Warning: Permanently added '[localhost]:34021' (ECDSA) to the list of known hosts. 2025/01/28 18:33:55 fuzzer started 2025/01/28 18:33:56 dialing manager at localhost:40187 syzkaller login: [ 59.484832] cgroup: Unknown subsys name 'net' [ 59.586696] cgroup: Unknown subsys name 'cpuset' [ 59.618083] cgroup: Unknown subsys name 'rlimit' [ 64.312032] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 18:34:13 syscalls: 2217 2025/01/28 18:34:13 code coverage: enabled 2025/01/28 18:34:13 comparison tracing: enabled 2025/01/28 18:34:13 extra coverage: enabled 2025/01/28 18:34:13 setuid sandbox: enabled 2025/01/28 18:34:13 namespace sandbox: enabled 2025/01/28 18:34:13 Android sandbox: enabled 2025/01/28 18:34:13 fault injection: enabled 2025/01/28 18:34:13 leak checking: enabled 2025/01/28 18:34:13 net packet injection: enabled 2025/01/28 18:34:13 net device setup: enabled 2025/01/28 18:34:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 18:34:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 18:34:13 USB emulation: enabled 2025/01/28 18:34:13 hci packet injection: enabled 2025/01/28 18:34:13 wifi device emulation: enabled 2025/01/28 18:34:13 802.15.4 emulation: enabled 2025/01/28 18:34:13 fetching corpus: 50, signal 19567/20863 (executing program) 2025/01/28 18:34:13 fetching corpus: 100, signal 22921/25226 (executing program) 2025/01/28 18:34:13 fetching corpus: 150, signal 26593/29658 (executing program) 2025/01/28 18:34:13 fetching corpus: 200, signal 28908/32696 (executing program) 2025/01/28 18:34:13 fetching corpus: 250, signal 30126/34641 (executing program) 2025/01/28 18:34:13 fetching corpus: 300, signal 33195/37934 (executing program) 2025/01/28 18:34:13 fetching corpus: 350, signal 34720/39855 (executing program) 2025/01/28 18:34:14 fetching corpus: 400, signal 35654/41263 (executing program) 2025/01/28 18:34:14 fetching corpus: 450, signal 37649/43324 (executing program) 2025/01/28 18:34:14 fetching corpus: 500, signal 39186/44950 (executing program) 2025/01/28 18:34:14 fetching corpus: 550, signal 41752/47096 (executing program) 2025/01/28 18:34:14 fetching corpus: 600, signal 43948/48826 (executing program) 2025/01/28 18:34:14 fetching corpus: 650, signal 44531/49528 (executing program) 2025/01/28 18:34:14 fetching corpus: 700, signal 44980/50133 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/51023 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/51350 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/51695 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/52018 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/52340 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/52659 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/52991 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/53330 (executing program) 2025/01/28 18:34:14 fetching corpus: 738, signal 46087/53675 (executing program) 2025/01/28 18:34:15 fetching corpus: 738, signal 46087/53984 (executing program) 2025/01/28 18:34:15 fetching corpus: 738, signal 46087/54301 (executing program) 2025/01/28 18:34:15 fetching corpus: 738, signal 46087/54635 (executing program) 2025/01/28 18:34:15 fetching corpus: 738, signal 46087/54948 (executing program) 2025/01/28 18:34:15 fetching corpus: 738, signal 46087/55167 (executing program) 2025/01/28 18:34:15 fetching corpus: 738, signal 46087/55167 (executing program) 2025/01/28 18:34:18 starting 8 fuzzer processes 18:34:18 executing program 0: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) r3 = fork() r4 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r1, r4, 0x10001}) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000140)=0x9) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000001c0)=""/7) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000200)='@(@:(\x00', 0x0, r1) write$P9_RGETLOCK(r1, &(0x7f0000000240)={0x22, 0x37, 0x1, {0x1, 0x77, 0x8000, 0x0, 0x4, ',(-\\'}}, 0x22) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000280)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x4d, 0x1}, 0x7) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000300)=""/69) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='notify_on_release\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) fsetxattr(r1, &(0x7f00000003c0)=@random={'os2.', '/dev/nvram\x00'}, &(0x7f0000000400)='/dev/nvram\x00', 0xb, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000440)) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0xffff, 0xc15, 0x20, 0x40, 0x2, 0x9}, {0xffffffff, 0x1, 0x5, 0x6, 0xb01}], ['\x00', '\x00', '\x00']}) 18:34:18 executing program 2: ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'veth1\x00', {0x9}, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x700, 0x2, 0x10000, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x67, 0x0, 0x1, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xaa, 0x1, 0xf, [{@local}, {@broadcast, 0x3f25}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x236e346}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}]}, @end, @end, @noop, @generic={0x82, 0x2}, @lsrr={0x83, 0xb, 0xe3, [@multicast1, @local]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x8, "4ace7e3ad769"}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xa8}}, 