Warning: Permanently added '[localhost]:45496' (ECDSA) to the list of known hosts. 2025/01/19 05:55:15 fuzzer started 2025/01/19 05:55:16 dialing manager at localhost:44245 syzkaller login: [ 63.480206] cgroup: Unknown subsys name 'net' [ 63.584297] cgroup: Unknown subsys name 'cpuset' [ 63.630183] cgroup: Unknown subsys name 'rlimit' [ 69.863785] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 05:55:34 syscalls: 200 2025/01/19 05:55:34 code coverage: enabled 2025/01/19 05:55:34 comparison tracing: enabled 2025/01/19 05:55:34 extra coverage: enabled 2025/01/19 05:55:34 setuid sandbox: enabled 2025/01/19 05:55:34 namespace sandbox: enabled 2025/01/19 05:55:34 Android sandbox: enabled 2025/01/19 05:55:34 fault injection: enabled 2025/01/19 05:55:34 leak checking: enabled 2025/01/19 05:55:34 net packet injection: enabled 2025/01/19 05:55:34 net device setup: enabled 2025/01/19 05:55:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 05:55:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 05:55:34 USB emulation: enabled 2025/01/19 05:55:34 hci packet injection: enabled 2025/01/19 05:55:34 wifi device emulation: enabled 2025/01/19 05:55:34 802.15.4 emulation: enabled 2025/01/19 05:55:34 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 05:55:36 starting 8 fuzzer processes 05:55:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xa3756f6af88fe669}, 0x20044109) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000340), 0x2, 0x0) r3 = io_uring_setup(0x5a14, &(0x7f0000000380)={0x0, 0x398, 0x10, 0x1, 0x7c}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x2400c044) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800d009}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4001) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xabf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaa}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6cc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x120}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0xc000, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000900)={0xe}) rt_sigaction(0x34, &(0x7f0000000cc0)={&(0x7f0000000c40)="0f65022e67457965c401101512de3d55e5000064262ef3f367e100c4e15d1522f0f79a000000006666f2a5c4a17ee66a0fc402f5457200", 0x80000002, &(0x7f0000000c80)="f2440f5eb958000000fa410f0144560ff244aec4c17b70f1498f29189981c80e000036f20f1c827e07a9c3c46190163ccec4018d73fb37260fa9", {[0xa14a]}}, &(0x7f0000000d80)={&(0x7f0000000d00)="0ad5c4e3796884b8f834000000c462b3f77b0cc40261dead00000100f30f5d0366660f12403fc4c17bd0ec660f1093000000803ed8f8c4e27d79fd", 0x0, &(0x7f0000000d40)="4380700e3ec401fa12448bfbc4a1fe5b240464f2440fa86726f20f18c4c4c27d06fe366745cc400f0d9f050000008f6978dbce470f01de"}, 0x8, &(0x7f0000000dc0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x24}}, 0x4000800) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x111}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044005}, 0x14080) openat$cgroup_pressure(r1, &(0x7f0000001000)='io.pressure\x00', 0x2, 0x0) 05:55:36 executing program 1: sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40094) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048}, 0x20000815) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40040850) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x10b9}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xc6004900}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r8, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) 05:55:36 executing program 6: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044090}, 0x20000850) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0xf, 0x800, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6bf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040840) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x1, 0x385000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) ptrace$peekuser(0x3, 0x0, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) r6 = syz_open_dev$vcsa(&(0x7f0000000440), 0x1, 0x40840) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f0000000480)={{0x2, 0x4}, {0xffffffffd12b4e58, 0x7ff}, 0x4, 0x1}) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa5b4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x29}}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000010}, 0x24040050) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x80200, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000700), 0x2, 0x0) 05:55:37 executing program 2: r0 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/203) socket(0x9, 0x0, 0x40) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x418041, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r2 = shmget(0x1, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r3 = io_uring_setup(0x2f1, &(0x7f0000000180)={0x0, 0x3be5, 0x2, 0x3, 0x167, 0x0, r1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) r4 = shmget(0x2, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000200)=""/70) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000280)=""/57) r5 = shmget(0x1, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) shmctl$SHM_LOCK(r5, 0xb) [ 84.101675] audit: type=1400 audit(1737266137.037:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:55:37 executing program 7: socketpair(0x8, 0x80000, 0x74, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe86}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x65}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040010}, 