086ca627a18c8427f0ccc0872f3c645cfeb3ffb71e04c77e9f1b26799d9562700d3bd39c0a7ee3c4b3e0c3fd4de4c90bc1e1f484a87fa4452526ef441b133052a43e41d735e8c3701f356097e8ed1348887424602fd5d0da36134cc9be44d668f9154c34b4784103fe4a31f6c0c1470cef8de3572626a86276a3bce9f3ddae6c12cf460e27b", 0xeb, 0x80000000, 0x0, 0x2, r0}]) r7 = getpgrp(0xffffffffffffffff) tkill(r7, 0x18) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x10142, 0x0) socketpair(0x26, 0x3, 0x7f, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x12, r8, 0x2cc6d000) getsockopt$inet6_tcp_int(r9, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r10 = syz_open_dev$mouse(&(0x7f0000000540), 0x9, 0xc00) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000580), 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r11, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 01:37:28 executing program 7: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x2400c181) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x726}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d93}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfd5c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x48001) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2c9f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7676}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0xb}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x640}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c005) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x3ed, 0x2, 0x70bd2d, 0x25dfdbfc, "0d92a757a1c835b0d147752a05a1f29e9d753b3075ed4bf7e48e09121e6ac8076b65199ae245552d431137c507e9d0cb15d0e48761bb0354f550afc6d2ff0289e38a25fe5e09b74a131466d8a11c665a405ed4cfc218488c5252ea6953f695a5d9f1f47b0c7a63947fc4ed06605f829dcbadf741f80f8a36c6c69eed334474f9f812d88eca990950769b09a509abd59e1d76b154fe7079c3a630eeef46b4c9e04da50963a9347a597ab283e23db136a2658f0a7310a758a8a4821e3c10ada30c643e481a470f85d3fa7138257fecfb6f6a669eff7349c03c02fca025746aa31ee6fe94ae518e3239b875981d083695fb363dc85a", ["", "", "", ""]}, 0x104}}, 0x11) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3f2, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4080) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000880)=@gcm_256={{0x304}, "9150388aa7245ba8", "41e7f6fa469205fe96e314df281775bf2d20852a4e0d1bd213c21ffcb4cea8b7", "d126aedb", "b867c34990eca4a7"}, 0x38) r1 = syz_open_dev$mouse(&(0x7f00000008c0), 0x4, 0x200000) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9b}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000980}, 0x80) eventfd(0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40), 0x8f8d6f2453cee625, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcc5f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008880}, 0x10) socketpair(0x1e, 0x5, 0x2, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xf0, 0x464, 0x200, 0x70bd2b, 0x25dfdbff, "5cada530ae9b001ec9bb4cb1e49c0a3452f920b09440695cccec5491cd9e878fd977d21f337fc4896a30587562711d889a84a5659a62a972671a6ede05f3ae709c2f63ce2603b7a17cb12012c67946e5283e99294c0d7ef5989fcff01a3297660a71d827990257227a76623c70907c93da5713328a48a84beaec33a6f558427b75f095ad97aa700e7328c4aa9d3a72e5d1794c99b70fbce29ea166df9d44778fd5df1e4506f113d19137601be28daae053ce557f39782e2f45db598c3b5c47863b3cef75d9e91e492d4fc540513e4c2099c037639e381c1eefe40c4d433d", ["", "", "", "", "", "", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000ec0)) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x18, 0x3f9, 0x1, 0x70bd2a, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x6c, r0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008000) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008890) 01:37:28 executing program 6: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8b}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x1a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040040}, 0x48000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000280)={0x0, 0xd9, "8e461507fd3f1bc466ec137db417a68c2ca7514a9bb158328ada2e56b3b6c54f944b8d2279ea3626ecac22ede790a20cd7861fc6fc519b9041aae030d08b6d0557ee156b7f037b759893658ccdd6ed28ce35dd6f7492c1e983ecf32a219fef08a354ea1d9c9f677fdff34304ee424d22a2f9275be18029aa2d621f5561c37e19a5cb981423f56982ddcf7640dc39bbaa3c951b47e4d3c3b53d25c068d3e88cbc863efbf4eb4e265ceff29a2904306e01b54ca634d72eb2768349e4662a08390a2db25e2666b2bd31d23b2b4c42505b767b00883c1e262a3903"}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000380)=0x400) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0xe8, 0x8, 0x6, 0x0, @remote, @empty, 0x40, 0x700, 0x80000001, 0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000480)) r2 = accept4(r1, 0x0, &(0x7f0000000580), 