Warning: Permanently added '[localhost]:35432' (ECDSA) to the list of known hosts. 2025/01/21 02:44:20 fuzzer started 2025/01/21 02:44:20 dialing manager at localhost:44833 syzkaller login: [ 69.794375] cgroup: Unknown subsys name 'net' [ 69.938149] cgroup: Unknown subsys name 'cpuset' [ 69.967128] cgroup: Unknown subsys name 'rlimit' [ 75.315337] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.481594] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 02:44:37 syscalls: 2217 2025/01/21 02:44:37 code coverage: enabled 2025/01/21 02:44:37 comparison tracing: enabled 2025/01/21 02:44:37 extra coverage: enabled 2025/01/21 02:44:37 setuid sandbox: enabled 2025/01/21 02:44:37 namespace sandbox: enabled 2025/01/21 02:44:37 Android sandbox: enabled 2025/01/21 02:44:37 fault injection: enabled 2025/01/21 02:44:37 leak checking: enabled 2025/01/21 02:44:37 net packet injection: enabled 2025/01/21 02:44:37 net device setup: enabled 2025/01/21 02:44:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 02:44:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 02:44:37 USB emulation: enabled 2025/01/21 02:44:37 hci packet injection: enabled 2025/01/21 02:44:37 wifi device emulation: enabled 2025/01/21 02:44:37 802.15.4 emulation: enabled 2025/01/21 02:44:37 fetching corpus: 50, signal 13397/14461 (executing program) 2025/01/21 02:44:37 fetching corpus: 100, signal 15117/17056 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/18432 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/19346 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/20252 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/21161 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/22062 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/22948 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/23913 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/24826 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/25729 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/26620 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/27580 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/28496 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/28920 (executing program) 2025/01/21 02:44:37 fetching corpus: 123, signal 15646/28920 (executing program) 2025/01/21 02:44:40 starting 8 fuzzer processes 02:44:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x220, r0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1df, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x35}, @perr={0x84, 0x12e, {0x7f, 0x12, [@ext={{}, @device_b, 0x5, @device_a, 0x17}, @not_ext={{}, @device_b, 0x5, "", 0x15}, @ext={{}, @device_b, 0x1, @device_b, 0x12}, @ext={{}, @broadcast, 0x1, @device_b, 0x3e}, @not_ext={{}, @device_a, 0x10001, "", 0x35}, @ext={{}, @broadcast, 0x69d, @device_a, 0x14}, @not_ext={{}, @device_b, 0x6b50, "", 0x1}, @not_ext={{}, @broadcast}, @ext={{}, @broadcast, 0xfffffffe, @broadcast, 0x11}, @not_ext={{}, @broadcast, 0x5, "", 0x29}, @ext={{}, @device_a, 0x2, @broadcast, 0x3a}, @ext={{}, @device_a, 0x7fff, @device_b, 0x10}, @ext={{}, @broadcast, 0xa0000000, @broadcast, 0x3}, @ext={{}, @device_b, 0x1, @device_a, 0x10}, @not_ext={{}, @device_b, 0x80000000, "", 0x21}, @ext={{}, @device_b, 0x13, @device_b, 0x3b}, @not_ext={{}, @device_a, 0x3, "", 0x2f}, @ext={{}, @device_b, 0x3f, @device_a, 0x4}]}}, @fast_bss_trans={0x37, 0x79, {0x3b, 0x1, "61cfe1f658cf367bbc65d53846568e18", "791f0c9559d44639199736d87df001c83e1404b1657d274de43d0a2c77c8ef62", "7e9488c43b89a2650a9b8c43d8576974447fdfc9d8ab1a3093427098d4b4148e", [{0x2, 0x25, "d76e05bb870646e9ef07d053aa3278d7f5e85c5ce78c17bc9d776dfc134f039d525829e21f"}]}}, @ibss={0x6, 0x2, 0x7ff}, @prep={0x83, 0x1f, @not_ext={{}, 0x7, 0x43, @device_b, 0x0, "", 0x3, 0x0, @broadcast, 0x1f}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r2 = syz_open_pts(0xffffffffffffffff, 0x12301) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000380)) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x7d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40091}, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0xc0001, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0xdcce0331b57e9ad0, &(0x7f0000000540)={@loopback, @remote, @empty}, &(0x7f0000000580)=0xc) write$binfmt_aout(r3, &(0x7f00000005c0)={{0x0, 0x79, 0x9, 0x3b1, 0x4d, 0x6, 0x347, 0x6}, "4c9f8655b8d2eba972fe4b1e3558e7b266d504efa57d8eae49c48bd02968026e48fbba576ec0530de2f184fe8a0d37912a767d2f8c507961e937fca4de5da73e049610a977b07cc4436528c6a0a14b25ff6d857712b31e8142448fb299fe2544654c41fc8df648d1d9383c5b4fec", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x58e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000b80)={0x3, 'gre0\x00', {0x1}, 0x1ff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000bc0)={0x7, 'vcan0\x00', {}, 0xfc01}) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000c00)={0x33, 0x81, 0x8000}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000d40)=@get={0x1, &(0x7f0000000c40)=""/198}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000dc0)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x2001, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000e40)=0x8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x218}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20008811) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000fc0), 0x240800, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x60, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40850}, 0x90) 02:44:40 executing program 1: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/nvmem', 0x1180, 0x4) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) r1 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x141080, 0x0) recvmmsg$unix(r0, &(0x7f0000000880)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000480)=""/206, 0xce}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/69, 