0x4044011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x45) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2040000}, 0x8008800) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x64, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x79}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x44851}, 0x20004884) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x77b2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socketpair(0x27, 0x5, 0x8, &(0x7f0000001880)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x6c, r4, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "96a74fa29c2528cc535263e417c54dac"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2295a09d3a86a6061e94f441ddf28408"}, @NL80211_ATTR_PMK={0x14, 0xfe, "65805a2d2d6ef63b01c0226b7f7fe107"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4de955b09fc16fc9f4f4eeea3c849fbb"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40080) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000001a40), &(0x7f0000001a80)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000001e80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001b40)={0x2e0, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x150, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008001) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x110, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x54}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff9f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x48000}, 0x44804) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002100), r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000002240)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002200)={&(0x7f0000002140)={0x88, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) 05:55:37 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20020000) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2f0, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x114, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x134, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffc77}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2f0}}, 0x564345b1a5cf4c85) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x44000004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa4, r6, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xa4}}, 0x80) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r10, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbbd52d13ac91b87f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 05:55:37 executing program 5: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x8, 0xffffffff, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc7e}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x50) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4c8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x890}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0xffffffff, 0x2e02) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0xcc2952ea1cac2a03) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000540), 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xbd, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x7, 0x70, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5000, 0xac}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0xf7, "8edea957"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x7f, 0x2, "66ce6024"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x5, 0x3, "7efb0a9d5d20"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x8, 0x3], 0xff}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x1, 0x2, [0x9, 0x3]}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0xff, "ede66f38"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x20, 0x7, 'l\te', 'l'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x6a, {0x7, 0x25, 0x1, 0x2, 0x6, 0x1304}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x54, 0x1, 0x1, {0x7, 0x25, 0x1, 0x82, 0x10, 0x7ff}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1f, 0x1f, 0x3f, 0x8, 0x2}, 0x50, &(0x7f0000000680)={0x5, 0xf, 0x50, 0x6, [@wireless={0xb, 0x10, 0x1, 0x3, 0x100, 0x5f, 0x0, 0x1, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xe, 0x2, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x6, 0x80, 0x100, 0x9d}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x7b00000, 0xf007, 0xffff, [0xff0030, 0xf, 0xc0, 0xffc030, 0xf, 0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x4, 0x2}]}, 0x7, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x444}}, {0x85, &(0x7f0000000780)=@string={0x85, 0x3, "b0865e6f304849efd7d4b540f86e8ff0ac0a112f59c809e7eedeea7a5e8d16161f5ac948dd354f7f65b64e2c9106073b211583a159d336b18b272a739cbfb23ab0dc904ee6f1f0fefa910fff5d13fc30d15eb3f33d43ed8e1c4b93713a9e1d03c74cfc63d1201747df8fce469b31b0ed8ff60e8a353ea361aeed9e3b0b8101858d34e2"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x437}}, {0x77, &(0x7f0000000880)=@string={0x77, 0x3, "7aa9466996330fc33e1eaa2fafbcbd3b66b83af1c8a408652e68d8d0fb8807d17368c747f5d6048be05bc54cd8d53681a0e6b59a028c8d2a0f060ac77390a564e289cf435578e0365117ae6c899dc865449a11296f0e574226e03bc7f5ac946785236c217cd9eed36eb571a896cd6f8ac2152a1a63"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x100c}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r4) accept$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x144, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x400c8d1}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e40), 