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa05}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb8a}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vxcan1\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x8a242) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000a40)={0x2, 0x4, 0x7, 0x0, 0xe}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000f80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b00)={0x424, 0x3f4, 0x8, 0x70bd2a, 0x25dfdbfb, {0x3, 0x2, 0x16, [0x7, 0x7, 0x3ff, 0xfffffff9, 0x1, 0xffffffff, 0x3, 0x80, 0x1ff, 0x5, 0x8001, 0x6, 0x6, 0x4, 0x10001, 0x5, 0x8, 0x0, 0x3, 0x5, 0xe4, 0xff, 0x1, 0x2, 0x3, 0x8, 0xfffffff9, 0x8091, 0xfffff801, 0x80000001, 0x81, 0x101, 0x4, 0x0, 0x6000, 0x7ff, 0x0, 0x6, 0xfe87, 0x10001, 0x3, 0x0, 0x5, 0x1fd, 0x0, 0x8, 0x6, 0x100, 0x200, 0x0, 0x4, 0x3, 0x8, 0x3a2c, 0xbe, 0x3, 0x7, 0x9, 0x1, 0x1, 0x80000000, 0x9, 0xff, 0x5], [0x7, 0x5, 0x6, 0x80000001, 0x0, 0x5, 0x0, 0x3, 0x0, 0x1f, 0x2, 0x81, 0x1c, 0x81, 0x7, 0x6, 0x4, 0x7, 0x3, 0x3, 0x7f, 0x5, 0x1, 0x7fffffff, 0x9, 0x6, 0x401, 0xba9, 0x4, 0x3, 0x1f, 0x80000000, 0x6ed, 0x729, 0x6, 0x2, 0x400, 0xc1, 0x5, 0x1, 0x9, 0x8729, 0x4, 0x8, 0xfffffffc, 0x9, 0x3473, 0x5623, 0x1, 0x3, 0xfffffff7, 0xffffacde, 0xffffffff, 0x2, 0x4, 0xfffff000, 0x1, 0x6, 0xff, 0x4, 0x30f, 0x0, 0x10000, 0x2], [0xe6fa, 0xfa, 0x13, 0x6556, 0x4, 0x3, 0x400000, 0x6da, 0x800, 0x10100, 0x4, 0x1f, 0x4e, 0x0, 0x2, 0x1, 0xfff, 0x7, 0x3e, 0x9, 0x7fffffff, 0x7ff, 0x3, 0x6, 0x10000, 0x5b, 0x8c, 0x5b3b, 0x7, 0x2468, 0x8, 0x101, 0x7fc0, 0xfffffff9, 0xfffeffff, 0x20, 0x84, 0x9, 0x66e0, 0x259, 0xf2, 0xfba, 0x9, 0xc000, 0x0, 0x1000, 0x2, 0x6, 0x7, 0x0, 0x621, 0x3, 0x80, 0x7, 0x5, 0x4, 0x25, 0x6, 0x6, 0x691, 0x26ee, 0x8, 0x1f, 0x5], [0x4d, 0x7f, 0x3f, 0xc6, 0x9, 0x6, 0x8, 0x6, 0xfffffff7, 0x9, 0x962, 0x1, 0x120000, 0x8, 0x6, 0x5, 0x12, 0x81, 0x7ff, 0x8, 0x1, 0x8, 0x1ff, 0x4, 0xc300000, 0x3, 0x1, 0x3, 0xffffffff, 0x7, 0x2e5688a2, 0x200, 0x100, 0x9, 0x6, 0x1, 0x4, 0xc0, 0x4, 0x4, 0x800, 0x0, 0x6, 0xff, 0x9, 0x0, 0x0, 0x1, 0x80000001, 0xaf, 0x1, 0x40, 0x3, 0x6, 0x915, 0x7, 0xf6, 0x7, 0x5, 0x6, 0x1d5a, 0xfffffffc, 0x4, 0x1], 0x1, ['\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x8084}, 0x40) r5 = accept4(r1, &(0x7f0000001000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000001080)=0x80, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r5) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x3f5, 0x20, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x800) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'syztnl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040000}, 0x4040) [ 105.192367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.202214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.204275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.208024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.209836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.219387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.220878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.228103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.231466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.232571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.234872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.242123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.245028] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.247067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.251090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.253280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.256079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.261364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.264039] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 105.265029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.272558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.320171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.330637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.337025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.337764] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.351252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.361501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.362022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.367093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.379077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.386340] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 105.401067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.402957] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.405464] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.407507] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.409575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 105.412374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.420101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.428888] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.433596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.434219] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 