0x20040000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x801) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000007c0)={0x9f61, 0xd, 0x0, 0x7, 0x3, [{0x7, 0x6, 0x5, '\x00', 0x208}, {0x8, 0x100, 0x9, '\x00', 0x280}, {0x80, 0x4, 0x1f, '\x00', 0x300}]}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)={'filter\x00', 0x0, 0x0, 0x0, [0x943, 0x7fffffff, 0xffffffff, 0x20, 0x7]}, &(0x7f0000000940)=0x78) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockname$unix(r6, &(0x7f0000000b00)=@abs, &(0x7f0000000b80)=0x6e) ioctl$CDROMREADRAW(r6, 0x5314, &(0x7f0000000bc0)={0x78, 0x5, 0x3f, 0x40, 0x40, 0x1}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001640)=0x4326a7b7f3c491da) setsockopt(r1, 0xc97b, 0x1, &(0x7f0000001680)="fe9d7283ec3aeb6fed960bc0858bda3668c0f2905f057a4c18f921c5b5d6fd098f7c54482d157177119835e40131610607064ae7c12d6bdc13373eef7b7c1743469e9bc8111db3053560bb8004877f4004dfa1711c347d5254f15cb469e57833b9f4a9a9d1090e31497961745a73c28159f04441220d2cf6fff4ed80fe756e16ebc824b7fc7a03e3e54a", 0x8a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x124, 0x4, 0x5, 0x201, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x9}, [@nested={0x4a, 0x3, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@multicast1}, @generic="8d59b9d3dfd8cdda9f1c5536c0166ddae9affa662506daeb5ca693317754c083b9c5e6ffac5188f47422", @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @generic="9e4bb588d68f16a87638d6946a22d01cf03a1ddc723f28b95576cfcfab4cfadfe0fa20e8d46361a8943a0a6eb6305bb8eb0b26bb28cb7c3d5a29a47c4ff44969c511d4f47caed455159b08752c94a06fae3d22f1f96e19725bd5781b6138f216c1117741b06add693448b06a77aaacfdcf97366cbb211b2b650aac3600e717f74cb0741b561c9be8d04d02f88428828a2211103bede90db18555cc7981b6c61cad44454867ca814e55c43149f4616a8820d77ab598752aea77592abce62e846e5a35"]}, 0x124}}, 0x40000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000001940)) 18:34:18 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) r2 = openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x40, 0x80) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000180)=""/34, 0x22}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000200)={0xbbc, 0x200, 0x8001, 0x47e1, 0xd79, 0x5552}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x60200, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x35, 0x71, 0x5, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8, 0x81, 0x6}}) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1a8, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in=@local, 0x4e20, 0x1, 0x4e24, 0x0, 0x2, 0x60, 0xa0, 0x88, r5, 0xee01}, {0x6, 0xf8, 0xfffffffffffff6be, 0x3, 0x10001, 0x4, 0x7, 0xa03}, {0x6, 0x7fff000000000000, 0x2, 0x8}, 0x7, 0x6e6bb6, 0x0, 0x0, 0x7, 0x3}, {{@in=@remote, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3501, 0x2, 0x0, 0xff, 0x6, 0x2, 0xdafe}}, 0xe8) r7 = accept4$unix(r1, 0x0, &(0x7f00000008c0), 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000900)={{0x7fff}, 0x100, './file0\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000a40)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x198, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_EXP={0xe4, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10000}, @CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x7ff}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}]}]}]}, @NFQA_EXP={0x98, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5c}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xac, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc75a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x4004801) [ 81.401022] audit: type=1400 audit(1738089258.130:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:34:18 executing program 3: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0], 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x0, 0x25e}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x17e58555, 0x6, 0x9, 0x4], @subvolid=0xf94a}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000010c0)={0x40, 0x2, 0xbaf}) flistxattr(r0, &(0x7f0000001100)=""/63, 0x3f) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xb8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x401}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001300)={0x684, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x25c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "2b1eb20fca067031ae45c5aa5814f6086bd607021ab5ce061f91223d631cbb4427f53ffb3a549f994dce7668da4e3312d479710eff0d0fba28ad77e1b33a1e1ee2f1a8ad1bc81043f16e7a6420312c5ce529163a63b64965d05ec57fe51fc256f51d87cbb24f2a802898fb1d61539a4be7ec8bf6bf130d2029465dd9c90f5d3b78dde75db87a29b731673aae12c198c448710f38567e53214e47c092ef9887f525e20efe57a120d93f279176ed26c74c0dc19d303746219ce352223b2eda9302b265ff85b350752d34026a5fe0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "3321bc540dbe716ad6b99608ceda9ad81bdcf82ef3a9af2010c1c0e1e3b3a940a147b1560896abffc00e83e4af677599e56b040963e9960b9e9ce6bac6795a9d0000d0a8d720e298058800b38e90b6482e95c6d9ea03d390094d2fde810dde45490a3c51b1f385ac40f0602ac4ff0811bb5a12f831e950af416f2922a1f84007012168f3e14446578e3353af6d491895dd391631641f0e2c117b25aad1797c70edd21084298e0f1e99897e8fbe05d1443e29b79aac823603fae341f81048331394cc57ad6350613caed4ca27e6099345a69ae6ed71"}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "d54735a46dafde71a222a2de9874e7e17d3c75a4caebf6051c923ffb4cecbc2bfa4d06f5c50b93b96eac38d2fb492a1b1c304520cb77e81533d3d9bbac719a00fbd546fed6f4f693adbf1f2fdf1217aca33faefa0517ced250ff74a224d274651851a35cabd02717b8b06d4c4a62ed5ba6fb0bba2e22d609955719df91bd01ca75969e40a4d0d22ff4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf4caff6f65feb9eb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x280, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "079fb90b635d0ca943599eff143ed5b07375696540f0b281c49eb3178614a529ed65efb207fc9003753d4697"}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "96f807fbc65e2d1861f1a5941027da153eb427266ee204f0f87675a3ee9234fb19b65ecfdc2a7ee48e504e6b7863ddc335b8536c0ef842d2305dcd4bd9278c4b34249e4104544bf0567500affbffc57bddd499198138508428f29900a96783b184594d6d37"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'hash:ip,port\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-$^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '-.{{)/\xd5)\xed{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x49b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'u[6*@&#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'hash:ip,port\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3e}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'n\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4df6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}]}, 0x684}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = openat(0xffffffffffffffff, &(0x7f0000001a40)='./file0\x00', 0x101000, 0xc6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001a80)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001e80)={r3, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002280)={0x10, 0x52f94244a11e9462, {0x8, @usage=0x4, r4, 0x3, 0xffffffff, 0x3, 0x442, 0x3f, 0x100, @struct={0x1000, 0x7}, 0x8, 0x3, [0x9, 0x0, 0x319, 0x80000000, 0x2f, 0x4]}, {0x6, @struct={0x1ff, 0x9}, r5, 0x0, 0xfffffffffffff0be, 0x8000, 0x8, 0x7, 0x80, @usage=0x9, 0x3f, 0x3, [0x10001, 0x3, 0x52bd, 0x3d, 0x800, 0x73accb82]}, {0x1f, @struct={0x95, 0x8001}, 0x0, 0x9, 0x60000000000000, 0x1ff, 0x4, 0xfffffffffffffff7, 0x8, @struct={0x9, 0x8000}, 0xfffffffe, 0x4, [0x100000001, 0x6, 0x6, 0x6, 0x7f]}, {0x3, 0x5a57, 0x9}}) socketpair(0x3, 0x5, 0xfffffff8, &(0x7f0000003c80)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d00), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) fsync(r6) r9 = openat(r2, &(0x7f0000003e40)='./file0\x00', 0x0, 0x40) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x28, r8, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x40}, @NL80211_ATTR_PBSS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c000) 18:34:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x8081) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x40040) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6440}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d81e274}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73416e06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7df4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75c0919c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1517}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x490e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa81c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa53}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20de}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee83b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b6f2ea9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25e0a475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3738f557}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23863167}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba0d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17991590}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe83}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x657fa472}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x258873e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17e31ab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1295}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f05}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3897a36d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1d6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x330}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x378f8007}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e461a0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x763109bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ea5fe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}]}, 0x1a0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x84000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8c040000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0xa9e3fd8ce4afeb60, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1810}, 0xf7bf21cb0f92140) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000052}, 0x20040000) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000bc0), r7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r1) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040d1}, 0x8080) 18:34:18 