0x121180, 0x0) read$rfkill(r8, &(0x7f0000000e80), 0x8) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x14c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x274}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfff, @empty, 0x3c}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x808}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd7}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x14f0}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8841}, 0x8015) syz_usb_connect$uac1(0x0, 0xf9, &(0x7f0000001100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x0, 0x90, 0xea, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x20}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0x9, "b057539a51b0"}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x33}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x1, "247f"}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x464, 0x0, "131e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x2, 0x1, 0x6, "5c7fae4199"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x400, 0xec, "2516eeda"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xff, 0x2, 0x81, 0x26, "", "cf33"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x81, 0x1, "f870"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xc0, 0x80, {0x7, 0x25, 0x1, 0x81, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7f, 0x9f, "6b81e6", "067145"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x4b, 0x7f, '^'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x80, "45977d"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0x81, 'j'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x5, 0x5, "b8cff6", "32e135"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xe0, 0x2, {0x7, 0x25, 0x1, 0x2, 0x40, 0x2}}}}}}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x201, 0x4, 0xf0, 0x9, 0x8, 0x8}, 0x31, &(0x7f0000001240)={0x5, 0xf, 0x31, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xd, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3b6ef74a32d71a969274a8ea2c99cf59"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x4, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x6, 0x93}]}, 0x6, [{0x9f, &(0x7f0000001280)=@string={0x9f, 0x3, "610aa9b4e0a519a57db65e845291c4437d5e9f19aeb06d3aec84e06f9ceb1840a15849e7046399a9755591362e99d6e5575109b0a86606f13b665e47a9de7850bbb3b0f79fa9c7d24eab00a74c00ce3c86ad0bc7607739daa661759b3ce49c179e404c5b4068c7d3853588e45d5c9eec7bef0858e926913329583c1661cc984231f066ba45be6b71d083b22a32bb6a8651d901c8df2b6a143443b8ea72"}}, {0x5, &(0x7f0000001340)=@string={0x5, 0x3, "ccdff4"}}, {0xc2, &(0x7f0000001380)=@string={0xc2, 0x3, "2e68e7faae39f0fb5d8ea63a768e85e018facf2f64595d5e7968dccb134b114c8d2982bc4dbe1306e747aaa267983bdfcf653980b38981c5fb6eedee813746b452268185493c3a3f8bab433bb24664cfa1f0ec5de8ad06b6e3e299f07d37950dfc5ad951a3c062ec33c3c3c1f391063bd8bfbec34914fa8d7d96853096a45b638a51b4db9265c284cfa5725236c42e57bb5f03c599d4fd594adae4dd388158955b7b400817403081cd0f7761cc2db9bce8b9fcc1bb91ad79349b698200ee6d65"}}, {0x10, &(0x7f0000001480)=@string={0x10, 0x3, "a17199f1a58b02fc6f128460f3d7"}}, {0x3e, &(0x7f00000014c0)=@string={0x3e, 0x3, "42edb61964404ce2c2410ff50127725731074be62d1f34f97e34eaa65e844dfe0b65786bbfadcc0339c179b29a0c70d5641dc731b0912e99f488acd0"}}, {0xc3, &(0x7f0000001500)=@string={0xc3, 0x3, "08e5bbc4b073cee465e4d0c7eef4da0bf314868706aefcfb52a038a305ff3879ee9bd0fcf84cf9d90be87a0844c83427da8d25b257e093b9ca9fd98e8c175d2dedce30a0f01054cf9e4dd9fac9455355fa6403c648730304478db06c3952d6941df05d904cc6354ff77dc0904b711d196e22c1a061baae0733d7d5f95e9b8a1dd97beec32b6559ba9756c348065832d92473f66482eafee9eaaaeadf794bd936adb5900749e318403a4bc10539ef4c93e24bd6bdec724dd544f9306c77faba81f6"}}]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x41e, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x40) 05:55:37 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, r0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa6b7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x401}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffb96d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x64e4fcbabcb1c203}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm, @window={0x3, 0x7ff, 0x3}, @mss={0x2, 0x4}, @mss={0x2, 0x200}, @mss={0x2, 0xe4}, @timestamp, @timestamp, @window={0x3, 0x5, 0x6}], 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x28, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x20cc20fcedb488a2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x500000004}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) accept4$packet(r4, &(0x7f0000000740), &(0x7f0000000780)=0x14, 0x800) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x20004090) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000008c0)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200044}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x204, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}}, 0x90) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x2200, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000ac0), &(0x7f0000000b00)=0xe, 0x80800) accept4$packet(r1, &(0x7f0000000b40), &(0x7f0000000b80)=0x14, 0x0) socketpair(0x3, 0x2, 0x4457, &(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) [ 