0x45}], 0x1, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x2, 0x40000000, &(0x7f0000000900)={0x0, 0x3938700}) accept4$inet6(r3, &(0x7f0000000940)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000980)=0x1c, 0x0) r8 = accept4$unix(r6, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e, 0x800) fdatasync(r8) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe69d) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x10, 0x9c7, 0x8, @private2, @mcast2, 0x7, 0x10, 0x5}}) connect(r4, &(0x7f0000000b80)=@can={0x1d, r9}, 0x80) ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381) ppoll(&(0x7f0000000c40)=[{0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x102}, {0xffffffffffffffff, 0x160c5}, {0xffffffffffffffff, 0x1200}], 0x4, &(0x7f0000000cc0), &(0x7f0000000d00)={[0x1]}, 0x8) 02:44:40 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0xbb, 0x0, 0x9, 0x9, @rand_addr=' \x01\x00', @local, 0xf96cc3e6f166d750, 0x78c1, 0xffff8001, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x10, 0x20, 0x0, 0xd6, {{0x20, 0x4, 0x2, 0x2, 0x80, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @private=0xa010100, {[@timestamp_addr={0x44, 0x4c, 0x16, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0x2}, {@private=0x7, 0xd1e5}, {@loopback}, {@multicast1, 0x3}, {@multicast1, 0x20}, {@multicast1, 0x3}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xb9, 0x1, 0x3, [{@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x8}, {@local, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x88e6e32d7ddf4046}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x70bd25, 0xd61, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x14}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x20, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x18}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ddd487ef1af3"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000d000}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x1c}}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x132a}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r2, 0x2f, 0xf8, 0x20, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast1, 0x20, 0x10, 0x7, 0x7ff}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote, 0x100, 0x0, 0x2, 0x500, 0x3d, 0x310010c, r6}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', r2, 0x2f, 0xf7, 0x20, 0x10000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x3, 0x7}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x4}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000b00)={0x1b, 0x2, {0x7, @usage=0xffff, 0x0, 0x2, 0x3ff, 0x5, 0x7fff, 0x5, 0x4, @usage=0x4, 0x4, 0xb1, [0xf567, 0x1ff, 0x7ff, 0x52612f1e, 0x5c2b, 0x400]}, {0xfffffffffffffffd, @usage, 0x0, 0x9, 0x7, 0x5, 0x8000, 0xfffffffffffffff8, 0x4, @struct={0x6b1934f8, 0x9}, 0x0, 0x7, [0x0, 0x4, 0x5, 0x8, 0xfff, 0x588]}, {0x8, @struct={0x8, 0xfffffffc}, 0x0, 0x0, 0x4, 0x20, 0x8, 0x2, 0x10, @usage=0xfffffffffffffffe, 0x200, 0x8, [0x1000, 0xfffffffffffffffa, 0x8a, 0x8742, 0x3, 0x4]}, {0x29bc0000, 0x7ff, 0x5}}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000000f00)={r9, "27d8911ac89f62e86517b12c70533e25"}) r10 = dup(r4) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000002140)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={0x118, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x2b}}}}, [@NL80211_ATTR_FRAME_MATCH={0xc1, 0x5b, "0c1275076fa3fcd703904f1d72581576cb6ad69ca58f3c61d1acd3db91ff1e5e95fb2952e8ffa013e84dc3665d8a627dc729410c9f466a95e2980903f2a3983bed21853cf46e4916505020f733136e7279a33c7a9f8c7c02050aae2ce75ab66ba86e892114798959133ef05d7959506437c0bf6a09d5fa1b839ba2a65653a506f8069882f6668ace3a47c9fc0227d9580affa5bb9a95bf0848a33d45e5d5c100aaded48aeaa762df9f5a2b37a809d0bc7ca2f339b161dc013cc2319c2e"}, @NL80211_ATTR_FRAME_MATCH={0xa, 0x5b, "e6941c432c61"}, @NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "a3492491cdb86c6c5ec8f105bc30b59d5a3821cfb620cb2e93915c68"}]}, 0x118}, 0x1, 0x0, 0x0, 0x8002}, 0x4080) 02:44:40 executing program 2: sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x44c, 0x3f3, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x26, [0x3be1, 0xcada, 0x7, 0xe3a5, 0x80000000, 0x7fff, 0x0, 0x80000000, 0xad, 0x40, 0xdc5, 0x4, 0x1, 0x6, 0x7fff, 0x8, 0x56000000, 0x1, 0x1, 0x8, 0x703, 0x0, 0xf4, 0x101, 0x4, 0x3, 0x4c, 0xffffa391, 0x10001, 0x101, 0xffff, 0x3, 0x5, 0x9, 0x100, 0xfff, 0x4, 0x80000001, 0x3, 0x8, 0x8, 0x4, 0x6, 0x8001, 0x4, 0x7, 0x5, 0x0, 0x4c, 0x2, 0x0, 0x924, 0x2, 0x400, 0x8, 0x7, 0x2, 0x4, 0x6, 0x43, 0x6, 0x9, 0x9, 0xb9], [0x7f, 0x4, 0x828, 0x6389, 0xffff, 0x7ff, 0x61fc, 0x3, 0x2100, 0x0, 0x3, 0x3, 0xfffffffc, 0x3, 0x6, 0x7, 0x3, 0x6, 0xfffffffb, 0x881, 0x400, 0x7, 0x8001, 0x7fffffff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x7ff, 0x1000, 0x8, 0x9, 0x8, 0x7fffffff, 0x101, 0x4, 0x10001, 0xffffff7f, 0x8, 0x1, 0x1a4c, 0x100, 0x8, 0x8, 0x20, 0x9, 0x3f, 0xffffffff, 0x7fffffff, 0x8, 0x5, 0x3, 0x1, 0x7fff, 0xffffffff, 0x7, 0xbfb2, 0x45, 0xe5, 0x4, 0x7, 0xd625, 0x1f], [0x6, 0x98, 0x3, 0x8, 0x7, 0x2, 0x0, 0x81, 0x328, 0x3, 0x143, 0x9, 0x3, 0x8000, 0x3, 0x2000000, 0x4, 0x5, 0xfffffffc, 0xa191, 0x8, 0x2, 0x8, 0xe6, 0x6, 0xffffff5b, 0x1, 0x7fffffff, 0x7, 0x8, 0xffffff7f, 0xfc04, 0xffffe431, 0x101, 0x2, 0xaa9, 0x2, 0x1f, 0xb46, 0x9, 0x4, 0x101, 0x8, 0x3, 0xffff, 0x8, 0x50000, 0x25fa9a6d, 0x37da, 0x1, 0x8, 0x7fff, 0x37, 0x1, 0x8, 0x8f8, 0x8, 0x5ad03ec, 0x6, 0x3, 0x5, 0x5, 0x40, 0x81], [0x3, 0x6, 0x80000000, 0x20, 0x7, 0x1000, 0x4, 0x4, 0x136, 0x9e, 0x5, 0x1, 0x4, 0x9, 0x1, 0x80000000, 0xfffffffe, 0x7, 0x7f, 0x10001, 0x74f6efae, 0x4, 0x4, 0x400, 0x10000, 0xff, 0x2c, 0x5, 0x7ff, 0x400, 0x1, 0x0, 0x40000, 0x8, 0x2, 0x1, 0x40, 0xc, 0xff, 0x10000, 0x20, 0x4, 0x101, 0x6, 0x2, 0xffff, 0x124, 0x7, 0x7, 0x4, 0x40, 0x4, 0x8, 0x1, 0xffff, 0x20, 0x8000, 0x6, 0x5, 0x4, 0x8, 0x29f7, 0x1, 0x9], 