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f0000000040)=@caif=@rfm, &(0x7f00000000c0)=0x80) r2 = fcntl$getown(r1, 0x9) getresgid(&(0x7f0000002540), &(0x7f0000002580)=0x0, &(0x7f00000025c0)=0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002600)={r2, 0xee00, r4}, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x727e739ca8896e43}, 0x20000004) r5 = mq_open(&(0x7f0000002740)=',\xf0{:[\x00', 0x40, 0x8, &(0x7f0000002780)={0x3, 0x9, 0x1df618b5, 0x9}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}}, 0x4004041) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f00000029c0), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x60, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8706}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) recvmmsg(r1, &(0x7f000000e180)=[{{&(0x7f0000002b40)=@ax25={{0x3, @rose}, [@rose, @null, @bcast, @netrom, @remote, @rose, @rose, @null]}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002bc0)=""/171, 0xab}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x2, &(0x7f0000003cc0)=""/214, 0xd6}, 0x400000}, {{&(0x7f0000003dc0)=@generic, 0x80, &(0x7f0000004100)=[{&(0x7f0000003e40)=""/123, 0x7b}, {&(0x7f0000003ec0)=""/216, 0xd8}, {&(0x7f0000003fc0)=""/243, 0xf3}, {&(0x7f00000040c0)=""/55, 0x37}], 0x4, &(0x7f0000004140)=""/154, 0x9a}, 0x80000000}, {{&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000004280)=""/8, 0x8}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/11, 0xb}, {&(0x7f0000005300)=""/134, 0x86}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/11, 0xb}, {&(0x7f0000006400)=""/128, 0x80}, {&(0x7f0000006480)=""/28, 0x1c}], 0x8, &(0x7f0000006540)=""/201, 0xc9}, 0x2}, {{&(0x7f0000006640)=@ethernet={0x0, @local}, 0x80, &(0x7f0000008980)=[{&(0x7f00000066c0)=""/42, 0x2a}, {&(0x7f0000006700)=""/214, 0xd6}, {&(0x7f0000006800)=""/167, 0xa7}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/81, 0x51}, {&(0x7f0000007940)=""/4, 0x4}, {&(0x7f0000007980)=""/4096, 0x1000}], 0x7}, 0x3}, {{&(0x7f0000008a00)=@nl=@proc, 0x80, &(0x7f0000009ec0)=[{&(0x7f0000008a80)=""/142, 0x8e}, {&(0x7f0000008b40)=""/43, 0x2b}, {&(0x7f0000008b80)=""/4096, 0x1000}, {&(0x7f0000009b80)=""/97, 0x61}, {&(0x7f0000009c00)=""/209, 0xd1}, {&(0x7f0000009d00)=""/152, 0x98}, {&(0x7f0000009dc0)=""/208, 0xd0}], 0x7}, 0x9}, {{&(0x7f0000009f40)=@ieee802154, 0x80, &(0x7f000000a580)=[{&(0x7f0000009fc0)=""/240, 0xf0}, {&(0x7f000000a0c0)=""/68, 0x44}, {&(0x7f000000a140)=""/102, 0x66}, {&(0x7f000000a1c0)=""/108, 0x6c}, {&(0x7f000000a240)=""/121, 0x79}, {&(0x7f000000a2c0)=""/91, 0x5b}, {&(0x7f000000a340)=""/178, 0xb2}, {&(0x7f000000a400)=""/205, 0xcd}, {&(0x7f000000a500)=""/99, 0x63}], 0x9, &(0x7f000000a640)=""/149, 0x95}, 0x446d}, {{&(0x7f000000a700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f000000a880)=[{&(0x7f000000a780)=""/233, 0xe9}], 0x1, 0xfffffffffffffffe}, 0x60}, {{&(0x7f000000a8c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000ab40)=[{&(0x7f000000a940)=""/202, 0xca}, {&(0x7f000000aa40)=""/78, 0x4e}, {&(0x7f000000aac0)=""/110, 0x6e}], 0x3, &(0x7f000000ab80)=""/195, 0xc3}, 0x80000000}, {{&(0x7f000000ac80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f000000e0c0)=[{&(0x7f000000ad00)=""/196, 0xc4}, {&(0x7f000000ae00)=""/4096, 0x1000}, {&(0x7f000000be00)=""/136, 0x88}, {&(0x7f000000bec0)=""/216, 0xd8}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/23, 0x17}, {&(0x7f000000d000)=""/185, 0xb9}, {&(0x7f000000d0c0)=""/4096, 0x1000}], 0x8, &(0x7f000000e140)=""/51, 0x33}, 0xffffffff}], 0x9, 0x2020, &(0x7f000000e3c0)={0x77359400}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f000000e540)={&(0x7f000000e400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000e500)={&(0x7f000000e440)={0xa4, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7886ad509fb51c01ee2785fe38da3ac9"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="dd4ad246ae32"}, @NL80211_ATTR_SSID={0x20, 0x34, @random="9f6b273bf83e8c739ff901f1f0a0209358d35a2c0fa23e6147eac543"}, @NL80211_ATTR_PMKID={0x14, 0x55, "21f977840ab53dff0bdb924099b52765"}, @NL80211_ATTR_PMKID={0x14, 0x55, "79b6e6bcc0addbe743b12272615727f1"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f000000e580)) setregid(r3, r3) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f000000e5c0)="09e25ce936b44b05d601f2644807f8d76aabb109e9bd6f68e140cd678420c536cce0888913a9ffcc97d0e1a0cdef05feab3d5f363048b37fb01eab0c31028a27aebd71a1274f", 0x46) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f000000e640)) ioctl(r5, 0x9, &(0x7f000000e680)="77d1c478e5554d8da4721085414cf7ddeb055a4af9d4de7c05ba505400adfffeae7fe66567095fb5af80f499e25c3ff7366029f714ce7a3068ec871ab13de1b649216d03e79eec82da1d128e93c8747bf481a55a67e64029dd0c0ed8024a345aae057f9db95a43c1f6b9bf9fe4996f41f6f15fa283072f8c") 18:34:18 executing program 6: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfffffffb}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x830, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x2a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "9aa293"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d76cefb386"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10000) write$P9_RWALK(r0, &(0x7f0000000580)={0x8b, 0x6f, 0x2, {0xa, [{0x40, 0x2, 0x1}, {0x8, 0x0, 0x7}, {0x40, 0x0, 0x6}, {0x80, 0x4, 0x2}, {0x20, 0x3}, {0x0, 0x1, 