85.494458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.496630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.500874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.501985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.504054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.506800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.509545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.512315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.515481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.534382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.561810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.563023] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.568677] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.569234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.572997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.586386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.601553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.604025] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.606033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.615003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.616873] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.619082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.624398] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.626454] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.709715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.713541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.714462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.717730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.723740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.724357] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.729309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.740784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.741484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.755606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.764761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.769673] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.776505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.779703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.781730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.792030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.796451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.808631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.808901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.812670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.813010] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.815257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.816719] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.820352] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.575536] Bluetooth: hci1: command tx timeout [ 87.640563] Bluetooth: hci0: command tx timeout [ 87.704515] Bluetooth: hci3: command tx timeout [ 87.705167] Bluetooth: hci2: command tx timeout [ 87.831510] Bluetooth: hci4: command tx timeout [ 87.831833] Bluetooth: hci5: command tx timeout [ 87.895318] Bluetooth: hci7: command tx timeout [ 87.895960] Bluetooth: hci6: command tx timeout [ 89.624567] Bluetooth: hci1: command tx timeout [ 89.688278] Bluetooth: hci0: command tx timeout [ 89.751291] Bluetooth: hci2: command tx timeout [ 89.752801] Bluetooth: hci3: command tx timeout [ 89.879686] Bluetooth: hci5: command tx timeout [ 89.879813] Bluetooth: hci4: command tx timeout [ 89.943613] Bluetooth: hci6: command tx timeout [ 89.944440] Bluetooth: hci7: command tx timeout [ 91.672454] Bluetooth: hci1: command tx timeout [ 91.736168] Bluetooth: hci0: command tx timeout [ 91.799189] Bluetooth: hci3: command tx timeout [ 91.799532] Bluetooth: hci2: command tx timeout [ 91.927301] Bluetooth: hci5: command tx timeout [ 91.927388] Bluetooth: hci4: command tx timeout [ 91.992089] Bluetooth: hci6: command tx timeout [ 91.992352] Bluetooth: hci7: command tx timeout [ 93.721193] Bluetooth: hci1: command tx timeout [ 93.784282] Bluetooth: hci0: command tx timeout [ 93.848264] Bluetooth: hci2: command tx timeout [ 93.848317] Bluetooth: hci3: command tx timeout [ 93.975281] Bluetooth: hci5: command tx timeout [ 93.976435] Bluetooth: hci4: command tx timeout [ 94.039209] Bluetooth: hci6: command tx timeout [ 94.040329] Bluetooth: hci7: command tx timeout [ 132.151321] modprobe (3051) used greatest stack depth: 24216 bytes left [ 145.182787] syz-executor.1 (281) used greatest stack depth: 24000 bytes left [ 145.422711] syz-executor.4 (283) used greatest stack depth: 23312 bytes left [ 