0x29, ['/+[]\x00', '&\x00', '\\@@&\x88+:){{*}-{&\x12\'-^(\\%@\x00', '\\[%$.,^*\xf5\x00']}, ["", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x24004080) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0xf, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x88040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0x100, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120f83aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe9874e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723d1a56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bab1eb8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x497fe08}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf521b36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d1a1b44}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d4bc736}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5590eb3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b7d7a75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x659e1ba9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x402414f0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x357f9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xab23fa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1af3b58e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53d3194c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0xef2d2396e5d9588c, 0x1, 0xb4, 0x6, 0x48, @empty, @private2, 0x20, 0x20, 0xfff, 0x101}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x6, 0x0, 0x66, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x1, 0x3f, 0x7e93}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b80)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000c80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', 0x0, 0x4, 0x95, 0x2, 0x4, 0x2a, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8000, 0x8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'sit0\x00', 0x0, 0x4, 0x1, 0x1f, 0x10001, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, @loopback, 0x8000, 0x80, 0x7681, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000033c0)={'ip6_vti0\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x39, 0xbc, 0x3f, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0x3, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000003480)={'sit0\x00', &(0x7f0000003400)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc3, 0x3, 0xd, @loopback, @mcast1, 0x0, 0x7800, 0xfc0, 0x1e720000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003d00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003cc0)={&(0x7f00000034c0)={0x7e8, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x200, 0x8, 0x7f, 0x3}, {0x6, 0x20, 0x96, 0x1}, {0x0, 0x1b, 0x3}, {0x7f, 0x7f, 0x0, 0x5ed4}, {0x4, 0x9, 0xfe, 0x5eb4}, {0x3, 0x3f, 0x1, 0x4}, {0x87, 0x0, 0x7f, 0x830}, {0x0, 0x0, 0x5, 0x7}, {0x9d0, 0x40, 0x5, 0xa1d}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3359}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x87d052f18680e4af}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000003f80)=0xe8) accept(r0, &(0x7f0000003fc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000004040)=0x80) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000004180)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004140)={&(0x7f0000004080)={0xbc, 0x0, 0x400, 0x70bd28, 0x5, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xbc}}, 0x4008011) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000042c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000041c0)="526bdf20540462c95d3687b49087359169de2475366b449de5d7d27e06998f26e82fc2036bb050c72fb01fa86a89c0cbe56e78bd1935fa02efb5b261d97513f09d5586a69c9e67e7df25217a4adab1197943abea3f98bba5c8972efb4e30ea3a9c440ce4813c1a69dd44bc89175a15c9803f0b28cfe9d10dbe970dde493515646ad4a28c71d672f7bb968cc868d8119052be0bfef814498f7ddec3a0e3f6ea6320640d728dff39a85a8c21f70bf1e727e9ef86f2ba56006050cae735b6eb5f195f19549616dd", 0xc6, r0}, 0x68) 02:44:40 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x20, 0x80000001, 0x0, 0x7, 0x15, "20e04762abe3e79a8235e69d0759c43a9e7b41"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x100) preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/162, 0xa2}], 0x2, 0x8e, 0x1000) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001180)={0x0, {{0xa, 0x4e22, 0x3f, @empty}}}, 0x88) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x82440, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x96699af7b23c8bc4, &(0x7f0000001280)={@mcast2}, &(0x7f00000012c0)=0x14) r4 = syz_open_dev$vcsu(&(0x7f0000001300), 0xffffffffffffffff, 0x200) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001380)={{0x1, 0x1, 0x18, r5, {r1}}, './file0\x00'}) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000013c0)={0x401, 0x6}) syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000001440), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000001480)={0x0, 0x81, 0x6, 0x1}) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000001880)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000018c0)={{{@in=@empty, @in6=@empty, 0x4e20, 0x0, 0x4e21, 0x401, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x40, 0x0, 0xfffffffffffff801, 0x401, 0x0, 0x6b, 0x968a, 0x101}, {0x3, 0xffffffff, 0x80000001, 0x9}, 0x10000, 0x6e6bb4, 0x2, 0x1, 0x1, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3506, 0x3, 0x0, 0x7, 0x0, 0x100, 0x3}}, 0xe8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7fffffff}) [ 89.703101] audit: type=1400 audit(1737427480.893:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:44:40 executing program 5: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003540)=""/18, 0x12}, {&(0x7f0000003580)=""/249, 0xf9}, {&(0x7f0000003680)=""/126, 0x7e}, {&(0x7f0000003700)=""/33, 0x21}, {&(0x7f0000003740)=""/43, 0x2b}], 0x5, &(0x7f0000003800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xb8}, 