0x8}, {0x1, 0x1}, {0x4, 0x4, 0x1}, {0x8, 0xdcbe62d, 0x8}, {0x2, 0x0, 0x3}]}}, 0x8b) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000640)) write$P9_RWSTAT(r0, &(0x7f0000000680)={0x7, 0x7f, 0x2}, 0x7) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8400018c}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x33}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x14}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0x65}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "038993088fb70c31c5c2e11a2354a3d9deed9bf21eb11428"}], @NL80211_ATTR_4ADDR={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1e8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x178, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "8a8ee52cd11fd44c438d8a4cea0e159569c498fc7778f7b8bd80391ff3a291ee99e65a66e9770079347fdcd1dcdf53716bd5a9cbb60fb841d8068654e64d84794580f4be9d5c92428dd82c3c6ea361638e6287fbd0316d9ef952b6113a896efa87294beaccf6edd37149f584e9f03cab8bfcf3f2c2db0ae2c1f6986cf690bf286ff889210c14250c5d1d10a097cfd3145c82bba84e8931ed84eb048555e9a281c4e436d9a6c40454e2f0d99495e2d620ce80507560dfb5bb694af214e95b332023489a6ecaff7320641483f59058fd32c19ead30aa2d"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "4de74ea16b6951523e69963c50635e504b1057a1d3e4749fa033a1d3d5408b83a6d62fc47427418cf772301ac074f81a611bb64fc6a8f1fc82a76e6e21e3fa93352e2d561880cf1595199e89eadae60523aa1a5ff350e9e4c66bbcd0651e4232f9e81d3cd2f0a17cda0c6d5124e54e3035e6f1c7b8"}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "1f5a294b1cd7e07f8f5ef7e92748dc117e"}]}, @ETHTOOL_A_FEATURES_WANTED={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "550d064c3c62fcb46d86e40f69b43e420d18d0be8793241feff64d65079c86b9695d345f06077c5f884fc65b4e284031ce98ce0988e098977256402f95fbfdfce62cee0968cbf904b93f6a2c48859a7c6b"}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x87}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044004}, 0x20040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0x6c}, {0x36}, {0x2, 0x1}, {0x1}, {0x4}, {0x48}, {0x1b}, {0x12, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x6c, 0x1}, {0x1, 0x1}, {0x69, 0x1}, {0xc}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x20}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 18:34:18 executing program 7: ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040)) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000100)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000140)=0x8) r0 = fsmount(0xffffffffffffffff, 0x1, 0x136) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x2000200f}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x117003, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x6, 0x0, 0xfffffffffffffc92}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000300)={0x9, 0x10, [0x7, 0x7, 0x2, 0xaaff], &(0x7f00000002c0)=[0x0, 0x0]}) r4 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x94, 0x3}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xdc, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8, 0x1, 0x3, 0x2, 0x7, 0x7f, 0xffff, 0x6, 0x1, 0x2, 0xff00, 0x800, 0x400, 0x8, 0x1000, 0xd9d]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x3, 0x0, 0x0, {0x4, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7ff, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac06, 0xfac02, 0xfac12, 0xfac0d, 0xfac06, 0xfac13, 0xfac09, 0xfac0a]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x6, 0x1f, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7fffffff, 0x80}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10000000, {0x8000, 0x100, 0x7, 0xfff}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x1) r7 = fcntl$dupfd(r1, 0x0, r0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f00000005c0)={&(0x7f0000000580), 0x0, 0x3, 0x6}) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000640)={0x8, {0x18, 0xd09, 0x3, 0x1f, 0x1f}}) [ 82.892728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.900848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.903897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.914073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.917052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.922979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.925181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.925848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.927040] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.928880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.939228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.940010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.941478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.950841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.953183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.955883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.959600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.961051] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.962966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.965127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.972026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.973476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.975483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.977684