147.554177] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.559271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.563035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.569789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.579191] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.581844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.616389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.619249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.619798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.627415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.639305] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.649337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.826696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.830589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.832445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.847463] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.850954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.859695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.875721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.884580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.904462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.906260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.913499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.921032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.923806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.929245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.937561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.937981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.943233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.944583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.944990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.954785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.962707] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.964192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.975264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.976895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.979658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.985503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.985792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.999217] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.999671] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.000636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.031322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.032035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.032936] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.033394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.072383] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.075706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.655239] Bluetooth: hci0: command tx timeout [ 149.719236] Bluetooth: hci1: command tx timeout [ 149.912197] Bluetooth: hci2: command tx timeout [ 150.039771] Bluetooth: hci3: command tx timeout [ 150.039793] Bluetooth: hci4: command tx timeout [ 150.103457] Bluetooth: hci6: command tx timeout [ 150.103863] Bluetooth: hci5: command tx timeout [ 150.167176] Bluetooth: hci7: command tx timeout [ 151.703180] Bluetooth: hci0: command tx timeout [ 151.769119] Bluetooth: hci1: command tx timeout [ 151.959161] Bluetooth: hci2: command tx timeout [ 152.087311] Bluetooth: hci4: command tx timeout [ 152.088812] Bluetooth: hci3: command tx timeout [ 152.152311] Bluetooth: hci5: command tx timeout [ 152.152338] Bluetooth: hci6: command tx timeout [ 152.217122] Bluetooth: hci7: command tx timeout [ 153.751191] Bluetooth: hci0: command tx timeout [ 153.817142] Bluetooth: hci1: command tx timeout [ 154.009144] Bluetooth: hci2: command tx timeout [ 154.137166] Bluetooth: hci3: command tx timeout [ 154.137255] Bluetooth: hci4: command tx timeout [ 154.199387] Bluetooth: hci5: command tx timeout [ 154.200224] Bluetooth: hci6: command tx timeout [ 154.263294] Bluetooth: hci7: command tx timeout [ 155.800509] Bluetooth: hci0: command tx timeout [ 155.864340] Bluetooth: hci1: command tx timeout [ 156.056236] Bluetooth: hci2: command tx timeout [ 156.184224] Bluetooth: hci4: command tx timeout [ 156.184480] Bluetooth: hci3: command tx timeout [ 156.248235] Bluetooth: hci6: command tx timeout [ 156.248337] Bluetooth: hci5: command tx timeout [ 156.311300] Bluetooth: hci7: command tx timeout [ 207.893361] [ 207.893623] ====================================================== [ 207.894221] WARNING: possible circular locking dependency detected [ 207.894817] 6.13.0-rc7-next-20250117 #1 Not tainted [ 207.895302] ------------------------------------------------------ [ 207.896476] kworker/u8:0/11 is trying to acquire lock: [ 207.897611] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.899491] [ 207.899491] but task is already holding lock: [ 207.900931] ffff888034b48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.903212] [ 207.903212] which lock already depends on the new lock. [ 207.903212] [ 207.904760] [ 207.904760] the existing dependency chain (in reverse order) is: [ 207.906024] [ 207.906024] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 207.906671] __mutex_lock+0x13d/0xb50 [ 207.907110] wiphy_register+0x1b2e/0x25d0 [ 207.907572] ieee80211_register_hw+0x23a4/0x3d60 [ 207.908100] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 207.908674] init_mac80211_hwsim+0x389/0x870 [ 207.909276] do_one_initcall+0xf9/0x640 [ 207.909825] kernel_init_freeable+0x53d/0x7a0 [ 207.910426] kernel_init+0x1e/0x2d0 [ 207.910919] ret_from_fork+0x48/0x80 [ 207.911345] ret_from_fork_asm+0x1a/0x30 [ 207.911806] [ 207.911806] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 207.912402] __lock_acquire+0x29fd/0x4580 [ 207.912877] lock_acquire+0x19b/0x520 [ 207.913300] __mutex_lock+0x13d/0xb50 [ 207.913733] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.914313] unregister_netdevice_queue+0x224/0x2e0 [ 207.914832] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.915430] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.915963] ieee80211_unregister_hw+0x55/0x3a0 [ 207.916453] hwsim_exit_net+0x3a0/0x730 [ 207.916913] ops_exit_list+0xb3/0x180 [ 207.917337] cleanup_net+0x546/0xad0 [ 207.917789] process_one_work+0x8ee/0x1a10 [ 207.918299] worker_thread+0x674/0xe70 [ 207.918765] kthread+0x3ab/0x720 [ 207.919168] ret_from_fork+0x48/0x80 [ 207.919603] ret_from_fork_asm+0x1a/0x30 [ 207.920122] [ 207.920122] other info that might help us debug this: [ 207.920122] [ 207.920935] Possible unsafe locking scenario: [ 207.920935] [ 207.921508] CPU0 CPU1 [ 207.922013] ---- ---- [ 207.922531] lock(&rdev->wiphy.mtx); [ 207.922987] lock(rtnl_mutex); [ 207.923650] lock(&rdev->wiphy.mtx); [ 207.924302] lock(rtnl_mutex); [ 207.924661] [ 207.924661] *** DEADLOCK *** [ 207.924661] [ 207.925202] 4 locks held by kworker/u8:0/11: [ 207.925639] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 207.926656] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 207.927765] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 207.928809] #3: ffff888034b48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.929945] [ 207.929945] stack backtrace: [ 207.930389] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 207.931195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 207.931975] Workqueue: netns cleanup_net [ 207.932405] Call Trace: [ 207.932670] [ 207.932911] dump_stack_lvl+0xca/0x120 [ 207.933327] print_circular_bug+0x47b/0x750 [ 207.933767] check_noncircular+0x2e9/0x3c0 [ 207.934197] ? __pfx_check_noncircular+0x10/0x10 [ 207.934675] ? hlock_class+0x4e/0x130 [ 207.935064] ? mark_lock+0xac/0xed0 [ 207.935446] ? srso_return_thunk+0x5/0x5f [ 207.935888] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 207.936370] ? lockdep_lock+0xba/0x1b0 [ 207.936798] ? __pfx_lockdep_lock+0x10/0x10 [ 207.937330] __lock_acquire+0x29fd/0x4580 [ 207.937831] ? __pfx___lock_acquire+0x10/0x10 [ 207.938356] ? lock_release+0x20f/0x6f0 [ 207.938825] ? __pfx_lock_release+0x10/0x10 [ 207.939340] lock_acquire+0x19b/0x520 [ 207.939799] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.940469] ? __pfx_lock_acquire+0x10/0x10 [ 207.940979] ? srso_return_thunk+0x5/0x5f [ 207.941478] ? lock_release+0x20f/0x6f0 [ 207.941951] ? srso_return_thunk+0x5/0x5f [ 207.942453] ? lock_is_held_type+0x9e/0x120 [ 207.942904] ? srso_return_thunk+0x5/0x5f [ 207.943345] __mutex_lock+0x13d/0xb50 [ 207.943730] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.944277] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.944827] ? srso_return_thunk+0x5/0x5f [ 207.945241] ? synchronize_rcu_expedited+0x38a/0x420 [ 207.945728] ? __pfx___mutex_lock+0x10/0x10 [ 207.946179] ? __pfx_autoremove_wake_function+0x10/0x10 [ 207.946727] ? srso_return_thunk+0x5/0x5f [ 207.947166] ? kasan_quarantine_put+0x84/0x1e0 [ 207.947648] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 207.948114] ? srso_return_thunk+0x5/0x5f [ 207.948563] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.949142] ? __virt_addr_valid+0x2e8/0x5d0 [ 207.949611] ? __pfx_lock_release+0x10/0x10 [ 207.950047] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 207.950654] ? find_held_lock+0x2c/0x110 [ 207.951088] ? srso_return_thunk+0x5/0x5f [ 207.951508] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 207.951992] ? srso_return_thunk+0x5/0x5f [ 207.952418] ? lock_release+0x20f/0x6f0 [ 207.952811] ? __pfx_lock_release+0x10/0x10 [ 207.953224] ? srso_return_thunk+0x5/0x5f [ 207.953656] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.954176] ? srso_return_thunk+0x5/0x5f [ 207.954613] unregister_netdevice_queue+0x224/0x2e0 [ 207.955111] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 207.955665] ? up_write+0x195/0x520 [ 207.956058] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.956564] ? srso_return_thunk+0x5/0x5f [ 207.957017] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.957530] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 207.958086] ? srso_return_thunk+0x5/0x5f [ 207.958581] ? srso_return_thunk+0x5/0x5f [ 207.959078] ? synchronize_rcu+0x1ff/0x260 [ 207.959571] ieee80211_unregister_hw+0x55/0x3a0 [ 207.960117] hwsim_exit_net+0x3a0/0x730 [ 207.960588] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.961121] ? srso_return_thunk+0x5/0x5f [ 207.961625] ? netdev_run_todo+0x788/0x1040 [ 207.962073] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.962530] ops_exit_list+0xb3/0x180 [ 207.962925] cleanup_net+0x546/0xad0 [ 207.963318] ? __pfx_cleanup_net+0x10/0x10 [ 207.963761] process_one_work+0x8ee/0x1a10 [ 207.964191] ? __pfx_lock_acquire+0x10/0x10 [ 207.964616] ? __pfx_process_one_work+0x10/0x10 [ 207.965071] ? srso_return_thunk+0x5/0x5f [ 207.965565] ? move_linked_works+0x172/0x270 [ 207.966043] ? srso_return_thunk+0x5/0x5f [ 207.966478] ? assign_work+0x196/0x240 [ 207.966899] worker_thread+0x674/0xe70 [ 207.967327] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.967869] ? __pfx_worker_thread+0x10/0x10 [ 207.968345] kthread+0x3ab/0x720 [ 207.968728] ? __pfx_kthread+0x10/0x10 [ 207.969147] ? srso_return_thunk+0x5/0x5f [ 207.969586] ? finish_task_switch.isra.0+0x206/0x840 [ 207.970070] ? __pfx_kthread+0x10/0x10 [ 207.970458] ret_from_fork+0x48/0x80 [ 207.970834] ? __pfx_kthread+0x10/0x10 [ 207.971252] ret_from_fork_asm+0x1a/0x30 [ 207.971700] [ 