105.435562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.441194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.442956] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 105.443826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.451879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.503145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 105.524150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 107.326799] Bluetooth: hci1: command tx timeout [ 107.326805] Bluetooth: hci0: command tx timeout [ 107.391169] Bluetooth: hci2: command tx timeout [ 107.391190] Bluetooth: hci3: command tx timeout [ 107.518561] Bluetooth: hci5: command tx timeout [ 107.518876] Bluetooth: hci4: command tx timeout [ 107.581884] Bluetooth: hci7: command tx timeout [ 107.582928] Bluetooth: hci6: command tx timeout [ 109.373756] Bluetooth: hci1: command tx timeout [ 109.373868] Bluetooth: hci0: command tx timeout [ 109.438815] Bluetooth: hci2: command tx timeout [ 109.438848] Bluetooth: hci3: command tx timeout [ 109.566760] Bluetooth: hci4: command tx timeout [ 109.566859] Bluetooth: hci5: command tx timeout [ 109.631747] Bluetooth: hci6: command tx timeout [ 109.631827] Bluetooth: hci7: command tx timeout [ 111.421910] Bluetooth: hci0: command tx timeout [ 111.424795] Bluetooth: hci1: command tx timeout [ 111.485753] Bluetooth: hci3: command tx timeout [ 111.486890] Bluetooth: hci2: command tx timeout [ 111.613770] Bluetooth: hci5: command tx timeout [ 111.613808] Bluetooth: hci4: command tx timeout [ 111.677880] Bluetooth: hci6: command tx timeout [ 111.680710] Bluetooth: hci7: command tx timeout [ 113.470765] Bluetooth: hci1: command tx timeout [ 113.470950] Bluetooth: hci0: command tx timeout [ 113.534769] Bluetooth: hci2: command tx timeout [ 113.534855] Bluetooth: hci3: command tx timeout [ 113.662258] Bluetooth: hci4: command tx timeout [ 113.662861] Bluetooth: hci5: command tx timeout [ 113.726812] Bluetooth: hci7: command tx timeout [ 113.726998] Bluetooth: hci6: command tx timeout [ 167.441468] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.443039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.445612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.452248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.456268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.457496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.497230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.498933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.499940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.503184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.505167] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.506127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.633734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.652365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.657156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.675568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.683543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.694970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.702381] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.703067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.710150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.714228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.718370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.735509] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.740181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.742083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.742929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.746955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.755109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.758953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.762779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.766329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.771505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.775242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.775573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.779941] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.781272] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.784452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.786851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.789824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.796986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.805194] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 