0x21) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004040)={&(0x7f0000003900)={0x708, 0x7, 0x2, 0x201, 0x70bd2a, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@typed={0x8, 0x68, 0x0, 0x0, @fd}, @nested={0x1ba, 0x1c, 0x0, 0x1, [@generic="c9c280aafbbcfaea8591d8721d665b4613a537d3274104932e7816451cab2e77065c193c7954d6cce18d13bc7e19d65c4561affa827a83d5e271d0c25be7f93aaa444b856007f877a76b0c92d6636849ed9aa41dedc013eca08a9f6a8a81be9e3927d46bf75ee989dc141a8443fed5704c8279b35c0bf2c4e897f86e0e86460fbe57fa56036eb490eefb2fa96031afe8bfe43425b30781f99a09b7e98f182ec84f371e157e46204a", @typed={0x8, 0x76, 0x0, 0x0, @fd}, @typed={0x6, 0x1, 0x0, 0x0, @str='{\x00'}, @generic="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"]}, @nested={0x2ac, 0x95, 0x0, 0x1, [@generic="1a7c38fa74a94e1de0d752113f713fac89b8002fcf28ab68251f626a6fbab043b086741f45411f6839bdc162541f7309eb425fec7307e7c714ae8f793881ac", @typed={0x8, 0xc, 0x0, 0x0, @pid=r2}, @typed={0xe, 0x3b, 0x0, 0x0, @str='\x00,z!%)-*#\x00'}, @typed={0x77, 0x12, 0x0, 0x0, @binary="42cc08783e18e3d4bfe249935fbe62971e119592fd2ea695de52497da48fb36564dd6959520d16eab281a840abaad0513a4925982b23910e0214fc0619c06bd9b641a19047fdf1fb9f4335e1b08f04a261dacbaea623db653c7061c42b91ffaa47245f06578d1df2d5823a32bbec17369138ba"}, @generic="6fb2b4fa1507b80864640a9700abbaf2981381e236f0d76d65a39ff3eeb5369c318544896a18d8c62aa350b41c8c5b1fc5c304558962919012519beddc10feb37a97d4c6a5a6bf9ee89c10cae4bc8fae1abdea77bddf119037e0371f6ffb6dabe507483cecdb11b60b97967cc013232aa307668f7b939cbf3d77ba0da341b219dda29c5556aa75138cd6ac87941b0dd92a39886d61f11caf434b6c6e2d392ab74976b4a297d12d9b04b5906f82cde7a59c01cb213e", @generic="916828f8ed8ee4daaf1fbf4135fcc3bd6cc4e0016a8347fc2c9e5a50ec789777", @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x6}, @generic="a54412bf30721e2c32b2c9332e185bda46b90881f12639c29070089334334268d1d95502823c9279a05ee184e8e01356eff35e94d964fc74031a251716579ce4a00aae3ffb85016a314d9cd41cf2dd1d164381e1360620b4353f27571bf9f6152591e8ae7641a85c4bb1e8073ba1f9ebbeb2509e73986390ee8769f70b308b3b224281c2e3b940953702a18e89cc399c8d0c97f0e8be378dd54a687814b54b5db8a15981590955a6e91a306075ffdb22b68ad54d5ef57db2720d5b6a7163a84ccdd8afdd2ad29bba4ee89e1adbe0d13354fe500dc3ceba67bac2bb74a204b3977fa20845e9cb8660"]}, @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@private0}, @nested={0x270, 0x39, 0x0, 0x1, [@generic="256e9b27ec526bda426f667cd8625e52aa69dc5bb60e9ab2911378d11298db31243e08140f37b3124134da7a29902b0bbb7992", @typed={0x8, 0x7, 0x0, 0x0, @u32=0x5}, @generic="e89d37fb6a070ce0d958bfd285f635dc4c0ed8bc9aa432ee1ca4b108bda46a90ac317fc9b05588fb29572f87f0379428deb03b56182ab9ac27bce75be80586186c1bd12549533d7c65dd385008a36cb78e64f72cbee77942f872db0bd35f43f817e9663721fa677fe5fb49cd9c921e8a4ad08e687ea4f2e73276cc7770e0156ca565387a8c5f58277e21834c31a1ec621a78307a479967fc361fc170a9db91b34abca210feafec896a4de26f9e59d6713b9a4a9ebdc2d8b15920722af90811fbebc4cc2d552836e42ec20a484b46ac94a1d7052cd340b864c8d6f26609fa105e872a288a1ccf0d6dbec72417445819f11eac3ce78a534d741b8a", @typed={0x4, 0x35}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@multicast2}, @generic="06e75b160e9e49c52ed8653184758b5ec027a62326d1ddab353e680e804623e68511f82452b4557b304111480b5df10928010b19d74d1fc21e6f2f5983f37bd2e9d973d8429a3754150372390d976df381d584a17334182029350979d0bafc1e3b05b6eddabf15d176af22726e990ef833c3cfac3a9c3a1c1be925611baf90e42289ab9aa84e7ae3bfad1d4894d862c92a359a08f1a6bd405f25ec658c046d44ebb7cceeed0d57fa27343b59a6ee4adad732e397a613b5cc6f0316b662170898580a7a4e0892c8e848e3bc176055946e4ee3dce4e8e68c0a380c21", @typed={0x4e, 0x5f, 0x0, 0x0, @binary="2fcd2aa0ffa0e777bac916e13d758d07593b58d360602941c01d4e4f96887b4cc227fb88cfa590f92ee9a199ec29876f5b5e090a896f8d8a9a957339e757014c073b6049248812a67709"}]}]}, 0x708}, 0x1, 0x0, 0x0, 0x24000840}, 0x894) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1626dcd5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x40000}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xc3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000041c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004240), r1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000043c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x1200080}, 0xc, &(0x7f0000004380)={&(0x7f0000004280)={0xf0, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x69}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004440), r3) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x14, r5, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000004640)={&(0x7f0000004540), 0xc, &(0x7f0000004600)={&(0x7f0000004580)={0x70, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="065445f74e55"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c4f20446110a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000c0}, 0x400) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000046c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000047c0)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x74, r5, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8808}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf8}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8809}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8b15}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004840)={0x64, 0x0, 0x900, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c800}, 0xc010) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000004a40)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004a00)={&(0x7f0000004980)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd9}, {0x6, 0x16, 0xff7f}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vcsu(&(0x7f0000004a80), 0x8, 0x422800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b00), r1) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x3c, r9, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x800}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x90}, @NL80211_ATTR_SSID={0x9, 