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.983808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.986337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.993660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.995856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.001677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.002983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.005280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.010008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.012994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.017463] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.021960] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.024127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.026041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.032760] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.037911] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.040231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.045534] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.047020] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.077911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.078050] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.103877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.122530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.126385] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.137776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.103814] Bluetooth: hci2: command tx timeout [ 85.104729] Bluetooth: hci6: command tx timeout [ 85.105551] Bluetooth: hci1: command tx timeout [ 85.106268] Bluetooth: hci0: command tx timeout [ 85.168437] Bluetooth: hci7: command tx timeout [ 85.169074] Bluetooth: hci4: command tx timeout [ 85.170444] Bluetooth: hci3: command tx timeout [ 85.170488] Bluetooth: hci5: command tx timeout [ 87.154450] Bluetooth: hci6: command tx timeout [ 87.154584] Bluetooth: hci0: command tx timeout [ 87.154930] Bluetooth: hci1: command tx timeout [ 87.155532] Bluetooth: hci2: command tx timeout [ 87.215451] Bluetooth: hci5: command tx timeout [ 87.216381] Bluetooth: hci7: command tx timeout [ 87.216449] Bluetooth: hci4: command tx timeout [ 87.216803] Bluetooth: hci3: command tx timeout [ 89.199423] Bluetooth: hci1: command tx timeout [ 89.200393] Bluetooth: hci0: command tx timeout [ 89.200513] Bluetooth: hci2: command tx timeout [ 89.200923] Bluetooth: hci6: command tx timeout [ 89.264389] Bluetooth: hci3: command tx timeout [ 89.264832] Bluetooth: hci5: command tx timeout [ 89.265256] Bluetooth: hci4: command tx timeout [ 89.266018] Bluetooth: hci7: command tx timeout [ 91.247456] Bluetooth: hci2: command tx timeout [ 91.247998] Bluetooth: hci0: command tx timeout [ 91.248525] Bluetooth: hci1: command tx timeout [ 91.248963] Bluetooth: hci6: command tx timeout [ 91.312656] Bluetooth: hci7: command tx timeout [ 91.313553] Bluetooth: hci4: command tx timeout [ 91.313668] Bluetooth: hci5: command tx timeout [ 91.314164] Bluetooth: hci3: command tx timeout [ 139.558867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.559657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.903879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.905246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.288329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.288993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.565995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.566841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.311355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.312017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.469828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.470626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.990852] [ 141.991077] ====================================================== [ 141.991606] WARNING: possible circular locking dependency detected [ 141.992119] 6.13.0-next-20250128 #1 Not tainted [ 141.992517] ------------------------------------------------------ [ 141.993035] kworker/u8:1/65 is trying to acquire lock: [ 141.994744] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.997800] [ 141.997800] but task is already holding lock: [ 141.999450] ffff88800bd98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.000591] [ 142.000591] which lock already depends on the new lock. [ 142.000591] [ 142.001252] [ 142.001252] the existing dependency chain (in reverse order) is: [ 142.001864] [ 142.001864] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 142.002429] __mutex_lock+0x13d/0xb50 [ 142.002832] wiphy_register+0x1b2e/0x25d0 [ 142.003273] ieee80211_register_hw+0x23a4/0x3d60 [ 142.003739] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 142.004235] init_mac80211_hwsim+0x389/0x870 [ 142.004693] do_one_initcall+0xf9/0x640 [ 142.005110] kernel_init_freeable+0x53d/0x7a0 [ 142.005573] kernel_init+0x1e/0x2d0 [ 142.005944] ret_from_fork+0x48/0x80 [ 142.006320] ret_from_fork_asm+0x1a/0x30 [ 142.006747] [ 142.006747] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 142.007290] __lock_acquire+0x29fd/0x4580 [ 142.007710] lock_acquire+0x19b/0x520 [ 142.008102] __mutex_lock+0x13d/0xb50 [ 