167.807524] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.809894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.816380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.861136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.873064] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.876318] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.533838] Bluetooth: hci1: command tx timeout [ 169.534086] Bluetooth: hci0: command tx timeout [ 169.854748] Bluetooth: hci2: command tx timeout [ 169.855145] Bluetooth: hci7: command tx timeout [ 169.917817] Bluetooth: hci6: command tx timeout [ 169.917994] Bluetooth: hci3: command tx timeout [ 169.918149] Bluetooth: hci4: command tx timeout [ 169.981814] Bluetooth: hci5: command tx timeout [ 171.581853] Bluetooth: hci1: command tx timeout [ 171.583048] Bluetooth: hci0: command tx timeout [ 171.903428] Bluetooth: hci7: command tx timeout [ 171.903634] Bluetooth: hci2: command tx timeout [ 171.966146] Bluetooth: hci4: command tx timeout [ 171.966308] Bluetooth: hci3: command tx timeout [ 171.966482] Bluetooth: hci6: command tx timeout [ 172.029897] Bluetooth: hci5: command tx timeout [ 173.629893] Bluetooth: hci1: command tx timeout [ 173.630772] Bluetooth: hci0: command tx timeout [ 173.949775] Bluetooth: hci2: command tx timeout [ 173.949867] Bluetooth: hci7: command tx timeout [ 174.014148] Bluetooth: hci6: command tx timeout [ 174.015411] Bluetooth: hci3: command tx timeout [ 174.015486] Bluetooth: hci4: command tx timeout [ 174.077767] Bluetooth: hci5: command tx timeout [ 175.677755] Bluetooth: hci0: command tx timeout [ 175.678331] Bluetooth: hci1: command tx timeout [ 175.997772] Bluetooth: hci7: command tx timeout [ 176.000883] Bluetooth: hci2: command tx timeout [ 176.061870] Bluetooth: hci6: command tx timeout [ 176.062457] Bluetooth: hci3: command tx timeout [ 176.062559] Bluetooth: hci4: command tx timeout [ 176.127715] Bluetooth: hci5: command tx timeout [ 227.349177] [ 227.349673] ====================================================== [ 227.350998] WARNING: possible circular locking dependency detected [ 227.352321] 6.13.0-rc7-next-20250120 #1 Not tainted [ 227.355418] ------------------------------------------------------ [ 227.356724] kworker/u8:1/65 is trying to acquire lock: [ 227.357965] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 227.361909] [ 227.361909] but task is already holding lock: [ 227.363264] ffff88802feb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 227.365560] [ 227.365560] which lock already depends on the new lock. [ 227.365560] [ 227.367757] [ 227.367757] the existing dependency chain (in reverse order) is: [ 227.369467] [ 227.369467] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 227.371002] __mutex_lock+0x13d/0xb50 [ 227.371997] wiphy_register+0x1b2e/0x25d0 [ 227.373007] ieee80211_register_hw+0x23a4/0x3d60 [ 227.374163] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 227.375555] init_mac80211_hwsim+0x389/0x870 [ 227.376800] do_one_initcall+0xf9/0x640 [ 227.377955] kernel_init_freeable+0x53d/0x7a0 [ 227.379227] kernel_init+0x1e/0x2d0 [ 227.380249] ret_from_fork+0x48/0x80 [ 227.381299] ret_from_fork_asm+0x1a/0x30 [ 227.382633] [ 227.382633] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 227.384293] __lock_acquire+0x29fd/0x4580 [ 227.385688] lock_acquire+0x19b/0x520 [ 227.387001] __mutex_lock+0x13d/0xb50 [ 227.388329] unregister_netdevice_many_notify+0x1612/0x1c80 [ 227.390118] unregister_netdevice_queue+0x224/0x2e0 [ 227.391729] _cfg80211_unregister_wdev+0x57b/0x700 [ 227.393433] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 227.395099] ieee80211_unregister_hw+0x55/0x3a0 [ 227.396648] hwsim_exit_net+0x3a0/0x730 [ 227.397959] ops_exit_list+0xb3/0x180 [ 227.399244] cleanup_net+0x546/0xad0 [ 227.400310] process_one_work+0x8ee/0x1a10 [ 227.401506] worker_thread+0x674/0xe70 [ 227.402630] kthread+0x3ab/0x720 [ 227.403652] ret_from_fork+0x48/0x80 [ 227.404673] ret_from_fork_asm+0x1a/0x30 [ 227.405845] [ 227.405845] other info that might help us debug this: [ 227.405845] [ 227.407671] Possible unsafe locking scenario: [ 227.407671] [ 227.409013] CPU0 CPU1 [ 227.410079] ---- ---- [ 227.411142] lock(&rdev->wiphy.mtx); [ 227.412042] lock(rtnl_mutex); [ 227.413325] lock(&rdev->wiphy.mtx); [ 227.414693] lock(rtnl_mutex); [ 227.415516] [ 227.415516] *** DEADLOCK *** [ 227.415516] [ 227.416774] 4 locks held by kworker/u8:1/65: [ 227.417738] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 227.419758] #1: ffff88800ecf7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 227.421690] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 227.423373] #3: ffff88802feb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 227.425235] [ 227.425235] stack backtrace: [ 227.426028] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250120 #1 [ 227.427507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 227.428921] Workqueue: netns cleanup_net [ 227.429689] Call