0x34, @random="bcf0e5dc1b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0ae8a82e485c"}]}, 0x3c}}, 0x44000) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000004c00)={0x0, 0x4, @status={[0x1, 0x7, 0x1ff, 0x7fffffff, 0x7, 0x5]}, [0x44c6, 0x0, 0xffff, 0x2, 0x6, 0x3, 0x4, 0x2, 0x14e, 0x0, 0x26f8, 0x6, 0x7ff, 0x401, 0x80, 0x3, 0x7, 0x909, 0x1, 0x2, 0x8, 0x9, 0x9, 0x3, 0xffffffff, 0x80000000, 0x1ff, 0xffffffff, 0x4, 0x3, 0x7fff, 0x2, 0x80, 0x3, 0x77, 0x0, 0x5, 0x7d, 0xf59a, 0x7fff, 0xdf00, 0x2, 0x9, 0x2, 0x3ff, 0x4, 0x56d, 0x6, 0x3, 0x7, 0x3, 0x3f, 0x8, 0x1, 0xffffffffffff0000, 0x0, 0x200, 0x0, 0xfffffffffffff801, 0x1ff, 0x82b, 0xffffffffffffffe1, 0x4, 0x7ff]}) 02:44:40 executing program 7: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x17, 0x0, "19c75006ae2391a0242ae10a944b203080ea6f4cfde1555b01fb45a54d2c954d5a59d46fabc7e8754f0550f91dca9851b237c61765939cc223361b3b3e0675335acf8778ead9b50a1e46c7b321e0ddca"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4100002}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffb}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x43a}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}}, 0x4c004) r2 = signalfd(r0, &(0x7f0000000500)={[0x7]}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x80000}}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000085}, 0x782021cfb3bef6c0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000680)={0x21, @remote, 0x4e22, 0x3, 'lblc\x00', 0x12, 0x9, 0x53}, 0x2c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8593}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fc6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) io_cancel(0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000880)="4e33172a5ef3c9fca5fc0d3e76a64c875c1458f270a4d66dc6da9a754c3d689bed8885cd69913b031535d29e74a8cc3851537a2c6205097462673f6a414108c3fe70979bf55a9442517804433cc3a71a17fbf76430888dab741f65103f77b1f054869831b4a260d6ab18ce98ccc1e44916e5f2acc2", 0x75, 0xff, 0x0, 0x1, r2}, &(0x7f0000000940)) fcntl$setlease(r0, 0x400, 0x1) fadvise64(r2, 0xffffffff, 0x9, 0x0) flock(0xffffffffffffffff, 0xb) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_io_uring_complete(0x0) sendmsg$nl_generic(r5, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x28c, 0x16, 0x200, 0x70bd26, 0x25dfdbfe, {0x12}, [@nested={0x155, 0x4a, 0x0, 0x1, [@generic="83ad7fd26fbf3f90c70156ee0180406cc605a0b99251638fcb28da47903ec1885034c6ac8d2353fedcd796e5476ea0808dce95ac2a7e3695822da841c0d644ebad78291b70220015d38da09794e7abc3b5f4d41d07b79fd7741cb22824d2d068028c277c82d9ddb27b1a53c6fd17023a27b6be2ac9e7fb076f7665e8cc4b45370193a17e00770826a43352f37846ef4a3d4a96d8f603adb80e46230b606b6a985b", @generic="64d1899b", @typed={0x7, 0x3f, 0x0, 0x0, @str='{-\x00'}, @generic="68e406e6051527f4190cc2d12c2990bd6c87edc0d938d1dbe432dd4be45f8f09249c4f58677ecd831fb6b0293aeb8d9721c0a755e8128e27bc9d8fa95bed645e9c89cf79e98166442906e2dc22f166366bcad95985d18583c0517052bf0e5ecc6b02ed5b200baefa59912f319412f0ef4ef2b892a440f7618826c3b5e1104e5516cec1e5bf0a1d47323b7f3be7b76722cb47c2d11b8b15f96ddcae2716e3d15047b13e79"]}, @nested={0x11f, 0x60, 0x0, 0x1, [@generic="53de88e35215", @generic="083e1fc539974d5920237c3d58e87aa92490f3604efd8b06ae8804b49bc3986332f0f7df9fc4e2c78d986483632614bcd7214fb4af4040c2c6dc8f388ec8685fb628e6d7211abec66de8baaf2235c9e4d57df6a65b9bf9b41b501db156496d00e66f8fb23d9da8cbce5471cd72fc3305f94346e52f41fbc4d013864839535d614a41e37a6f71b332c74b631eef63d9ab860d25a817ad23f42095156e695dc7448ef663006dd3885087762eddb20c097b3d7bb7ce0157ab24e769b47c54", @typed={0x4, 0x10, 0x0, 0x0, @binary}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r4}, @typed={0x45, 0x7, 0x0, 0x0, @binary="dbcba5c06f329c2996243e164c51f70bf3ea28becbc7f17f8e5e56ef3d810393773186bf29abc8a12ca8bfac94ce4478d756b9ff6a012a3b7f687ba1d97718fc28"}, @typed={0x4, 0x5b}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4008804}, 0x5) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x0]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) poll(&(0x7f0000000ec0)=[{r5, 0x4188}, {r5, 0x8000}, {r5, 0x110}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x8006}, {0xffffffffffffffff, 0x8024}], 0x6, 0x1f) 02:44:40 executing program 6: ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000000)={{}, 0x0, 0x8, @unused=[0x3, 0x3, 0x80000001, 0x81], @subvolid=0x5}) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs2/binder-control\x00', 0x802, 0x0) fcntl$setpipe(r0, 0x407, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001040), 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000010c0)={0x100, 0x8, '\x00', 0x1, &(0x7f0000001080)=[0x0]}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001100), 0x2100, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001140)={{r1}, 0x0, 0x2, @unused=[0x9, 0xffffffff, 0x2, 0x1], @subvolid=0xff}) r3 = fspick(0xffffffffffffffff, &(0x7f00000024c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000002500)={0x0, 0x6}) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xffffffffffffa092) fdatasync(r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000027c0), 0x111400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x61c6, &(0x7f0000002840)={0x0, 0x6def, 0x20, 0x0, 0x1fd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002940)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f00000025c0)="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", 0xff}, {&(0x7f00000026c0)="52a6f39bc7e328a5c4bb227460d64b4687505a916974c963695db15fb0cf35ad23dae45d5f086746717057048e636c2dbaae28bf56af4c42217068ea2268f7084e352c9037da341e2cec3eaa4119b2804f8258e0c876bff280f1a6e3def08ba9a9b14f805816955e32028093971da486b2b86a29428cb29336216176b2ff558ff117bfa51b24013d80eb1e62200f9c4d986da017b5d11aed6d10", 0x9a}], 