142.008503] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.009040] unregister_netdevice_queue+0x224/0x2e0 [ 142.009524] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.010010] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.010493] ieee80211_unregister_hw+0x55/0x3a0 [ 142.010950] hwsim_exit_net+0x3a0/0x730 [ 142.011362] ops_exit_list+0xb3/0x180 [ 142.011754] cleanup_net+0x546/0xad0 [ 142.012140] process_one_work+0x8ee/0x1a10 [ 142.012582] worker_thread+0x674/0xe70 [ 142.012992] kthread+0x3ab/0x720 [ 142.013357] ret_from_fork+0x48/0x80 [ 142.013727] ret_from_fork_asm+0x1a/0x30 [ 142.014154] [ 142.014154] other info that might help us debug this: [ 142.014154] [ 142.014802] Possible unsafe locking scenario: [ 142.014802] [ 142.015306] CPU0 CPU1 [ 142.015696] ---- ---- [ 142.016082] lock(&rdev->wiphy.mtx); [ 142.016427] lock(rtnl_mutex); [ 142.016920] lock(&rdev->wiphy.mtx); [ 142.017451] lock(rtnl_mutex); [ 142.017756] [ 142.017756] *** DEADLOCK *** [ 142.017756] [ 142.018244] 4 locks held by kworker/u8:1/65: [ 142.018619] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 142.019514] #1: ffff88800bc87d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 142.020360] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 142.021139] #3: ffff88800bd98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 142.022028] [ 142.022028] stack backtrace: [ 142.022410] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250128 #1 [ 142.022447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.022469] Workqueue: netns cleanup_net [ 142.022510] Call Trace: [ 142.022519] [ 142.022531] dump_stack_lvl+0xca/0x120 [ 142.022589] print_circular_bug+0x47b/0x750 [ 142.022635] check_noncircular+0x2e9/0x3c0 [ 142.022677] ? __pfx_check_noncircular+0x10/0x10 [ 142.022718] ? hlock_class+0x4e/0x130 [ 142.022749] ? mark_lock+0xac/0xed0 [ 142.022789] ? srso_return_thunk+0x5/0x5f [ 142.022844] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 142.022889] ? lockdep_lock+0xba/0x1b0 [ 142.022947] ? __pfx_lockdep_lock+0x10/0x10 [ 142.023008] __lock_acquire+0x29fd/0x4580 [ 142.023070] ? __pfx___lock_acquire+0x10/0x10 [ 142.023113] ? lock_release+0x20f/0x6f0 [ 142.023157] ? __pfx_lock_release+0x10/0x10 [ 142.023209] lock_acquire+0x19b/0x520 [ 142.023252] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.023301] ? __pfx_lock_acquire+0x10/0x10 [ 142.023345] ? srso_return_thunk+0x5/0x5f [ 142.023400] ? lock_release+0x20f/0x6f0 [ 142.023444] ? srso_return_thunk+0x5/0x5f [ 142.023499] ? lock_is_held_type+0x9e/0x120 [ 142.023554] ? srso_return_thunk+0x5/0x5f [ 142.023614] __mutex_lock+0x13d/0xb50 [ 142.023666] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.023711] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.023757] ? srso_return_thunk+0x5/0x5f [ 142.023812] ? synchronize_rcu_expedited+0x38a/0x420 [ 142.023856] ? __pfx___mutex_lock+0x10/0x10 [ 142.023909] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.023964] ? srso_return_thunk+0x5/0x5f [ 142.024019] ? kasan_quarantine_put+0x84/0x1e0 [ 142.024079] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.024114] ? srso_return_thunk+0x5/0x5f [ 142.024173] unregister_netdevice_many_notify+0x1612/0x1c80 [ 142.024224] ? __virt_addr_valid+0x2e8/0x5d0 [ 142.024279] ? __pfx_lock_release+0x10/0x10 [ 142.024324] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 142.024370] ? find_held_lock+0x2c/0x110 [ 142.024427] ? srso_return_thunk+0x5/0x5f [ 142.024485] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 142.024545] ? srso_return_thunk+0x5/0x5f [ 142.024600] ? lock_release+0x20f/0x6f0 [ 142.024644] ? __pfx_lock_release+0x10/0x10 [ 142.024687] ? srso_return_thunk+0x5/0x5f [ 142.024742] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.024789] ? srso_return_thunk+0x5/0x5f [ 142.024850] unregister_netdevice_queue+0x224/0x2e0 [ 142.024893] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 142.024936] ? up_write+0x195/0x520 [ 142.024991] _cfg80211_unregister_wdev+0x57b/0x700 [ 142.025043] ? srso_return_thunk+0x5/0x5f [ 142.025102] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 142.025141] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 142.025180] ? srso_return_thunk+0x5/0x5f [ 142.025235] ? srso_return_thunk+0x5/0x5f [ 142.025290] ? synchronize_rcu+0x1ff/0x260 [ 142.025333] ieee80211_unregister_hw+0x55/0x3a0 [ 142.025377] hwsim_exit_net+0x3a0/0x730 [ 142.025420] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.025460] ? srso_return_thunk+0x5/0x5f [ 142.025515] ? netdev_run_todo+0x788/0x1040 [ 142.025564] ? __pfx_hwsim_exit_net+0x10/0x10 [ 142.025606] ops_exit_list+0xb3/0x180 [ 142.025648] cleanup_net+0x546/0xad0 [ 142.025693] ? __pfx_cleanup_net+0x10/0x10 [ 142.025746] process_one_work+0x8ee/0x1a10 [ 142.025813] ? __pfx_process_one_work+0x10/0x10 [ 142.025870] ? srso_return_thunk+0x5/0x5f [ 142.025926] ? srso_return_thunk+0x5/0x5f [ 142.025981] ? move_linked_works+0x172/0x270 [ 142.026025] ? srso_return_thunk+0x5/0x5f [ 142.026080] ? assign_work+0x196/0x240 [ 142.026137] worker_thread+0x674/0xe70 [ 142.026195] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 142.026247] ? __pfx_worker_thread+0x10/0x10 [ 142.026307] kthread+0x3ab/0x720 [ 142.026358] ? __pfx_kthread+0x10/0x10 [ 142.026409] ? srso_return_thunk+0x5/0x5f [ 