Trace: [ 227.430145] [ 227.430558] dump_stack_lvl+0xca/0x120 [ 227.431337] print_circular_bug+0x47b/0x750 [ 227.432138] check_noncircular+0x2e9/0x3c0 [ 227.433058] ? lock_repin_lock+0x207/0x320 [ 227.433873] ? __pfx_check_noncircular+0x10/0x10 [ 227.434741] ? hlock_class+0x4e/0x130 [ 227.435444] ? mark_lock+0xac/0xed0 [ 227.436118] ? __pfx_lock_repin_lock+0x10/0x10 [ 227.437006] ? timerqueue_del+0x83/0x150 [ 227.437787] ? lockdep_lock+0xba/0x1b0 [ 227.438570] ? __pfx_lockdep_lock+0x10/0x10 [ 227.439499] __lock_acquire+0x29fd/0x4580 [ 227.440292] ? __pfx___lock_acquire+0x10/0x10 [ 227.441193] ? lock_release+0x20f/0x6f0 [ 227.442038] ? __pfx_lock_release+0x10/0x10 [ 227.443007] lock_acquire+0x19b/0x520 [ 227.443942] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 227.445132] ? __pfx_lock_acquire+0x10/0x10 [ 227.446052] ? srso_return_thunk+0x5/0x5f [ 227.446984] ? lock_release+0x20f/0x6f0 [ 227.447852] ? srso_return_thunk+0x5/0x5f [ 227.448850] ? lock_is_held_type+0x9e/0x120 [ 227.449791] ? srso_return_thunk+0x5/0x5f [ 227.450692] __mutex_lock+0x13d/0xb50 [ 227.451529] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 227.452724] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 227.453901] ? srso_return_thunk+0x5/0x5f [ 227.454778] ? synchronize_rcu_expedited+0x38a/0x420 [ 227.455826] ? __pfx___mutex_lock+0x10/0x10 [ 227.456733] ? __pfx_autoremove_wake_function+0x10/0x10 [ 227.457823] ? srso_return_thunk+0x5/0x5f [ 227.458695] ? kasan_quarantine_put+0x84/0x1e0 [ 227.459679] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 227.460592] ? srso_return_thunk+0x5/0x5f [ 227.461497] unregister_netdevice_many_notify+0x1612/0x1c80 [ 227.462623] ? __virt_addr_valid+0x2e8/0x5d0 [ 227.463564] ? __pfx_lock_release+0x10/0x10 [ 227.464448] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 227.465635] ? find_held_lock+0x2c/0x110 [ 227.466494] ? srso_return_thunk+0x5/0x5f [ 227.467383] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 227.468407] ? srso_return_thunk+0x5/0x5f [ 227.469290] ? lock_release+0x20f/0x6f0 [ 227.470125] ? __pfx_lock_release+0x10/0x10 [ 227.471000] ? srso_return_thunk+0x5/0x5f [ 227.471869] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 227.472910] ? srso_return_thunk+0x5/0x5f [ 227.473777] unregister_netdevice_queue+0x224/0x2e0 [ 227.474780] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 227.475869] ? up_write+0x195/0x520 [ 227.476641] _cfg80211_unregister_wdev+0x57b/0x700 [ 227.477636] ? srso_return_thunk+0x5/0x5f [ 227.478507] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 227.479528] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 227.480616] ? srso_return_thunk+0x5/0x5f [ 227.481487] ? srso_return_thunk+0x5/0x5f [ 227.482356] ? synchronize_rcu+0x1ff/0x260 [ 227.483209] ieee80211_unregister_hw+0x55/0x3a0 [ 227.484151] hwsim_exit_net+0x3a0/0x730 [ 227.484958] ? __pfx_hwsim_exit_net+0x10/0x10 [ 227.485855] ? srso_return_thunk+0x5/0x5f [ 227.486713] ? netdev_run_todo+0x788/0x1040 [ 227.487596] ? srso_return_thunk+0x5/0x5f [ 227.488470] ? __pfx_hwsim_exit_net+0x10/0x10 [ 227.489377] ops_exit_list+0xb3/0x180 [ 227.490163] cleanup_net+0x546/0xad0 [ 227.490939] ? __pfx_cleanup_net+0x10/0x10 [ 227.491811] process_one_work+0x8ee/0x1a10 [ 227.492718] ? __pfx_lock_acquire+0x10/0x10 [ 227.493611] ? __pfx_process_one_work+0x10/0x10 [ 227.494572] ? srso_return_thunk+0x5/0x5f [ 227.495451] ? move_linked_works+0x172/0x270 [ 227.496342] ? srso_return_thunk+0x5/0x5f [ 227.497218] ? assign_work+0x196/0x240 [ 227.498049] worker_thread+0x674/0xe70 [ 227.498868] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 227.499919] ? srso_return_thunk+0x5/0x5f [ 227.500784] ? __pfx_worker_thread+0x10/0x10 [ 227.501697] kthread+0x3ab/0x720 [ 227.502417] ? __pfx_kthread+0x10/0x10 [ 227.503223] ? srso_return_thunk+0x5/0x5f [ 227.504067] ? finish_task_switch.isra.0+0x206/0x840 [ 227.505065] ? __pfx_kthread+0x10/0x10 [ 227.505869] ret_from_fork+0x48/0x80 [ 227.506600] ? __pfx_kthread+0x10/0x10 [ 227.507410] ret_from_fork_asm+0x1a/0x30 [ 227.508267] [ 229.000868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.005022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.008281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.015389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.019940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.023395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.258219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.262140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.263051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.266185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.268106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.271229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.275153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