0x2, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r4, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x34, 0x1, 0x1, [r2, r3, r3, r3, r0, r6, 0xffffffffffffffff, r1, r7]}}], 0x70, 0x8004800}, 0x1) write$tcp_congestion(r1, &(0x7f0000002a40)='htcp\x00', 0x5) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000002a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = perf_event_open(&(0x7f0000002dc0)={0x0, 0x80, 0x7f, 0xb7, 0x80, 0x0, 0x0, 0x47, 0x48100, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000002d80), 0x2}, 0x4220, 0xb7, 0x0, 0x6, 0x0, 0x242, 0x6f, 0x0, 0x200, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) [ 91.078212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.083061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.084230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.092354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.094650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.097187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.131029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.133076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.134486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.135329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.138399] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.140845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.141225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.143895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.145436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.162255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.166164] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.175069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.199146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.218151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.222160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.231502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.239149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.251612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.269119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.269679] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.272455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.277271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.280900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.281131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.289721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.302113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.303863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.309126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.315248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.315447] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.322211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.326363] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.326741] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.326969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.336364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.343549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.354879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.357106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.385436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.387103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.388343] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.388724] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.167007] Bluetooth: hci2: command tx timeout [ 93.167236] Bluetooth: hci0: command tx timeout [ 93.231852] Bluetooth: hci1: command tx timeout [ 93.294842] Bluetooth: hci3: command tx timeout [ 93.422988] Bluetooth: hci5: command tx timeout [ 93.423449] Bluetooth: hci6: command tx timeout [ 93.423568] Bluetooth: hci4: command tx timeout [ 93.486864] Bluetooth: hci7: command tx timeout [ 95.214899] Bluetooth: hci0: command tx timeout [ 95.214995] Bluetooth: hci2: command tx timeout [ 95.278858] Bluetooth: hci1: command tx timeout [ 95.342853] Bluetooth: hci3: command tx timeout [ 95.471006] Bluetooth: hci4: command tx timeout [ 95.471238] Bluetooth: hci6: command tx timeout [ 95.471291] Bluetooth: hci5: command tx timeout [ 95.536814] Bluetooth: hci7: command tx timeout [ 97.263038] Bluetooth: hci2: command tx timeout [ 97.263951] Bluetooth: hci0: command tx timeout [ 97.326924] Bluetooth: hci1: command tx timeout [ 97.390045] Bluetooth: hci3: command tx timeout [ 97.517966] Bluetooth: hci4: command tx timeout [ 97.518639] Bluetooth: hci5: command tx timeout [ 97.518730] Bluetooth: hci6: command tx timeout [ 97.583018] Bluetooth: hci7: command tx timeout [ 99.311614] Bluetooth: hci0: command tx timeout [ 99.311723] Bluetooth: hci2: command tx timeout [ 99.374869] Bluetooth: hci1: command tx timeout [ 99.438834] Bluetooth: hci3: command tx timeout [ 99.568814] Bluetooth: hci6: command tx timeout [ 99.568905] Bluetooth: hci5: command tx timeout [ 99.568992] Bluetooth: hci4: command tx timeout [ 99.630899] Bluetooth: hci7: command tx timeout [ 151.365026] [ 151.365269] ====================================================== [ 151.365863] WARNING: possible circular locking dependency detected [ 151.366448] 6.13.0-rc7-next-20250120 #1 Not tainted [ 151.366933] ------------------------------------------------------ [ 151.367930] kworker/u8:0/11 is trying to acquire lock: [ 151.369168] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.371148] [ 151.371148] but task is already holding lock: [ 151.372794] ffff888015550768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.374679] [ 151.374679] which lock already depends on the new lock. [ 151.374679] [ 151.376371] [ 151.376371] the existing dependency chain (in reverse order) is: [ 151.377043] [ 151.377043] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 