209.633868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.636894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.641495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.645989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.648836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.652395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.697299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.701812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.703129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.704347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.708410] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.710177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.714479] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.716982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.719648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.727421] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.741658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.745189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.774232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.802606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.807451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.827679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.833398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.836556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.840581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.840885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.851211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.864266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.870351] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.872050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.927693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.927733] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.935690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.936045] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.940890] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.944455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.949490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.973448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.975221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.976539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.977807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.978420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.980389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.982036] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.984374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.000494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.001672] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.002224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.671153] Bluetooth: hci0: command tx timeout [ 211.801126] Bluetooth: hci1: command tx timeout [ 211.801220] Bluetooth: hci2: command tx timeout [ 211.927160] Bluetooth: hci4: command tx timeout [ 211.927315] Bluetooth: hci3: command tx timeout [ 212.055377] Bluetooth: hci5: command tx timeout [ 212.055560] Bluetooth: hci7: command tx timeout [ 212.119128] Bluetooth: hci6: command tx timeout [ 213.719169] Bluetooth: hci0: command tx timeout [ 213.847244] Bluetooth: hci2: command tx timeout [ 213.847429] Bluetooth: hci1: command tx timeout [ 213.975159] Bluetooth: hci4: command tx timeout [ 213.975240] Bluetooth: hci3: command tx timeout [ 214.103200] Bluetooth: hci5: command tx timeout [ 214.103282] Bluetooth: hci7: command tx timeout [ 214.169097] Bluetooth: hci6: command tx timeout [ 215.767134] Bluetooth: hci0: command tx timeout [ 215.895149] Bluetooth: hci2: command tx timeout [ 215.895232] Bluetooth: hci1: command tx timeout [ 216.023145] Bluetooth: hci4: command tx timeout [ 216.023225] Bluetooth: hci3: command tx timeout [ 216.151184] Bluetooth: hci5: command tx timeout [ 216.151263] Bluetooth: hci7: command tx timeout [ 216.215337] Bluetooth: hci6: command tx timeout [ 217.815120] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 05:57:41 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000066 R11=3038383866666666 R12=0000000000000066 R13=0000000000000001 R14=ffff888008fea011 R15=ffff8880095dee28 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d7fcc552f8 CR3=0000000015f44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0000a9ae0000000c0000a9ad8 XMM04=000000c00001d3a0000000c0000a9b28 XMM05=000000c0000a9b40000000c0000a9b38 XMM06=000000c0000a9b50000000c0000a9b48 XMM07=000000c0000a9b60000000c0000a9b58 XMM08=000000c0000a9bf0000000c0000a9be8 XMM09=000000c0000a9c00000000c0000a9bf8 XMM10=000000c0000a9c10000000c0000a9c08 XMM11=000000c0000a9c20000000c0000a9c18 XMM12=000000c0000a9c30000000c0000a9c28 XMM13=000000c0000a9c40000000c0000a9c38 XMM14=000000c0000a9c50000000c0000a9c48 XMM15=000000c0000a9c60000000c0000a9c58 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff88431ab8 RCX=ffffffff81429a4a RDX=1ffff11001bcc380 RSI=0000000000000008 RDI=ffff88800de61c00 RBP=0000000000000000 RSP=ffff88800f8e7dd0 R8 =0000000000000000 R9 =ffffed1001bcc380 R10=ffff88800de61c07 R11=ffff88800de7d7f8 R12=ffffffff88431ff9 R13=ffff888008c504a0 R14=ffff88800de7d340 R15=0000000000000086 RIP=ffffffff81aede14 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f01c29931a0 CR3=0000000015f44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416fcce000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000