.277951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.279923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.285098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.303808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.305622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.401785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.407164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.409947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.414460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.419899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.420503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.431602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.436180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.438972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.446025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.447528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.450211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.462486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.463002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.475163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.493779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.494079] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.499912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.501856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.505536] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.509183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.519107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.530052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.539500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.544590] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.546572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.563033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.576908] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.587424] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.590140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.101709] Bluetooth: hci0: command tx timeout [ 231.357815] Bluetooth: hci2: command tx timeout [ 231.358890] Bluetooth: hci1: command tx timeout [ 231.485802] Bluetooth: hci4: command tx timeout [ 231.549746] Bluetooth: hci3: command tx timeout [ 231.613778] Bluetooth: hci5: command tx timeout [ 231.613945] Bluetooth: hci6: command tx timeout [ 231.677718] Bluetooth: hci7: command tx timeout [ 233.150802] Bluetooth: hci0: command tx timeout [ 233.405937] Bluetooth: hci1: command tx timeout [ 233.406174] Bluetooth: hci2: command tx timeout [ 233.533907] Bluetooth: hci4: command tx timeout [ 233.598332] Bluetooth: hci3: command tx timeout [ 233.661769] Bluetooth: hci5: command tx timeout [ 233.661871] Bluetooth: hci6: command tx timeout [ 233.725834] Bluetooth: hci7: command tx timeout [ 235.197812] Bluetooth: hci0: command tx timeout [ 235.454764] Bluetooth: hci1: command tx timeout [ 235.454910] Bluetooth: hci2: command tx timeout [ 235.582688] Bluetooth: hci4: command tx timeout [ 235.645746] Bluetooth: hci3: command tx timeout [ 235.710148] Bluetooth: hci5: command tx timeout [ 235.710406] Bluetooth: hci6: command tx timeout [ 235.773903] Bluetooth: hci7: command tx timeout [ 237.245700] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 01:39:32 Registers: info registers vcpu 0 RAX=0000000000000023 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ecf6bb8 R8 =0000000000000001 R9 =ffffed1001d9ed67 R10=0000000000000023 R11=0000000033312e36 R12=0000000000000023 R13=0000000000000001 R14=ffff888008fea029 R15=ffff88800ecf6eb8 RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f751d327030 CR3=0000000012f78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c00062dee0000000c00062dea0 XMM02=000000c00062dea0000000c00062de60 XMM03=000000c00062df80000000c00062dee0 XMM04=000000c00075c9c0000000c00071be80 XMM05=000000c00075ce00000000c00075c980 XMM06=000000c00075d4c0000000c00075d100 XMM07=000000c0007410b0000000c000741050 XMM08=000000c000097ef0000000c000097ec0 XMM09=000000c000097f50000000c000097f20 XMM10=000000c000097fb0000000c000097f80 XMM11=000000c0000d2030000000c0000d2000 XMM12=000000c0000d0b00000000c000096390 XMM13=000000c00012a510000000c00012a4e0 XMM14=000000c00012a570000000c00012a540 XMM15=000000c0000cb080000000c00012a5a0 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8d9d7 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffff8880096a7e68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864053d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8e97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f245e832200 CR3=0000000012f78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041690e0200000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000