151.377675] __mutex_lock+0x13d/0xb50 [ 151.378116] wiphy_register+0x1b2e/0x25d0 [ 151.378577] ieee80211_register_hw+0x23a4/0x3d60 [ 151.379087] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 151.379614] init_mac80211_hwsim+0x389/0x870 [ 151.380118] do_one_initcall+0xf9/0x640 [ 151.380568] kernel_init_freeable+0x53d/0x7a0 [ 151.381067] kernel_init+0x1e/0x2d0 [ 151.381464] ret_from_fork+0x48/0x80 [ 151.381867] ret_from_fork_asm+0x1a/0x30 [ 151.382321] [ 151.382321] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 151.382923] __lock_acquire+0x29fd/0x4580 [ 151.383403] lock_acquire+0x19b/0x520 [ 151.383861] __mutex_lock+0x13d/0xb50 [ 151.384317] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.384935] unregister_netdevice_queue+0x224/0x2e0 [ 151.385490] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.386052] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.386608] ieee80211_unregister_hw+0x55/0x3a0 [ 151.387140] hwsim_exit_net+0x3a0/0x730 [ 151.387606] ops_exit_list+0xb3/0x180 [ 151.388060] cleanup_net+0x546/0xad0 [ 151.388499] process_one_work+0x8ee/0x1a10 [ 151.389013] worker_thread+0x674/0xe70 [ 151.389488] kthread+0x3ab/0x720 [ 151.389912] ret_from_fork+0x48/0x80 [ 151.390343] ret_from_fork_asm+0x1a/0x30 [ 151.390836] [ 151.390836] other info that might help us debug this: [ 151.390836] [ 151.391580] Possible unsafe locking scenario: [ 151.391580] [ 151.392127] CPU0 CPU1 [ 151.392544] ---- ---- [ 151.392966] lock(&rdev->wiphy.mtx); [ 151.393345] lock(rtnl_mutex); [ 151.393884] lock(&rdev->wiphy.mtx); [ 151.394470] lock(rtnl_mutex); [ 151.394807] [ 151.394807] *** DEADLOCK *** [ 151.394807] [ 151.395358] 4 locks held by kworker/u8:0/11: [ 151.395776] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 151.396725] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 151.397635] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 151.398489] #3: ffff888015550768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.399447] [ 151.399447] stack backtrace: [ 151.399867] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1 [ 151.400613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 151.401332] Workqueue: netns cleanup_net [ 151.401723] Call Trace: [ 151.401963] [ 151.402175] dump_stack_lvl+0xca/0x120 [ 151.402565] print_circular_bug+0x47b/0x750 [ 151.402979] check_noncircular+0x2e9/0x3c0 [ 151.403379] ? lock_repin_lock+0x207/0x320 [ 151.403804] ? __pfx_check_noncircular+0x10/0x10 [ 151.404246] ? hlock_class+0x4e/0x130 [ 151.404600] ? mark_lock+0xac/0xed0 [ 151.404951] ? __pfx_lock_repin_lock+0x10/0x10 [ 151.405407] ? lockdep_lock+0xba/0x1b0 [ 151.405800] ? __pfx_lockdep_lock+0x10/0x10 [ 151.406235] __lock_acquire+0x29fd/0x4580 [ 151.406638] ? __pfx___lock_acquire+0x10/0x10 [ 151.407070] ? lock_release+0x20f/0x6f0 [ 151.407451] ? __pfx_lock_release+0x10/0x10 [ 151.407871] lock_acquire+0x19b/0x520 [ 151.408243] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.408785] ? __pfx_lock_acquire+0x10/0x10 [ 151.409198] ? srso_return_thunk+0x5/0x5f [ 151.409605] ? lock_release+0x20f/0x6f0 [ 151.409993] ? srso_return_thunk+0x5/0x5f [ 151.410402] ? lock_is_held_type+0x9e/0x120 [ 151.410824] ? srso_return_thunk+0x5/0x5f [ 151.411236] __mutex_lock+0x13d/0xb50 [ 151.411614] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.412165] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.412704] ? srso_return_thunk+0x5/0x5f [ 151.413117] ? synchronize_rcu_expedited+0x38a/0x420 [ 151.413593] ? __pfx___mutex_lock+0x10/0x10 [ 151.414023] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.414528] ? srso_return_thunk+0x5/0x5f [ 151.414937] ? kasan_quarantine_put+0x84/0x1e0 [ 151.415386] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 151.415821] ? srso_return_thunk+0x5/0x5f [ 151.416238] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.416763] ? __virt_addr_valid+0x2e8/0x5d0 [ 151.417191] ? __pfx_lock_release+0x10/0x10 [ 151.417600] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 151.418163] ? find_held_lock+0x2c/0x110 [ 151.418566] ? srso_return_thunk+0x5/0x5f [ 151.418977] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 151.419451] ? srso_return_thunk+0x5/0x5f [ 151.419867] ? lock_release+0x20f/0x6f0 [ 151.420249] ? __pfx_lock_release+0x10/0x10 [ 151.420656] ? srso_return_thunk+0x5/0x5f [ 151.421065] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.421555] ? srso_return_thunk+0x5/0x5f [ 151.421969] unregister_netdevice_queue+0x224/0x2e0 [ 151.422440] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 151.422947] ? up_write+0x195/0x520 [ 151.423318] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.423794] ? srso_return_thunk+0x5/0x5f [ 151.424206] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.424674] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 151.425183] ? srso_return_thunk+0x5/0x5f [ 151.425590] ? srso_return_thunk+0x5/0x5f [ 151.426004] ? synchronize_rcu+0x1ff/0x260 [ 151.426404] ieee80211_unregister_hw+0x55/0x3a0 [ 151.426848] hwsim_exit_net+0x3a0/0x730 [ 151.427229] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.427656] ? srso_return_thunk+0x5/0x5f [ 151.428074] ? netdev_run_todo+0x788/0x1040 [ 151.428490] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.428917] ops_exit_list+0xb3/0x180 [ 151.429284] cleanup_net+0x546/0xad0 [ 151.429649] ? __pfx_cleanup_net+0x10/0x10 [ 151.430062] process_one_work+0x8ee/0x1a10 [ 151.430485] ? __pfx_lock_acquire+0x10/0x10 [ 151.430896] ? __pfx_process_one_work+0x10/0x10 [ 151.431349] ? srso_return_thunk+0x5/0x5f [ 151.431764] ? move_linked_works+0x172/0x270 [ 151.432191] ? srso_return_thunk+0x5/0x5f [ 151.432597] ? assign_work+0x196/0x240 [ 151.432986] worker_thread+0x674/0xe70 [ 151.433379] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.433883] ? __pfx_worker_thread+0x10/0x10 [ 151.434318] kthread+0x3ab/0x720 [ 151.434661] ? __pfx_kthread+0x10/0x10 [ 151.435049] ? srso_return_thunk+0x5/0x5f [ 151.435457] ? finish_task_switch.isra.0+0x206/0x840 [ 151.435951] ? __pfx_kthread+0x10/0x10 [ 151.436340] ret_from_fork+0x48/0x80 [ 151.436689] ? __pfx_kthread+0x10/0x10 [ 151.437078] ret_from_fork_asm+0x1a/0x30 [ 151.437489] [ 153.533627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.536275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.540452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.560530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.560880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.561506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.562132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.564058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.565247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.565832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.573669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.578260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.660462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.664999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.677182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.682128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.684683] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.685590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.686081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.697057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.700033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.705079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.709490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.718574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.733500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.735963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.736688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.740049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.740684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.747606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.752219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.754461] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.757296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.760189] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.763069] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.764707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.767025] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.768604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.769191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.775588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.787918] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.790030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.791102] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.791630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.832536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.872366] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.877030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.877599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.629838] Bluetooth: hci0: command tx timeout [ 155.629923] Bluetooth: hci1: command tx timeout [ 155.761848] Bluetooth: hci2: command tx timeout [ 155.886001] Bluetooth: hci4: command tx timeout [ 155.886695] Bluetooth: hci6: command tx timeout [ 155.887290] Bluetooth: hci5: command tx timeout [ 155.887329] Bluetooth: hci7: command tx timeout [ 155.887366] Bluetooth: hci3: command tx timeout [ 157.677877] Bluetooth: hci0: command tx timeout [ 157.678059] Bluetooth: hci1: command tx timeout [ 157.807404] Bluetooth: hci2: command tx timeout [ 157.934801] Bluetooth: hci3: command tx timeout [ 157.934878] Bluetooth: hci7: command tx timeout [ 157.934916] Bluetooth: hci5: command tx timeout [ 157.934954] Bluetooth: hci6: command tx timeout [ 157.934990] Bluetooth: hci4: command tx timeout [ 159.726131] Bluetooth: hci1: command tx timeout [ 159.726918] Bluetooth: hci0: command tx timeout [ 159.855825] Bluetooth: hci2: command tx timeout [ 159.981918] Bluetooth: hci4: command tx timeout [ 159.982022] Bluetooth: hci6: command tx timeout [ 159.982080] Bluetooth: hci5: command tx timeout [ 159.982136] Bluetooth: hci7: command tx timeout [ 159.982192] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 02:45:42 Registers: info registers vcpu 0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000006c R11=3a6b636f6c206762 R12=000000000000006c R13=0000000000000001 R14=ffff888008fea02d R15=ffff8880095deeb8 RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f842ee06c40 CR3=000000000eb20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=616e696d726574203f3d72646461203f XMM03=79732f646d65747379732f62696c2f72 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=3030323a366963682d73656369760101 XMM06=0000562e8710006563697665642e3569 XMM07=00000000000000000000000000000000 XMM08=63612073253d706f0000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff7fffffffffff RBX=ffff88800ebf6400 RCX=ffffffff81429a4a RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88800ebf6400 RBP=0000000000200000 RSP=ffff88800f267d98 R8 =0000000000000000 R9 =ffffed1001d7ec80 R10=ffff88800ebf6407 R11=ffff88800ec6a078 R12=ffff88807bba9ff9 R13=ffffffff886542b8 R14=ffff88800ec69bc0 R15=0000000000000086 RIP=ffffffff81abc489 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560e2b0144e8 CR3=0000000016b7a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=35343a3230203132206e614a3e30333c XMM01=7661532f64616f4c2064657472617453 XMM02=6c694b20465220657661532f64616f4c XMM03=747379732032343a35343a3230203132 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320343936 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000