142.026465] ? finish_task_switch.isra.0+0x206/0x840 [ 142.026515] ? __pfx_kthread+0x10/0x10 [ 142.026569] ret_from_fork+0x48/0x80 [ 142.026600] ? __pfx_kthread+0x10/0x10 [ 142.026652] ret_from_fork_asm+0x1a/0x30 [ 142.026718] [ 142.202534] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 142.369556] syz-executor.7 (284) used greatest stack depth: 23584 bytes left [ 144.377791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.381771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.385734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.391087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.393930] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.395195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.439759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.442510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.446876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.450328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.452354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.453645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.505506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.506348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.508422] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.510124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.512204] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.513092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.516929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.528464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.533767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.540585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.551085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.555687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.565742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.583336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.610647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.611557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.620426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.621152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.629531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.632176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.633014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.635842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.636900] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.638750] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.652499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.654133] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.687445] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.688092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.688932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.697550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.415378] Bluetooth: hci0: command tx timeout [ 146.479676] Bluetooth: hci1: command tx timeout [ 146.544335] Bluetooth: hci3: command tx timeout [ 146.607481] Bluetooth: hci2: command tx timeout [ 146.671379] Bluetooth: hci7: command tx timeout [ 146.735353] Bluetooth: hci6: command tx timeout [ 146.799408] Bluetooth: hci4: command tx timeout [ 148.463336] Bluetooth: hci0: command tx timeout [ 148.528358] Bluetooth: hci1: command tx timeout [ 148.591327] Bluetooth: hci3: command tx timeout [ 148.655366] Bluetooth: hci2: command tx timeout [ 148.719577] Bluetooth: hci7: command tx timeout [ 148.784315] Bluetooth: hci6: command tx timeout [ 148.847363] Bluetooth: hci4: command tx timeout [ 150.512394] Bluetooth: hci0: command tx timeout [ 150.575488] Bluetooth: hci1: command tx timeout [ 150.640385] Bluetooth: hci3: command tx timeout [ 150.703369] Bluetooth: hci2: command tx timeout [ 150.767466] Bluetooth: hci7: command tx timeout [ 150.833489] Bluetooth: hci6: command tx timeout [ 150.895336] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 18:35:18 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bc86c90 R8 =0000000000000000 R9 =ffffed1001d51046 R10=0000000000000065 R11=6666666666666666 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0345dd96f0 CR3=0000000015a08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415effe000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888015b50000 RSI=ffffffff818e6db1 RDI=0000000000000000 RBP=ffffea00008fea00 RSP=ffff888015547558 R8 =0000000000000000 R9 =fffff9400011fd40 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000036650 R14=ffffffff818e4800 R15=8000000023fa8067 RIP=ffffffff818e6db3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030b10 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bc46297168 CR3=00000000135ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=000000c000918e00000000c0008b9ac0 XMM04=000000c0009ddec0000000c0009dd100 XMM05=000000c000b884c0000000c000b88040 XMM06=000000c000bdeba0000000c000b88d40 XMM07=000000c000872420000000c000bdec00 XMM08=000000c000c7b480000000c0009f3c40 XMM09=000000c000494200000000c000c7b140 XMM10=000000c000494540000000c000494480 XMM11=000000c0004952c0000000c000494400 XMM12=000000c00037f700000000c00037f840 XMM13=000000c000886a80000000c00037fd00 XMM14=000000c000460300000000c000b84a80 XMM15=000000c00045c450000000c00045c420